They Say Gartner is Dead. Clearly, They Haven’t Checked Their LLM Sources.

They Say Gartner is Dead. Clearly, They Haven’t Checked Their LLM Sources.

They Say Gartner is Dead. Clearly, They Haven’t Checked Their LLM Sources.

https://securityboulevard.com/2026/04/they-say-gartner-is-dead-clearly-they-havent-checked-their-llm-sources/

Publish Date: 2026-04-23 06:05:00

Source Domain: securityboulevard.com

The post They Say Gartner is Dead. Clearly, They Haven’t Checked Their LLM Sources. appeared first on Cybersecurity & Business.

Brands and Vendors are always working on creating their own reality and shaping our perception to match with it. It is the way it has always been and always will be and now they have new allies: LLMs.

And most people using them for market research haven’t noticed yet.

Let’s say you’re researching Vulnerability Management solutions. You open ChatGPT or Claude and type: “What are the best Vulnerability Management solutions?”, the same way you would have started a Google search three years ago.

Very likely, you get a confident, well-structured answer recommending Tenable, Qualys, Rapid7, and a few others. It makes sense, right? Those are the known “leaders” in the space. Common knowledge.

But have you ever checked what sources the LLM is actually using to give you that answer?

I did. I ran that kind of question across ChatGPT, Claude, and a couple of others, covering 15+ cybersecurity categories. And here’s the short version: if you thought industry analysts were biased — and many do — LLMs are clearly even more so.

I’ve been always interested in knowing the sources behind any research or statistics I read. So, I set up both ChatGPT and Claude, at the end of every interaction I have with them, what sources they drew on. That instruction is baked into my custom settings for both tools:

Always list your sources at the end of your response. Split between your own sources (internal – not those you search on the web for), and the ones you search one the web (external). Always include name and year for your own sources (and link if exists), and for the external sources, include name of publication, date and link.

What comes back looks something like this: a list of URLs, report titles, and vendor pages that the LLM uses – either directly or indirectly – to construct its answer. That source list is what I…

Source