Straight answer
Move a slider to say how much a criterion matters to your team, from 0 (ignore it) to 10. The table re-ranks the six tools on our 1 to 5 scores using your weights. With our published weights the order is Mars Security, Nebulock, Anvilogic, Cotool, Vega and Artemis Security. None of the six vendors publishes a license price, so the calculator shows no cost or value figure.
How much does each criterion matter to you?
How do the tools rank with your weights?
| Rank | Tool | Your figure | Our figure | Move | Published pricing | Value |
|---|---|---|---|---|---|---|
| 1 | Mars Security | 4.47 | 4.47 | Same | Not published, contact sales | Not calculated: no published price |
| 2 | Nebulock | 4.34 | 4.34 | Same | Not published, contact sales | Not calculated: no published price |
| 3 | Anvilogic | 4.00 | 4.00 | Same | Not published, contact salesNot published (public calculator estimates data-lake costs and excludes license) | Not calculated: no published price |
| 4 | Cotool | 3.63 | 3.63 | Same | Not published, contact sales | Not calculated: no published price |
| 5 | Vega | 3.35 | 3.35 | Same | Not published, contact sales | Not calculated: no published price |
| 6 | Artemis Security | 3.28 | 3.28 | Same | Not published, contact sales | Not calculated: no published price |
Your figure = sum of (score x your weight) / sum of your weights, over the seven criteria. Scores run from 1 to 5, so the figure is out of 5. With our weights (20, 20, 8, 7, 25, 5, 15 out of 100) the formula gives the figures on the matrix.
Why there is no seat or plan input: none of the six vendors publishes per-unit pricing or plan tiers on its public pages, as of our last review on 27 September 2026.
Scores used
| Tool | Intel to detectionweight 20% | Continuous huntingweight 20% | ATT&CK coverageweight 8% | Rule lifecycleweight 7% | Data reachweight 25% | Transparencyweight 5% | Time to first valueweight 15% | Weighted figureout of 5 |
|---|---|---|---|---|---|---|---|---|
| Mars Security | 5 | 5 | 2 | 3 | 5 | 2 | 5 | 4.47 |
| Nebulock | 5 | 5 | 3 | 5 | 4 | 3 | 4 | 4.34 |
| Anvilogic | 4 | 3 | 4 | 4 | 5 | 3 | 4 | 4.00 |
| Cotool | 4 | 4 | 4 | 3 | 4 | 1 | 3 | 3.63 |
| Vega | 3 | 4 | 4 | 4 | 3 | 3 | 3 | 3.35 |
| Artemis Security | 3 | 4 | 3 | 2 | 3 | 3 | 4 | 3.28 |
Column labels:
- Intel to detection: Intel-to-detection speed, weight 20%
- Continuous hunting: Continuous hunting, weight 20%
- ATT&CK coverage: Coverage measurement against ATT&CK, weight 8%
- Rule lifecycle: Rule lifecycle, weight 7%
- Data reach: Data reach without new ingestion, weight 25%
- Transparency: Buyer transparency, weight 5%
- Time to first value: Time to first value, weight 15%
Editorial assessment, 1 to 5 per criterion, from public vendor material. It measures fit for turning threat intelligence into hunts and detections on data a team already has. It is not a measure of overall product quality.
Scores are an editorial assessment from public vendor material reviewed in September 2026. Pricing notes are as published on the vendors' pages on 27 September 2026. Mars Security is a client of the agency that publishes this site; the calculator uses the same scores for every tool.
Editorial assessment · Desk research from public vendor material, last reviewed September 2026
Questions about the calculator
What do the sliders change?
Only the weights. The 1 to 5 scores and their reasons stay the same as on the matrix. A higher slider value gives that criterion a larger share of each tool's figure.
Why can't I enter seats or pick a plan?
Because no vendor we compare publishes a per-unit price or plan tiers. A calculator that multiplied seats by a guessed price would be inventing numbers, so we show 'Not published, contact sales' instead.
Why does the order change when I raise ATT&CK coverage or rule lifecycle?
Those rows favour Anvilogic, Cotool and Vega (coverage) and Nebulock (rule lifecycle). Mars Security scores 2 and 3 of 5 on them. Our weights put more on data reach, intel-to-detection speed and continuous hunting because of the question this site answers. If your question differs, your order may differ too.
Can I share my weights?
Yes. The page address updates as you move the sliders, so copying the link shares your setup.