🗺 KNOW THE PLAYERS The Cybersecurity Provider Map A field guide to the vendors that secure the modern enterprise — grouped by category, with each provider’s analyst standing, what they do, and the capabilities they’re known for. 110 providers16 categoriesVerified standingsAs of early 2026 About the standings: each provider’s rating reflects independent analyst recognition — Gartner Magic Quadrant & Peer Insights, Forrester Wave, and clear market position — as a category, not a single number. Placements change every year, so always verify current standing at the source. This map is for learning, not an endorsement. ★ Leader◆ Strong Performer● Established▲ Fast Riser Jump to a category Endpoint & XDR 8Network & Zero Trust 8Identity & Access 8Cloud Security / CNAPP 7SIEM & Detection 7GRC & Compliance 9Privacy & Data Gov 8Ratings & TPRM 6Vuln & Exposure 3Email & Human Risk 4MDR & Managed SecOps 8AppSec & DevSecOps 8Threat Intelligence 7Data Security & DLP 6OT / ICS Security 7Backup & Cyber Resilience 6 Category 01 of 16Endpoint & XDR 8 Endpoint & XDR★ LeaderCrowdStrike↗Gartner MQ Leader, EPP · 2026Cloud-native endpoint and XDR platform (Falcon) that stops breaches from a single lightweight agent.EDRXDRThreat Intel Endpoint & XDR★ LeaderMicrosoft Defender↗Gartner MQ Leader, EPP · 2025Endpoint detection and response built into Windows, core to Microsoft’s unified security suite.EDRXDRBuilt-in Endpoint & XDR★ LeaderSentinelOne↗Gartner MQ Leader, EPP · 2025AI-driven autonomous protection across endpoint, cloud and data (Singularity).EDRXDRAutonomous AI Endpoint & XDR★ LeaderTrend Micro↗Gartner MQ Leader, EPPEndpoint and XDR protection (Vision One) with strength across hybrid environments.EPPXDRHybrid Endpoint & XDR★ LeaderSophos↗Gartner MQ Leader, EPPEndpoint, MDR and firewall protection popular with the mid-market and MSPs.EDRMDRFirewall Endpoint & XDR◆ Strong PerformerPalo Alto Cortex XDR↗Gartner Visionary, EPPExtended detection and response unifying endpoint, network and cloud telemetry.XDRAnalytics Endpoint & XDR◆ Strong PerformerBitdefender↗Strong global EPPGravityZone endpoint protection known for high detection and a light footprint.EPPEDRMDR Endpoint & XDR● EstablishedESET↗Gartner Challenger, EPPLong-standing, lightweight endpoint security, especially strong across Europe.EPPEDR Category 02 of 16Network & Zero Trust 8 Network & Zero Trust★ LeaderPalo Alto Networks↗Gartner MQ Leader, SSE & SASENext-gen firewalls plus Prisma SASE/SSE for network and zero-trust access.NGFWSASEZTNA Network & Zero Trust★ LeaderZscaler↗Gartner MQ Leader, SSE · 2025Cloud-native zero-trust platform securing user-to-app access without VPNs.SSEZTNASWG Network & Zero Trust★ LeaderNetskope↗Gartner MQ Leader, SSE & SASECloud security platform (SSE/SASE) with strong data protection and CASB.SSECASBDLP Network & Zero Trust★ LeaderFortinet↗Gartner MQ Leader, FirewallsA broad security fabric anchored by FortiGate firewalls and SASE.NGFWSASESD-WAN Network & Zero Trust★ LeaderCisco↗Gartner Leader, FirewallsNetworking giant with firewalls, Duo, Umbrella and a broad security portfolio.NGFWZTNADNS Network & Zero Trust★ LeaderCheck Point↗Gartner Leader, FirewallsLong-standing network security vendor (Quantum, Harmony, CloudGuard).NGFWCloudEmail Network & Zero Trust◆ Strong PerformerCloudflare↗Gartner SSE MQGlobal edge network offering Zero Trust, WAF, DDoS and DNS security.ZTNAWAFDDoS Network & Zero Trust◆ Strong PerformerDarktrace↗NDR pioneerAI-driven network detection and response that learns normal to spot anomalies.NDRAIEmail Category 03 of 16Identity & Access 8 Identity & Access★ LeaderOkta↗Gartner MQ Leader, Access