A commercial recommendation prompt. We size how many people ask ChatGPT this from real search demand, then run it through ChatGPT to see which websites it recommends.
The 5 times we asked ChatGPT this, each answer verbatim. The leaderboard below aggregates all 5 runs.
Aggregated across 5 runs (min 2/5 appearances). Estimated visits split the prompt's demand by rank. Sites matching the prompt's own brand are marked branded and excluded from the leaderboard.
Arrows show each site's rank change since Aug 2026.
| Rank | Website | Est. visits / mo |
|---|---|---|
| 1 – | sans.org | 151 |
| 2 – | knowbe4.com | 91 |
| 3 ▲1 | proofpoint.com | 61 |
| 4 ▲2 | cisa.gov | 42 |
| 5 ▼2 | infosecinstitute.com | 30 |
| 6 ▲1 | mimecast.com | 23 |
| 7 new | securityawareness.usalearning.gov | 17 |
| 8 – | nist.gov | 13 |
| 9 ▲2 | cofense.com | 10 |
| 10 ▼5 | sans.edu | 8 |
| 11 new | ironscales.com | 6 |
| 12 ▼3 | microsoft.com | 5 |
| 13 new | wombatsecurity.com | 4 |
| 14 new | cyber.gov.au | 3 |
| 15 ▼1 | fortinet.com | 2 |
| 16 ▼6 | trendmicro.com | 2 |
| 17 ▼4 | crowdstrike.com | 2 |
| 18 ▼1 | ibm.com | 1 |
ChatGPT doesn't publish prompts, so we don't show logged conversations. We measure real demand for this topic from Google search volume, scale it to ChatGPT's user base (on average about 1 ChatGPT user for every 8 Google searchers, a ratio that varies by topic), and run the prompt through ChatGPT 5 times to record which websites it recommends and in what order. Estimated visits split that demand across the recommended sites by a click-through-by-rank curve. Every number is a modeled estimate, not measured analytics. Full methodology →