The most visible vulnerability scanners in Netherlands, October 2026

October 2026 · 15 questions asked from Netherlands in Dutch and English · ChatGPT, Google AI Overviews, Gemini and Google AI Mode · 60 answers read

Leader

OWASP ZAP

36Heralded Score, range 27–45

Most cited source

owasp.org

31citations

From Google AI Mode, Google AI Overviews and ChatGPT

Where engines disagree most

Trivy

1/4engines put it in their top three

Top three on ChatGPT, not on Google AI Mode, Gemini and Google AI Overviews

Brands

Search is not measured for this board yet, so it ranks on AI answers.

Rank Brand Rank change Heralded Score All AI Score trend Mentioned Recommended By engine Mentioned by Change
– Invicti GB Unranked Too few answers Not measured
–
  • : Unranked
3% 0% First reading
– Microsoft Threat Vulnerability Management US Unranked Too few answers Not measured
–
  • : Unranked
2% 2% None First reading
– Nikto US Unranked Too few answers Not measured
–
  • : Unranked
0% 0% First reading
– Nuclei US Unranked Too few answers Not measured
–
  • : Unranked
1% 0% First reading
– Orca Security IL Unranked Too few answers Not measured
–
  • : Unranked
0% 0% First reading
– Pentest-Tools.com RO Unranked Too few answers Not measured
–
  • : Unranked
0% 0% None First reading
– Probely PT Unranked Too few answers Not measured
–
  • : Unranked
0% 0% None First reading
– Rapid7 InsightAppSec US Unranked Too few answers Not measured
–
  • : Unranked
1% 0% First reading
– Rapid7 InsightVM US Unranked Too few answers Not measured
–
  • : Unranked
1% 0% None First reading
– safety Unranked Too few answers Not measured
–
  • : Unranked
1% 0% None First reading

“=” marks brands whose score ranges overlap, so the test cannot separate them. Every brand named in at least three answers is ranked. AI gives each brand’s score and rank from the engines’ answers; Search is not measured for this board yet. By engine has one dot per engine (ChatGPT, Google AI Overviews, Gemini and Google AI Mode), darker the more often it names the brand.

Most cited sources

Rank Source Type Cited in Engines Pages cited Brands its pages mention
11 overheid.nl Regulator 5.0% 2 of 4 1 3
12 reddit.com Community 5.0% 1 of 4 3 Not read
13 aquilax.ai Vendor site 3.3% 2 of 4 1 2
14 atlassian.com Vendor site 3.3% 2 of 4 2 Not read
15 devops.com Media 1.7% 1 of 4 2 Not read
16 google.github.io Community 1.7% 1 of 4 2 Not read
17 kodekloud.com Vendor site 3.3% 1 of 4 1 2
18 ncsc.nl Regulator 3.3% 2 of 4 2 Not read
19 nhimg.org Industry authority 3.3% 1 of 4 2 Not read
20 oligo.security Vendor site 3.3% 2 of 4 1 1

Questions asked

QuestionLanguageMost recommended
how do application scans compare with dependency checks for finding vulnerabilities English No brand recommended
should developers or security teams own vulnerability scanning English No brand recommended
what can replace manual security checks before each software release English No brand recommended
how can we replace spreadsheets for tracking software vulnerabilities English BeyondTrust Vulnerability Management, Microsoft Threat Vulnerability Management, Tenable Nessus, Tenable One and Tenable Vulnerability Management, tied
what can replace separate scanners for code and dependencies English Snyk

Each engine's top three

Google AI Mode

No brand named in at least three answers.

Google AI Overviews

  1. 1 Snyk

Method

Each leaderboard ranks brands on two sides. AI is how ChatGPT, Gemini, Google AI Overviews and Google AI Mode answer the board's buyer questions. Search is Google's top 10 results for the keywords behind those questions. All combines the two, where Search is measured.

For the AI side, each month Heralded asks every engine the same buyer questions, twice each, and reads every answer. An answer counts 0 for a brand it leaves out, 50 for a brand it names and 100 for a brand it recommends, and the Heralded Score is built from those. A brand named in at least three answers gets a score and a place.

How the leaderboards are measured