Cloud-delivered and on-premises solutions that enforce least-privilege access to applications and resources using continuous authentication, microsegmentation, and policy-based access controls.
Cloudflare and Zscaler together dominate AI responses for Zero Trust Network Access Providers. Both brands consistently surface unprompted, with the model treating them as the default answers for most category queries. Brands outside the top two face a structural disadvantage: users are usually given these two before the model even considers alternatives.
Ranked by overall AI Visibility Score (smoothed geometric mean of LBA, Authority, and TOM with an LBA-based floor on Authority and TOM, see methodology). Click any brand for the full report.
| # | Brand | LBA | Authority | TOM | Overall |
|---|---|---|---|---|---|
| 1 |
Cloudflare
cloudflare.com
|
91 | 100 | 86 | 92 |
| 2 |
Zscaler
zscaler.com
|
86 | 85 | 100 | 90 |
| 3 |
Palo Alto Networks
paloaltonetworks.com
|
87 | 35 | 91 | 65 |
| 4 |
Microsoft
microsoft.com
|
92 | 33 | 57 | 56 |
| 5 |
Netskope
netskope.com
|
81 | 18 | 76 | 50 |
| 6 |
Twingate
twingate.com
|
69 | 35 | 47 | 49 |
| 7 |
Cisco
cisco.com
|
77 | 13 | 65 | 42 |
| 8 |
Akamai
akamai.com
|
75 | 8 | 60 | 35 |
| 9 |
Fortinet
fortinet.com
|
90 | 9 | 13 | 24 |
| 10 |
Check Point
checkpoint.com
|
77 | 8 | 16 | 23 |
| 11 |
Tailscale
tailscale.com
|
89 | 9 | 9 | 21 |
| 12 |
Appgate
appgate.com
|
62 | 6 | 17 | 20 |
| 13 |
Cato Networks
catonetworks.com
|
78 | 8 | 8 | 19 |
| 14 |
Citrix
citrix.com
|
78 | 8 | 8 | 19 |
| 15 |
NordLayer
nordlayer.com
|
78 | 8 | 8 | 19 |
| 16 |
Perimeter 81
perimeter81.com
|
77 | 8 | 8 | 19 |
| 17 |
Teleport
goteleport.com
|
80 | 8 | 8 | 19 |
| 18 |
Okta
okta.com
|
75 | 7 | 7 | 18 |
| 19 |
OpenVPN
openvpn.net
|
75 | 7 | 7 | 18 |
| 20 |
StrongDM
strongdm.com
|
75 | 7 | 7 | 18 |
| 21 |
HPE Aruba Networking
arubanetworks.com
|
69 | 7 | 7 | 17 |
| 22 |
Menlo Security
menlosecurity.com
|
68 | 7 | 7 | 17 |
| 23 |
F5
f5.com
|
66 | 7 | 7 | 16 |
| 24 |
iboss
iboss.com
|
67 | 7 | 7 | 16 |
| 25 |
OpenZiti
openziti.io
|
65 | 7 | 7 | 16 |
| 26 |
SonicWall
sonicwall.com
|
59 | 6 | 6 | 15 |
| 27 |
NetFoundry
netfoundry.io
|
55 | 6 | 6 | 14 |
| 28 |
Portnox
portnox.com
|
54 | 5 | 5 | 14 |
| 29 |
SSH Communications Security
ssh.com
|
51 | 5 | 5 | 13 |
| 30 |
B
Banyan Security
banyansecurity.io
|
45 | 4 | 4 | 12 |
| 31 |
Cyolo
cyolo.io
|
45 | 4 | 4 | 11 |
| 32 |
GoodAccess
goodaccess.com
|
44 | 4 | 4 | 11 |
| 33 |
Ivanti Service Manager
ivanti.com
|
32 | 3 | 3 | 9 |
| 34 |
CA Service Desk Manager
broadcom.com
|
18 | 2 | 2 | 5 |
Every brand in this leaderboard is scored against the same set of 269 shared Zero Trust Network Access Providers prompts. The same prompts, same model, same iterations. So differences in scores reflect actual differences in AI visibility, not differences in measurement.
composite = ((LBA + 5)(Authority + 5)(TOM + 5))^(1/3) - 5. The floor keeps brands the model clearly recognises but doesn't yet recommend from collapsing to zero, while a single genuinely weak metric still pulls the composite down. Full methodology.
quality × meta × stability × share × recognition × 100. Read the full LBA methodology →