Runtime application self-protection software: AI search visibility ranking (2026)
How AI search engines rank runtime application self-protection software by visibility and citations. 20 brands measured monthly across Google AI Mode: which brands the AI names in answers, which domains it cites as sources, and how the leaders compare. Application security tools used to detect and block attacks inside live applications at runtime. Composite score: 70% visibility (% of AI answers naming the brand) + 30% citation rate (% citing the brand's domain). Full methodology →
Refreshed Jun 13, 2026Download this ranking as a PDF
We'll email it to you. One-off send — no list, no follow-up, no surprise marketing.
At a glance
What we observed in this categoryauto-generated
Contrast Security holds the top rank in this category with a composite score of 20.0, more than double Imperva's 8.8. Both brands share an identical visibility percentage of 12.5, yet Contrast Security carries a citation rate of 37.5% against Imperva's zero. That citation gap is the decisive factor separating the two leaders, and it signals that Google AI Mode treats Contrast Security as a trusted source rather than merely a named entity in a response.
The divergence between visibility and citation is stark across the board. Imperva is named in AI responses at the same rate as Contrast Security (12.5% visibility) but receives zero citations, meaning AI describes it without anchoring on its own domain as evidence. Every other brand in the top ten sits at 0.0% for both metrics, against a category average of 1.2% visibility and 1.9% citation, confirming that meaningful AI presence in this category is currently concentrated in just two brands.
The top cited sources in this category are dominated by third-party and community platforms, specifically reddit.com, g2.com, youtube.com, slashdot.org, and appsecsanta.com, alongside contrastsecurity.com itself and crowdstrike.com. The presence of preemptive.com and appsecsanta.com alongside mainstream review sites suggests Google AI Mode is anchoring on niche security community content. Contrast Security is the only brand whose own domain appears in the cited sources list, reinforcing its citation advantage over all peers.
Movers & shakers since last refresh
Biggest visibility risers
-
Contrast Security 0% → 12% · rank #0 → #1+12pp
-
Imperva 0% → 12% · rank #0 → #2+12pp
The ranking
| # | Brand | Visibility | Citation | Top engine |
|---|---|---|---|---|
| 1 |
contrastsecurity.com
|
12% | 38% | Google AI Mode |
Contrast Security leads with a composite score of 20.0 and a 37.5% citation rate, the only brand in the category with non-zero citations and its own domain in the top cited sources list. |
||||
| 2 |
imperva.com
|
12% | 0% | Google AI Mode |
Imperva matches Contrast Security's 12.5% visibility but holds a 0.0% citation rate, giving it a composite score of just 8.8 versus the leader's 20.0. |
||||
| 3 |
veracode.com
|
0% | 0% | Google AI Mode |
Veracode sits at rank 3 with 0.0% visibility, 0.0% citation, and a composite score of 0.0, placing it entirely outside current Google AI Mode responses for this category. |
||||
| 4 |
hdivsecurity.com
|
0% | 0% | Google AI Mode |
Hdiv records 0.0% across all AI visibility metrics, matching Veracode and every other brand ranked 3 through 10, with no measurable Google AI Mode presence detected. |
||||
| 5 |
checkmarx.com
|
0% | 0% | Google AI Mode |
Checkmarx holds rank 5 but shares the same 0.0% visibility and citation figures as ranks 3, 4, 6, 7, 8, 9, and 10, making its relative positioning indistinct from that group. |
||||
| 6 |
opentext.com
|
0% | 0% | Google AI Mode |
| 7 |
appdome.com
|
0% | 0% | Google AI Mode |
| 8 |
guardsquare.com
|
0% | 0% | Google AI Mode |
| 9 |
promon.io
|
0% | 0% | Google AI Mode |
| 10 |
digital.ai
|
0% | 0% | Google AI Mode |
| 11 |
pradeo.com
|
0% | 0% | Google AI Mode |
| 12 |
nowsecure.com
|
0% | 0% | Google AI Mode |
| 13 |
sqreen.com
|
0% | 0% | Google AI Mode |
| 14 |
jscrambler.com
|
0% | 0% | Google AI Mode |
| 15 |
f5.com
|
0% | 0% | Google AI Mode |
| 16 |
akamai.com
|
0% | 0% | Google AI Mode |
| 17 |
wallarm.com
|
0% | 0% | Google AI Mode |
| 18 |
snyk.io
|
0% | 0% | Google AI Mode |
| 19 |
fastly.com
|
0% | 0% | Google AI Mode |
| 20 |
appsealing.com
|
0% | 0% | Google AI Mode |
Sources AI engines trust in this category
Across the 8 buyer-intent queries we ran on runtime application self-protection software, these are the domains Google AI Mode cited most often. If you're not on this list — or if your competitors are — that's a concrete PR / linkbuilding target.
How to read this ranking
Four things worth knowing before you act on the numbers above. These are the same definitions across every industry page — for category-specific observations, see the What we observed section above (where available) and the per-brand insights inline in the ranking.
Visibility = being named
A brand's visibility % is the share of AI answers that mention it by name in the response prose. This is who AI engines actively recommend to the buyer.
Citation rate = being trusted
Citation rate is the share of AI answers that include the brand's domain as a clickable source link. This is what the AI treats as authoritative evidence — different from being named.
Top engine differs by brand
The "top engine" column shows which AI surface each brand performs best on. Big gaps between a brand's score across engines usually points to specific content or schema gaps.
Rankings move month to month
AI engines re-crawl and re-rank on shorter cycles than classical search. We re-audit every brand on this list at least every 30 days and refresh this page automatically.
Get your own runtime application self-protection software brand audited
The brands above were curated from public market-leader lists. Want the same measurement against your own brand — including the queries you appear on, which competitors get named instead, and a prioritised fix list? Run a free preview.
Frequently asked about runtime application self-protection software AI visibility
Who leads AI visibility in Runtime application self-protection software?
Contrast Security leads with a composite score of 20.0 and 12.5% visibility. It is the only brand in the category with a non-zero citation rate, recorded at 37.5%.
How large is the gap between the top brand and the rest of the category?
Contrast Security and Imperva both achieve 12.5% visibility, while every other tracked brand sits at 0.0%, against a category average of just 1.2% visibility.
What sources does Google AI Mode cite most for RASP software research?
The most cited sources are reddit.com, g2.com, youtube.com, preemptive.com, contrastsecurity.com, slashdot.org, appsecsanta.com, and crowdstrike.com. Contrastsecurity.com is the only brand-owned domain in that list.
Can a brand appear in AI responses without being cited as a source?
Yes. Imperva has 12.5% visibility but a 0.0% citation rate, meaning Google AI Mode names it in responses without linking to its domain as a supporting source.
Which engine is driving AI visibility for this category?
All 20 tracked brands list Google AI Mode as their top engine, indicating the audit data is sourced entirely from Google AI Mode responses with no other engine contributing meaningfully.
Are there any brands that recently entered AI visibility in this category?
Contrast Security and Imperva are both identified as the biggest visibility risers, each moving from 0.0% to 12.5% visibility in the current period with no brands recorded as fallers.