MgmtCloud identity platform for workforce and customer single sign-on and MFA.SSOMFAIGA Identity & Access★ LeaderMicrosoft Entra ID↗Gartner MQ Leader, Access MgmtMicrosoft’s cloud identity and access management (formerly Azure AD).SSOMFACond. Access Identity & Access★ LeaderPing Identity↗Gartner MQ Leader, Access MgmtEnterprise workforce and customer IAM, now combined with ForgeRock.SSOCIAMMFA Identity & Access★ LeaderCyberArk↗Gartner MQ Leader, PAMPrivileged access and identity security protecting credentials and secrets.PAMSecretsIdentity Identity & Access★ LeaderSailPoint↗Leader, Identity GovernanceIdentity governance and administration for access certification and lifecycle.IGAAccess Reviews Identity & Access◆ Strong PerformerBeyondTrust↗Leader, PAMPrivileged access management and secure remote access.PAMRemote Access Identity & Access◆ Strong PerformerDelinea↗Leader, PAMPrivileged access management formed from Thycotic and Centrify.PAMSecrets Identity & Access◆ Strong PerformerJumpCloud↗SMB identity platformCloud directory unifying identity, device and access for smaller orgs.DirectorySSOMDM Category 04 of 16Cloud Security / CNAPP 7 Cloud Security / CNAPP★ LeaderWiz↗Forrester Wave Leader, CNAPP · 2026Agentless, graph-based cloud security across posture, workloads, identities and data.CSPMCWPPCIEMDSPM Cloud Security / CNAPP★ LeaderPrisma / Cortex Cloud↗CNAPP market leaderFull code-to-cloud CNAPP (now Cortex Cloud) with broad multi-cloud coverage.CSPMCWPPIaC Cloud Security / CNAPP◆ Strong PerformerMicrosoft Defender for Cloud↗Major CNAPPMulti-cloud CNAPP integrated with Azure and the wider Microsoft security stack.CSPMCWPPMulti-cloud Cloud Security / CNAPP◆ Strong PerformerOrca Security↗Forrester Strong Performer, CNAPP · 2026Agentless cloud security via patented SideScanning for fast, broad visibility.AgentlessCSPMDSPM Cloud Security / CNAPP◆ Strong PerformerCrowdStrike Falcon Cloud↗Major CNAPPCloud workload and CNAPP protection unified with Falcon endpoint telemetry.CWPPCDR Cloud Security / CNAPP◆ Strong PerformerAqua Security↗Container security leaderCloud-native security focused on containers, Kubernetes and the build pipeline.ContainersK8sCWPP Cloud Security / CNAPP◆ Strong PerformerSysdig↗Runtime CNAPPRuntime-focused cloud security built on open-source Falco.RuntimeContainersCDR Category 05 of 16SIEM & Detection 7 SIEM & Detection★ LeaderMicrosoft Sentinel↗Gartner MQ Leader, SIEM · 2025Cloud-native SIEM and SOAR unifying detection across the Microsoft estate.SIEMSOARUEBA SIEM & Detection★ LeaderSplunk↗Gartner MQ Leader, SIEM · 11xPowerful data platform and SIEM (Enterprise Security), now part of Cisco.SIEMAnalyticsSOAR SIEM & Detection★ LeaderSecuronix↗Gartner MQ Leader, SIEMCloud-native SIEM with strong user and entity behavior analytics.SIEMUEBA SIEM & Detection★ LeaderExabeam↗Gartner MQ Leader, SIEMSecurity analytics and SIEM centered on behavioral detection.SIEMUEBA SIEM & Detection◆ Strong PerformerIBM QRadar↗Established SIEMLong-standing enterprise SIEM with deep correlation and threat intel.SIEMAnalytics SIEM & Detection◆ Strong PerformerGoogle Security Operations↗Gartner SIEM MQCloud-scale SIEM/SecOps (Chronicle) with Mandiant threat intelligence.SIEMThreat Intel SIEM & Detection◆ Strong PerformerElastic Security↗Open SIEMSearch-powered, open SIEM popular with engineering-led teams.SIEMOpenSearch Category 06 of 16GRC & Compliance 9 GRC & Compliance▲ Fast RiserVanta↗G2 Leader, complianceAutomates security compliance (SOC 2, ISO 27001) with continuous evidence collection.SOC 2ISO 27001Automation GRC & Compliance▲ Fast RiserDrata↗G2 Leader, complianceCompliance automation