Advanced platforms focused on continuous monitoring, threat detection, investigation, and automated response for endpoint incidents.
CrowdStrike and Microsoft together dominate AI responses for Endpoint Detection and Response. Both brands consistently surface unprompted, with the model treating them as the default answers for most category queries. Brands outside the top two face a structural disadvantage: users are usually given these two before the model even considers alternatives.
Ranked by overall AI Visibility Score (smoothed geometric mean of LBA, Authority, and TOM with an LBA-based floor on Authority and TOM, see methodology). Click any brand for the full report.
| # | Brand | LBA | Authority | TOM | Overall |
|---|---|---|---|---|---|
| 1 |
CrowdStrike
crowdstrike.com
|
88 | 100 | 100 | 96 |
| 2 |
Microsoft
microsoft.com
|
89 | 100 | 100 | 96 |
| 3 |
SentinelOne
sentinelone.com
|
88 | 63 | 89 | 79 |
| 4 |
Sophos
sophos.com
|
85 | 34 | 83 | 63 |
| 5 |
Palo Alto Networks
paloaltonetworks.com
|
89 | 20 | 79 | 53 |
| 6 |
Trend Micro
trendmicro.com
|
80 | 14 | 58 | 42 |
| 7 |
Carbon Black
carbonblack.com
|
75 | 8 | 35 | 29 |
| 8 |
Cisco
cisco.com
|
83 | 8 | 19 | 25 |
| 9 |
Bitdefender Anti-Tracker
bitdefender.com
|
41 | 8 | 35 | 24 |
| 10 |
Fortinet
fortinet.com
|
78 | 8 | 8 | 19 |
| 11 |
Huntress
huntress.com
|
78 | 8 | 8 | 19 |
| 12 |
Kaspersky
kaspersky.com
|
77 | 8 | 8 | 19 |
| 13 |
Tanium
tanium.com
|
75 | 7 | 7 | 18 |
| 14 |
Acronis
acronis.com
|
71 | 7 | 7 | 17 |
| 15 |
Cybereason
cybereason.com
|
69 | 7 | 7 | 17 |
| 16 |
Cylance
cylance.com
|
67 | 7 | 7 | 16 |
| 17 |
Trellix
trellix.com
|
63 | 6 | 7 | 16 |
| 18 |
Cynet
cynet.com
|
61 | 6 | 6 | 15 |
| 19 |
Malwarebytes Browser Guard
malwarebytes.com
|
62 | 6 | 6 | 15 |
| 20 |
Morphisec
morphisec.com
|
58 | 6 | 6 | 15 |
| 21 |
Seqrite
seqrite.com
|
59 | 6 | 6 | 15 |
| 22 |
WithSecure
withsecure.com
|
61 | 6 | 6 | 15 |
| 23 |
AhnLab
ahnlab.com
|
57 | 6 | 6 | 14 |
| 24 |
Deep Instinct
deepinstinct.com
|
57 | 6 | 6 | 14 |
| 25 |
HarfangLab
harfanglab.io
|
56 | 6 | 6 | 14 |
| 26 |
Panda Security
pandasecurity.com
|
55 | 6 | 6 | 14 |
| 27 |
Xcitium
xcitium.com
|
55 | 5 | 5 | 14 |
| 28 |
Heimdal
heimdalsecurity.com
|
53 | 5 | 5 | 13 |
| 29 |
VIPRE
vipre.com
|
53 | 5 | 5 | 13 |
| 30 |
TEHTRIS
tehtris.com
|
47 | 5 | 5 | 12 |
| 31 |
ESET Secure Authentication
eset.com
|
45 | 4 | 4 | 11 |
| 32 |
WatchGuard AuthPoint
watchguard.com
|
41 | 4 | 4 | 11 |
| 33 |
K7 Security
k7computing.com
|
31 | 3 | 3 | 8 |
Every brand in this leaderboard is scored against the same set of 263 shared Endpoint Detection and Response prompts. The same prompts, same model, same iterations. So differences in scores reflect actual differences in AI visibility, not differences in measurement.
composite = ((LBA + 5)(Authority + 5)(TOM + 5))^(1/3) - 5. The floor keeps brands the model clearly recognises but doesn't yet recommend from collapsing to zero, while a single genuinely weak metric still pulls the composite down. Full methodology.
quality × meta × stability × share × recognition × 100. Read the full LBA methodology →