Which AI application and agent security vendors AI assistants name, Oct 2026
How ChatGPT, Perplexity and Google AI Mode answer 3 buyer questions on AI application and agent security: 15 answers, 19–21 Oct 2026, India.
What this page is. AEOLedger sells answer engine optimization services, so we have an interest in these results. 15 answers (3 questions × 5 runs), collected 21 October 2026 from one location, read by hand. Vendors are named only when an assistant named them; being listed here is a count, not an endorsement or a ranking. The data is downloadable as CSV.
Summary
- 64 different vendors were named across 15 answers, the longest list in either batch. Lakera (Check Point) was the only vendor named in more than half (10 of 15, first in 7).
- On the shadow-AI visibility question the assistants barely overlapped: ChatGPT named network-security incumbents (Netskope first in 3 of 3), while one Perplexity answer named 19 vendors and shared none of them with ChatGPT's three answers.
- Google AI Mode named the vendors whose own 'best tools' articles it cited, on all three questions.
- 48 further vendors were named in 1 or 2 of 15 answers each.
The 3 buyer questions
Written in buyer wording, without any vendor’s name. Each question was asked in a fresh session every run (runs per question: ChatGPT 3, Perplexity 1, Google AI Mode 1), so 5 answers per question and 15 in all.
| # | Type | Question |
|---|---|---|
| C6-1 | shortlist | “What are the best AI security platforms for securing LLM apps and agents?” |
| C6-2 | requirements | “Which tools detect and block prompt injection in production LLM applications?” |
| C6-3 | requirements | “Which tools give security teams visibility into shadow AI use and AI agent activity across a company?” |
Who gets named
Named in X of N: answers whose text recommends or lists the vendor.
Apps, 21 October 2026, Bengaluru, India. ChatGPT (logged out, fresh chat, 3 runs per question); Perplexity (signed in to one account, fresh thread, 1 run per question); Google AI Mode (signed in, personalisation off, 1 run per question). N = 15 answers per vendor.
| Vendor | Answers | Named | By assistant |
|---|---|---|---|
| Lakera (Check Point) | 10 of 15 | ChatGPT 6/9, Perplexity 2/3, Google AI Mode 2/3 | |
| NVIDIA NeMo Guardrails | 6 of 15 | ChatGPT 5/9, Perplexity 0/3, Google AI Mode 1/3 | |
| Palo Alto Networks AI Runtime Security | 6 of 15 | ChatGPT 4/9, Perplexity 1/3, Google AI Mode 1/3 | |
| Prompt Security | 6 of 15 | ChatGPT 3/9, Perplexity 1/3, Google AI Mode 2/3 | |
| Amazon Bedrock Guardrails | 5 of 15 | ChatGPT 4/9, Perplexity 1/3, Google AI Mode 0/3 | |
| Check Point | 5 of 15 | ChatGPT 3/9, Perplexity 0/3, Google AI Mode 2/3 | |
| Microsoft Prompt Shields | 5 of 15 | ChatGPT 3/9, Perplexity 1/3, Google AI Mode 1/3 | |
| Google Cloud Model Armor | 4 of 15 | ChatGPT 2/9, Perplexity 1/3, Google AI Mode 1/3 | |
| Guardrails AI | 4 of 15 | ChatGPT 3/9, Perplexity 0/3, Google AI Mode 1/3 | |
| HiddenLayer | 4 of 15 | ChatGPT 3/9, Perplexity 1/3, Google AI Mode 0/3 | |
| Zenity | 4 of 15 | ChatGPT 2/9, Perplexity 1/3, Google AI Mode 1/3 | |
| Arcjet | 3 of 15 | ChatGPT 2/9, Perplexity 0/3, Google AI Mode 1/3 | |
| Meta Prompt Guard | 3 of 15 | ChatGPT 2/9, Perplexity 1/3, Google AI Mode 0/3 | |
| Microsoft Entra Global Secure Access | 3 of 15 | ChatGPT 2/9, Perplexity 0/3, Google AI Mode 1/3 | |
| Netskope | 3 of 15 | ChatGPT 3/9, Perplexity 0/3, Google AI Mode 0/3 | |
| Promptfoo | 3 of 15 | ChatGPT 2/9, Perplexity 1/3, Google AI Mode 0/3 |
What gets cited
Domains the assistants linked as sources, counted once per answer.
| Domain | Type | Cited in |
|---|---|---|
| lakera.ai | cited site | 7 of 15 |
| learn.microsoft.com | cited site | 7 of 15 |
| checkpoint.com | cited site | 6 of 15 |
| github.com | cited site | 5 of 15 |
| paloaltonetworks.com | cited site | 5 of 15 |
| docs.aws.amazon.com | cited site | 4 of 15 |
| zenity.io | cited site | 3 of 15 |
| hiddenlayer.com | cited site | 3 of 15 |
| microsoft.com | cited site | 3 of 15 |
Method
- Fieldwork 19–21 Oct 2026, Bengaluru, India, consumer apps. 3 buyer questions written without any vendor name. ChatGPT was asked each question 3 times (logged out, fresh chat); Perplexity and Google AI Mode once each. 15 answers, every one read in full.
- A vendor counts as named when the answer recommends or compares it, including a row in a comparison table. Vendors mentioned only as an acquisition note, as 'the big names to avoid', or in follow-up suggestions are not counted. Product lines are counted under their company.
The full protocol is on the methodology page.
Limits
- 15 answers per category, 5 per question: enough to say 'named in every answer' or 'in none', not to order vendors in the middle (95% intervals overlap).
- One location (India), no VPN. Perplexity ran in one signed-in account and Google AI Mode signed in with personalisation off; logged-out results may differ.
- Companies we track are not named on this page. As anonymised vendors they appear as 'an AI security vendor' only when named in 10 or more of 15 answers, shown as '10+ of 15' without a per-assistant split, and are otherwise left out; their sites are left out of the sources list.
Data
Download the data (CSV): one row per vendor and per cited domain, with the count, N, assistant split, date and location. Licensed CC BY 4.0: reuse it with a link to this page.
Want this for your own category, with your brand in it? Request a free snapshot.
How to cite and changes
AEOLedger. “Which AI application and agent security vendors AI assistants name, Oct 2026.” AI Shortlist Index v1.0, 22 October 2026. https://aeoledger.com/research/ai-shortlist/ai-security/
- v1.0, 22 October 2026: first published.
Spotted an error? Write to hello@aeoledger.com. Corrections are dated here.