with continuous control monitoring across frameworks.SOC 2ISO 27001Continuous GRC & Compliance▲ Fast RiserSecureframe↗Compliance automationAutomates security and privacy compliance across many frameworks.SOC 2HIPAAAutomation GRC & Compliance★ LeaderAuditBoard↗Leader, audit & GRCConnected risk, audit and compliance platform for larger enterprises.AuditRiskSOX GRC & Compliance◆ Strong PerformerLogicGate↗GRC platformRisk Cloud platform for building flexible GRC and risk workflows.RiskWorkflows GRC & Compliance● EstablishedArcher↗Established GRCLong-standing enterprise GRC / integrated risk platform (formerly RSA Archer).IRMRiskCompliance GRC & Compliance◆ Strong PerformerServiceNow IRM↗Integrated riskIntegrated risk management built on the ServiceNow platform.IRMWorkflows GRC & Compliance◆ Strong PerformerHyperproof↗Compliance opsCompliance operations platform for managing controls and evidence.ComplianceControls GRC & Compliance▲ Fast RiserSprinto↗Compliance automationCompliance automation aimed at fast-growing cloud companies.SOC 2ISO 27001 Category 07 of 16Privacy & Data Gov 8 Privacy & Data Gov★ LeaderOneTrust↗Privacy market leaderThe largest privacy and data governance platform (consent, DSARs, assessments).PrivacyConsentDSAR Privacy & Data Gov★ LeaderBigID↗Leader, data security & privacyData discovery and intelligence for privacy, security and governance.Data DiscoveryDSPMPrivacy Privacy & Data Gov★ LeaderSecuriti↗Leader, data & AI governanceA data command center for privacy, security and AI governance.PrivacyDSPMAI Gov Privacy & Data Gov● EstablishedTrustArc↗Privacy veteranLong-standing privacy management and consent platform.PrivacyConsent Privacy & Data Gov▲ Fast RiserOsano↗Privacy SaaSApproachable consent management and privacy platform for the mid-market.ConsentPrivacy Privacy & Data Gov▲ Fast RiserDataGrail↗Privacy automationAutomates privacy requests and data mapping.DSARData Mapping Privacy & Data Gov▲ Fast RiserTranscend↗Privacy automationModern privacy platform automating data rights and governance.DSARPrivacy Privacy & Data Gov◆ Strong PerformerCollibra↗Data governance leaderEnterprise data governance and catalog (broader than privacy alone).Data GovCatalog Category 08 of 16Ratings & TPRM 6 Ratings & TPRM★ LeaderSecurityScorecard↗Security ratings leaderOutside-in security ratings (A–F) for your own org and third parties.RatingsTPRMAttack Surface Ratings & TPRM★ LeaderBitSight↗Security ratings leaderSecurity ratings and cyber-risk analytics for third-party risk.RatingsTPRMRisk Ratings & TPRM◆ Strong PerformerUpGuard↗Ratings & TPRMSecurity ratings, vendor risk and data-leak detection.RatingsTPRMLeaks Ratings & TPRM◆ Strong PerformerPanorays↗TPRM platformThird-party security risk management with automated questionnaires.TPRMQuestionnaires Ratings & TPRM◆ Strong PerformerBlack Kite↗TPRM ratingsThird-party cyber-risk ratings with financial and compliance scoring.TPRMRatings Ratings & TPRM◆ Strong PerformerRiskRecon↗TPRM ratingsMastercard’s third-party security assessment and ratings service.TPRMRatings Category 09 of 16Vuln & Exposure 3 Vuln & Exposure★ LeaderTenable↗Leader, vulnerability mgmtVulnerability management and exposure platform (Nessus, Tenable One).Vuln MgmtExposureNessus Vuln & Exposure★ LeaderQualys↗Leader, vulnerability mgmtCloud-based vulnerability management, compliance and patching.Vuln MgmtCloudCompliance Vuln & Exposure★ LeaderRapid7↗Leader, vuln & SecOpsVulnerability management (InsightVM) plus SIEM and SOC tooling.Vuln MgmtSIEMSOAR Category 10 of 16Email & Human Risk 4 Email & Human Risk★ LeaderProofpoint↗Leader, email securityEmail security, data loss