Which brands does AI name for questions about cybersecurity?

1. 01“Welk securitybedrijf voert betrouwbare pentests uit in Nederland?”
2. 02“Wat kost een pentest voor een webapplicatie?”
3. 03“Welke partijen helpen mkb met NIS2-verplichtingen?”
4. 04“Welke aanbieders doen phishing-awareness trainingen voor personeel?”
5. 05“Welke bedrijven leveren monitoring en incidentrespons voor mkb?”
6. 06“Welke partij helpt bij ISO 27001-certificering?”
7. 07“Wat doe ik na een ransomware-aanval en wie kan direct helpen?”
8. 08“Welke securitybedrijven zijn gespecialiseerd in cloudbeveiliging?”

Without a brand name, in Dutch, with the Netherlands as market. The same set every week.

The personas behind the questions

• Directeur die na een phishingincident maatregelen neemt
• IT-manager die een pentest inkoopt
• Bedrijf dat aan NIS2 of ISO 27001 moet voldoen

Personas and questions are in Dutch: the index measures the Dutch market.

• 01Every question goes to the engines through their API in a clean session: no account, no history, no personalisation.
• 02Brand names are extracted from each answer (text extraction). Per brand the decision layer judges whether it is a real brand in this sector, whether it is a marketplace, how it is spoken about and how prominently it appears. That certainty is shown in the table.
• 03Brands only count when the probability that they are a real brand is at least 50%. Borderline cases are left out.
• 04Share is measured over a four-week window with a 95% confidence interval. Names that turn out to be the same company are merged once the decision layer confirms it.
• 05Engines without a usable API (such as Google AI Overviews) are not in this index. Browser captures of consumer products follow once the capture service is publicly available; those will be labelled separately.