The most visible vulnerability scanners in United Kingdom, October 2026

October 2026 · 15 questions asked from United Kingdom in English · ChatGPT, Google AI Overviews, Gemini and Google AI Mode · 60 answers read

Leader

Snyk

43Heralded Score, range 35–54

Most cited source

g2.com

2citations

From Google AI Overviews

Where engines disagree most

Qualys

1/4engines put it in their top three

Top three on Google AI Overviews, not on Google AI Mode, Gemini and ChatGPT

Brands

Search is not measured for this board yet, so it ranks on AI answers.

Rank Brand Rank change Heralded Score All AI Score trend Mentioned Recommended By engine Mentioned by Change
1 Snyk GB New entry 43 , range 35–54 43#1
43
  • : score 43 · #1
44% 14% None First reading
2 OWASP ZAP US New entry 36 , range 29–46 36#2
36
  • : score 36 · #2
30% 12% None First reading
3 Trivy IL New entry 35 , range 26–44 35#3
35
  • : score 35 · #3
31% 7% None First reading
4 Burp Suite GB New entry 32 , range 14–41 32#4
32
  • : score 32 · #4
26% 5% None First reading
5 Tenable Nessus US New entry 16 , range 6–35 16#5
16
  • : score 16 · #5
15% 4% None First reading
6 Tenable Vulnerability Management US New entry 10 , range 4–34 10#6
10
  • : score 10 · #6
13% 2% None First reading
7 Qualys US New entry 9 , range 4–33 9#7
9
  • : score 9 · #7
11% 2% None First reading
8 Greenbone OpenVAS DE New entry 8 , range 3–33 8#8
8
  • : score 8 · #8
8% 5% None First reading
9 Orca Security IL New entry 7 , range 3–32 7#9
7
  • : score 7 · #9
10% 1% None First reading
= 10 Tenable One US New entry 7 , range 2–32 7= #10
7
  • : score 7 · #10
8% 2% None First reading

“=” marks brands whose score ranges overlap, so the test cannot separate them. Every brand named in at least three answers is ranked. AI gives each brand’s score and rank from the engines’ answers; Search is not measured for this board yet. By engine has one dot per engine (ChatGPT, Google AI Overviews, Gemini and Google AI Mode), darker the more often it names the brand.

Most cited sources

Rank Source Type Cited in Engines Pages cited Brands its pages mention
1 g2.com Review site 1.7% 1 of 4 2 Not read
2 appsecsanta.com Review site 1.7% 1 of 4 1 Not read
3 code-quality.io Review site 1.7% 1 of 4 1 Not read
4 spotsaas.com Review site 1.7% 1 of 4 1 Not read
5 toolradar.com Review site 1.7% 1 of 4 1 Not read

Questions asked

QuestionLanguageMost recommended
what vulnerability scanner should a security team use to find software flaws English Snyk
which tool can scan our applications for security vulnerabilities English OWASP ZAP and Snyk, tied
how do small engineering teams scan code for vulnerabilities English Trivy
what can help developers find vulnerabilities before release English OWASP ZAP
how can i find vulnerabilities across our applications English No brand recommended
how do we catch security flaws in code before deployment English Burp Suite and OWASP ZAP, tied
how can my team find and prioritize software vulnerabilities English AWS Inspector
how do i check whether our software has known vulnerabilities English Greenbone OpenVAS and Qualys, tied
should we scan source code or running applications for vulnerabilities English No brand recommended
what works better for finding flaws, manual reviews or automated scans English No brand recommended

Each engine's top three

Google AI Mode

No brand named in at least three answers.

Method

Each leaderboard ranks brands on two sides. AI is how ChatGPT, Gemini, Google AI Overviews and Google AI Mode answer the board's buyer questions. Search is Google's top 10 results for the keywords behind those questions. All combines the two, where Search is measured.

For the AI side, each month Heralded asks every engine the same buyer questions, twice each, and reads every answer. An answer counts 0 for a brand it leaves out, 50 for a brand it names and 100 for a brand it recommends, and the Heralded Score is built from those. A brand named in at least three answers gets a score and a place.

How the leaderboards are measured