prevention and security awareness training.EmailDLPAwareness Email & Human Risk▲ Fast RiserAbnormal↗Leader, email securityAI-native email security that stops advanced phishing and business email compromise.EmailAIBEC Email & Human Risk◆ Strong PerformerMimecast↗Email securityEmail security, archiving and operational resilience.EmailArchiving Email & Human Risk★ LeaderKnowBe4↗Leader, awareness trainingSecurity awareness training and simulated phishing campaigns.AwarenessPhishing Sim Category 11 of 16MDR & Managed SecOps 8 MDR & Managed SecOps★ LeaderArctic Wolf↗MDR market leaderSecurity operations delivered as a concierge service, with a named team and a 24/7 SOC.MDRSOC24/7 MDR & Managed SecOps★ LeaderCrowdStrike Falcon Complete↗Leading managed MDRFully managed detection and response running on the Falcon platform.MDREDR24/7 MDR & Managed SecOps★ LeaderExpel↗Top-rated MDRTransparent MDR with strong analytics across cloud, SaaS and on-prem.MDRCloudSOC MDR & Managed SecOps★ LeaderRed Canary↗Detection-led MDRMDR known for high-fidelity detection and deep threat research.MDRDetection MDR & Managed SecOps◆ Strong PerformerSophos MDR↗Widely deployed MDROne of the most widely adopted MDR services, strong across the mid-market.MDR24/7 MDR & Managed SecOps◆ Strong PerformereSentire↗MDR pioneerManaged detection and response with around-the-clock threat hunting.MDRThreat Hunting MDR & Managed SecOps● EstablishedSecureworks↗Established MDR (Taegis)Managed detection and response delivered via the Taegis platform.MDRXDR MDR & Managed SecOps▲ Fast RiserHuntress↗SMB & MSP MDRManaged security purpose-built for small businesses and the MSPs that serve them.MDRSMBMSP Category 12 of 16AppSec & DevSecOps 8 AppSec & DevSecOps★ LeaderSnyk↗Gartner AST Leader · 2025Developer-first security for code, open-source dependencies, containers and IaC.SCASASTContainers AppSec & DevSecOps★ LeaderVeracode↗Gartner AST Leader · 11xApplication security testing platform spanning SAST, DAST and SCA.SASTDASTSCA AppSec & DevSecOps★ LeaderCheckmarx↗Gartner AST Leader · 7xApplication security testing across the whole software development lifecycle.SASTSCAAPI AppSec & DevSecOps★ LeaderBlack Duck↗Gartner AST LeaderApplication security and software composition analysis (formerly Synopsys).SCASASTDAST AppSec & DevSecOps◆ Strong PerformerGitHub Advanced Security↗Native code securityCode scanning, secret scanning and dependency review built into GitHub.SASTSecretsSCA AppSec & DevSecOps★ LeaderHackerOne↗Bug bounty leaderCrowdsourced security testing and the best-known bug bounty platform.Bug BountyPentest AppSec & DevSecOps◆ Strong PerformerSalt Security↗API security leaderDedicated API security for discovery, posture and runtime protection.APIRuntime AppSec & DevSecOps▲ Fast RiserSemgrep↗Fast, open SASTLightweight, fast static analysis loved by developer teams.SASTOpen Category 13 of 16Threat Intelligence 7 Threat Intelligence★ LeaderRecorded Future↗Threat intel leaderReal-time threat intelligence across the open, deep and dark web.CTIDark Web Threat Intelligence★ LeaderMandiant↗IR & intel leaderFrontline threat intelligence and incident response, now part of Google Cloud.CTIIRForensics Threat Intelligence★ LeaderCrowdStrike Falcon Intel↗Adversary intel leaderAdversary-focused threat intelligence woven across the Falcon platform.CTIAdversary Threat Intelligence◆ Strong PerformerFlashpoint↗Deep & dark web intelIntelligence focused on illicit online communities and emerging threats.CTIDark Web Threat Intelligence◆ Strong PerformerIntel 471↗Cybercrime intelCybercrime and adversary intelligence for proactive defense.CTICybercrime Threat Intelligence◆ Strong PerformerZeroFox↗Digital risk protectionExternal threat intelligence and digital risk protection for brands.DRPBrand Threat Intelligence● EstablishedAnomali↗Threat intel platformA platform for aggregating, managing and operationalizing threat feeds.TIPFeeds Category 14 of 16Data Security & DLP 6 Data Security & DLP★ LeaderVaronis↗Data security leaderData security platform centered on monitoring and least-privilege for data.DLPDSPMMonitoring Data Security & DLP▲ Fast RiserCyera↗DSPM leaderAI-powered data security posture management across cloud and SaaS.DSPMAI Data Security & DLP◆ Strong PerformerMicrosoft Purview↗Integrated DLP & governanceData governance, loss prevention and compliance across the Microsoft estate.DLPGovernanceCompliance Data Security & DLP◆ Strong PerformerForcepoint↗DLP veteranData-first security and data loss prevention across endpoints and cloud.DLPCASB Data Security & DLP● EstablishedSymantec DLP↗Enterprise DLPLong-standing enterprise data loss prevention (now Broadcom).DLPEnterprise Data Security & DLP▲ Fast RiserCyberhaven↗Data lineage DDRData detection and response that traces data lineage to stop leaks.DDRDLP Category 15 of 16OT / ICS Security 7 OT / ICS Security★ LeaderClaroty↗Gartner CPS LeaderCyber-physical systems protection across OT, IoT and healthcare devices.OTIoTCPS OT / ICS Security★ LeaderNozomi Networks↗Gartner CPS LeaderOT and IoT visibility, monitoring and threat detection.OTIoTNDR OT / ICS Security★ LeaderArmis↗Gartner CPS LeaderAsset visibility and security across IT, OT, IoT and medical devices.Asset VisibilityIoTOT OT / ICS Security◆ Strong PerformerDragos↗ICS / OT specialistIndustrial control system cybersecurity and dedicated OT threat intelligence.ICSOTThreat Intel OT / ICS Security◆ Strong PerformerMicrosoft Defender for IoT↗Gartner CPS Leader · 2025OT and IoT threat detection integrated with the Microsoft security stack.OTIoT OT / ICS Security◆ Strong PerformerForescout↗Device & OT visibilityDevice visibility and control spanning IT and OT environments.NACOTVisibility OT / ICS Security◆ Strong PerformerTenable OT↗OT exposureOT security and exposure management for industrial environments.OTVuln Mgmt Category 16 of 16Backup & Cyber Resilience 6 Backup & Cyber Resilience★ LeaderVeeam↗Gartner Leader, Backup · 9xData protection and ransomware recovery across cloud, SaaS and on-prem.BackupRecoveryRansomware Backup & Cyber Resilience★ LeaderRubrik↗Gartner Leader, BackupCyber resilience and data security with rapid, secure recovery.BackupCyber Recovery Backup & Cyber Resilience★ LeaderCohesity↗Gartner Leader, Backup · 6xData protection and management with anti-ransomware (now with Veritas).BackupAnti-ransomware Backup & Cyber Resilience★ LeaderCommvault↗Gartner Leader, Backup · 13xData protection and cyber resilience across hybrid and multi-cloud.BackupResilience Backup & Cyber Resilience★ LeaderDruva↗Gartner Leader, Backup (SaaS)Fully cloud-native, SaaS data protection and backup.BackupSaaSCloud Backup & Cyber Resilience◆ Strong PerformerDell PowerProtect↗Enterprise data protectionEnterprise backup and recovery (PowerProtect, Data Domain).BackupEnterprise Standings summarise publicly available analyst research and market position as of early 2026 and are categorical, not numeric scores. GARTNER and MAGIC QUADRANT are registered trademarks of Gartner, Inc.; FORRESTER WAVE is a trademark of Forrester Research, Inc. Neither firm endorses any vendor, and their research reflects analyst opinion, not statements of fact. Logos and names belong to their respective owners. Listing here is informational and not an endorsement by Oluma.
Endpoint & XDR★ LeaderCrowdStrike↗Gartner MQ Leader, EPP · 2026Cloud-native endpoint and XDR platform (Falcon) that stops breaches from a single lightweight agent.EDRXDRThreat Intel
Endpoint & XDR★ LeaderMicrosoft Defender↗Gartner MQ Leader, EPP · 2025Endpoint detection and response built into Windows, core to Microsoft’s unified security suite.EDRXDRBuilt-in
Endpoint & XDR★ LeaderSentinelOne↗Gartner MQ Leader, EPP · 2025AI-driven autonomous protection across endpoint, cloud and data (Singularity).EDRXDRAutonomous AI
Endpoint & XDR★ LeaderTrend Micro↗Gartner MQ Leader, EPPEndpoint and XDR protection (Vision One) with strength across hybrid environments.EPPXDRHybrid
Endpoint & XDR★ LeaderSophos↗Gartner MQ Leader, EPPEndpoint, MDR and firewall protection popular with the mid-market and MSPs.EDRMDRFirewall
Endpoint & XDR◆ Strong PerformerPalo Alto Cortex XDR↗Gartner Visionary, EPPExtended detection and response unifying endpoint, network and cloud telemetry.XDRAnalytics
Endpoint & XDR◆ Strong PerformerBitdefender↗Strong global EPPGravityZone endpoint protection known for high detection and a light footprint.EPPEDRMDR
Endpoint & XDR● EstablishedESET↗Gartner Challenger, EPPLong-standing, lightweight endpoint security, especially strong across Europe.EPPEDR
Network & Zero Trust★ LeaderPalo Alto Networks↗Gartner MQ Leader, SSE & SASENext-gen firewalls plus Prisma SASE/SSE for network and zero-trust access.NGFWSASEZTNA
Network & Zero Trust★ LeaderZscaler↗Gartner MQ Leader, SSE · 2025Cloud-native zero-trust platform securing user-to-app access without VPNs.SSEZTNASWG
Network & Zero Trust★ LeaderNetskope↗Gartner MQ Leader, SSE & SASECloud security platform (SSE/SASE) with strong data protection and CASB.SSECASBDLP
Network & Zero Trust★ LeaderFortinet↗Gartner MQ Leader, FirewallsA broad security fabric anchored by FortiGate firewalls and SASE.NGFWSASESD-WAN
Network & Zero Trust★ LeaderCisco↗Gartner Leader, FirewallsNetworking giant with firewalls, Duo, Umbrella and a broad security portfolio.NGFWZTNADNS
Network & Zero Trust★ LeaderCheck Point↗Gartner Leader, FirewallsLong-standing network security vendor (Quantum, Harmony, CloudGuard).NGFWCloudEmail
Network & Zero Trust◆ Strong PerformerCloudflare↗Gartner SSE MQGlobal edge network offering Zero Trust, WAF, DDoS and DNS security.ZTNAWAFDDoS
Network & Zero Trust◆ Strong PerformerDarktrace↗NDR pioneerAI-driven network detection and response that learns normal to spot anomalies.NDRAIEmail
Identity & Access★ LeaderOkta↗Gartner MQ Leader, Access MgmtCloud identity platform for workforce and customer single sign-on and MFA.SSOMFAIGA
Identity & Access★ LeaderMicrosoft Entra ID↗Gartner MQ Leader, Access MgmtMicrosoft’s cloud identity and access management (formerly Azure AD).SSOMFACond. Access
Identity & Access★ LeaderPing Identity↗Gartner MQ Leader, Access MgmtEnterprise workforce and customer IAM, now combined with ForgeRock.SSOCIAMMFA
Identity & Access★ LeaderCyberArk↗Gartner MQ Leader, PAMPrivileged access and identity security protecting credentials and secrets.PAMSecretsIdentity
Identity & Access★ LeaderSailPoint↗Leader, Identity GovernanceIdentity governance and administration for access certification and lifecycle.IGAAccess Reviews
Identity & Access◆ Strong PerformerBeyondTrust↗Leader, PAMPrivileged access management and secure remote access.PAMRemote Access
Identity & Access◆ Strong PerformerDelinea↗Leader, PAMPrivileged access management formed from Thycotic and Centrify.PAMSecrets
Identity & Access◆ Strong PerformerJumpCloud↗SMB identity platformCloud directory unifying identity, device and access for smaller orgs.DirectorySSOMDM
Cloud Security / CNAPP★ LeaderWiz↗Forrester Wave Leader, CNAPP · 2026Agentless, graph-based cloud security across posture, workloads, identities and data.CSPMCWPPCIEMDSPM
Cloud Security / CNAPP★ LeaderPrisma / Cortex Cloud↗CNAPP market leaderFull code-to-cloud CNAPP (now Cortex Cloud) with broad multi-cloud coverage.CSPMCWPPIaC
Cloud Security / CNAPP◆ Strong PerformerMicrosoft Defender for Cloud↗Major CNAPPMulti-cloud CNAPP integrated with Azure and the wider Microsoft security stack.CSPMCWPPMulti-cloud
Cloud Security / CNAPP◆ Strong PerformerOrca Security↗Forrester Strong Performer, CNAPP · 2026Agentless cloud security via patented SideScanning for fast, broad visibility.AgentlessCSPMDSPM
Cloud Security / CNAPP◆ Strong PerformerCrowdStrike Falcon Cloud↗Major CNAPPCloud workload and CNAPP protection unified with Falcon endpoint telemetry.CWPPCDR
Cloud Security / CNAPP◆ Strong PerformerAqua Security↗Container security leaderCloud-native security focused on containers, Kubernetes and the build pipeline.ContainersK8sCWPP
Cloud Security / CNAPP◆ Strong PerformerSysdig↗Runtime CNAPPRuntime-focused cloud security built on open-source Falco.RuntimeContainersCDR
SIEM & Detection★ LeaderMicrosoft Sentinel↗Gartner MQ Leader, SIEM · 2025Cloud-native SIEM and SOAR unifying detection across the Microsoft estate.SIEMSOARUEBA
SIEM & Detection★ LeaderSplunk↗Gartner MQ Leader, SIEM · 11xPowerful data platform and SIEM (Enterprise Security), now part of Cisco.SIEMAnalyticsSOAR
SIEM & Detection★ LeaderSecuronix↗Gartner MQ Leader, SIEMCloud-native SIEM with strong user and entity behavior analytics.SIEMUEBA
SIEM & Detection★ LeaderExabeam↗Gartner MQ Leader, SIEMSecurity analytics and SIEM centered on behavioral detection.SIEMUEBA
SIEM & Detection◆ Strong PerformerIBM QRadar↗Established SIEMLong-standing enterprise SIEM with deep correlation and threat intel.SIEMAnalytics
SIEM & Detection◆ Strong PerformerGoogle Security Operations↗Gartner SIEM MQCloud-scale SIEM/SecOps (Chronicle) with Mandiant threat intelligence.SIEMThreat Intel
SIEM & Detection◆ Strong PerformerElastic Security↗Open SIEMSearch-powered, open SIEM popular with engineering-led teams.SIEMOpenSearch
GRC & Compliance▲ Fast RiserVanta↗G2 Leader, complianceAutomates security compliance (SOC 2, ISO 27001) with continuous evidence collection.SOC 2ISO 27001Automation
GRC & Compliance▲ Fast RiserDrata↗G2 Leader, complianceCompliance automation with continuous control monitoring across frameworks.SOC 2ISO 27001Continuous
GRC & Compliance▲ Fast RiserSecureframe↗Compliance automationAutomates security and privacy compliance across many frameworks.SOC 2HIPAAAutomation
GRC & Compliance★ LeaderAuditBoard↗Leader, audit & GRCConnected risk, audit and compliance platform for larger enterprises.AuditRiskSOX
GRC & Compliance◆ Strong PerformerLogicGate↗GRC platformRisk Cloud platform for building flexible GRC and risk workflows.RiskWorkflows
GRC & Compliance● EstablishedArcher↗Established GRCLong-standing enterprise GRC / integrated risk platform (formerly RSA Archer).IRMRiskCompliance
GRC & Compliance◆ Strong PerformerServiceNow IRM↗Integrated riskIntegrated risk management built on the ServiceNow platform.IRMWorkflows
GRC & Compliance◆ Strong PerformerHyperproof↗Compliance opsCompliance operations platform for managing controls and evidence.ComplianceControls
GRC & Compliance▲ Fast RiserSprinto↗Compliance automationCompliance automation aimed at fast-growing cloud companies.SOC 2ISO 27001
Privacy & Data Gov★ LeaderOneTrust↗Privacy market leaderThe largest privacy and data governance platform (consent, DSARs, assessments).PrivacyConsentDSAR
Privacy & Data Gov★ LeaderBigID↗Leader, data security & privacyData discovery and intelligence for privacy, security and governance.Data DiscoveryDSPMPrivacy
Privacy & Data Gov★ LeaderSecuriti↗Leader, data & AI governanceA data command center for privacy, security and AI governance.PrivacyDSPMAI Gov
Privacy & Data Gov● EstablishedTrustArc↗Privacy veteranLong-standing privacy management and consent platform.PrivacyConsent
Privacy & Data Gov▲ Fast RiserOsano↗Privacy SaaSApproachable consent management and privacy platform for the mid-market.ConsentPrivacy
Privacy & Data Gov▲ Fast RiserDataGrail↗Privacy automationAutomates privacy requests and data mapping.DSARData Mapping
Privacy & Data Gov▲ Fast RiserTranscend↗Privacy automationModern privacy platform automating data rights and governance.DSARPrivacy
Privacy & Data Gov◆ Strong PerformerCollibra↗Data governance leaderEnterprise data governance and catalog (broader than privacy alone).Data GovCatalog
Ratings & TPRM★ LeaderSecurityScorecard↗Security ratings leaderOutside-in security ratings (A–F) for your own org and third parties.RatingsTPRMAttack Surface
Ratings & TPRM★ LeaderBitSight↗Security ratings leaderSecurity ratings and cyber-risk analytics for third-party risk.RatingsTPRMRisk
Ratings & TPRM◆ Strong PerformerUpGuard↗Ratings & TPRMSecurity ratings, vendor risk and data-leak detection.RatingsTPRMLeaks
Ratings & TPRM◆ Strong PerformerPanorays↗TPRM platformThird-party security risk management with automated questionnaires.TPRMQuestionnaires
Ratings & TPRM◆ Strong PerformerBlack Kite↗TPRM ratingsThird-party cyber-risk ratings with financial and compliance scoring.TPRMRatings
Ratings & TPRM◆ Strong PerformerRiskRecon↗TPRM ratingsMastercard’s third-party security assessment and ratings service.TPRMRatings
Vuln & Exposure★ LeaderTenable↗Leader, vulnerability mgmtVulnerability management and exposure platform (Nessus, Tenable One).Vuln MgmtExposureNessus
Vuln & Exposure★ LeaderQualys↗Leader, vulnerability mgmtCloud-based vulnerability management, compliance and patching.Vuln MgmtCloudCompliance
Vuln & Exposure★ LeaderRapid7↗Leader, vuln & SecOpsVulnerability management (InsightVM) plus SIEM and SOC tooling.Vuln MgmtSIEMSOAR
Email & Human Risk★ LeaderProofpoint↗Leader, email securityEmail security, data loss prevention and security awareness training.EmailDLPAwareness
Email & Human Risk▲ Fast RiserAbnormal↗Leader, email securityAI-native email security that stops advanced phishing and business email compromise.EmailAIBEC
Email & Human Risk◆ Strong PerformerMimecast↗Email securityEmail security, archiving and operational resilience.EmailArchiving
Email & Human Risk★ LeaderKnowBe4↗Leader, awareness trainingSecurity awareness training and simulated phishing campaigns.AwarenessPhishing Sim
MDR & Managed SecOps★ LeaderArctic Wolf↗MDR market leaderSecurity operations delivered as a concierge service, with a named team and a 24/7 SOC.MDRSOC24/7
MDR & Managed SecOps★ LeaderCrowdStrike Falcon Complete↗Leading managed MDRFully managed detection and response running on the Falcon platform.MDREDR24/7
MDR & Managed SecOps★ LeaderExpel↗Top-rated MDRTransparent MDR with strong analytics across cloud, SaaS and on-prem.MDRCloudSOC
MDR & Managed SecOps★ LeaderRed Canary↗Detection-led MDRMDR known for high-fidelity detection and deep threat research.MDRDetection
MDR & Managed SecOps◆ Strong PerformerSophos MDR↗Widely deployed MDROne of the most widely adopted MDR services, strong across the mid-market.MDR24/7
MDR & Managed SecOps◆ Strong PerformereSentire↗MDR pioneerManaged detection and response with around-the-clock threat hunting.MDRThreat Hunting
MDR & Managed SecOps● EstablishedSecureworks↗Established MDR (Taegis)Managed detection and response delivered via the Taegis platform.MDRXDR
MDR & Managed SecOps▲ Fast RiserHuntress↗SMB & MSP MDRManaged security purpose-built for small businesses and the MSPs that serve them.MDRSMBMSP
AppSec & DevSecOps★ LeaderSnyk↗Gartner AST Leader · 2025Developer-first security for code, open-source dependencies, containers and IaC.SCASASTContainers
AppSec & DevSecOps★ LeaderVeracode↗Gartner AST Leader · 11xApplication security testing platform spanning SAST, DAST and SCA.SASTDASTSCA
AppSec & DevSecOps★ LeaderCheckmarx↗Gartner AST Leader · 7xApplication security testing across the whole software development lifecycle.SASTSCAAPI
AppSec & DevSecOps★ LeaderBlack Duck↗Gartner AST LeaderApplication security and software composition analysis (formerly Synopsys).SCASASTDAST
AppSec & DevSecOps◆ Strong PerformerGitHub Advanced Security↗Native code securityCode scanning, secret scanning and dependency review built into GitHub.SASTSecretsSCA
AppSec & DevSecOps★ LeaderHackerOne↗Bug bounty leaderCrowdsourced security testing and the best-known bug bounty platform.Bug BountyPentest
AppSec & DevSecOps◆ Strong PerformerSalt Security↗API security leaderDedicated API security for discovery, posture and runtime protection.APIRuntime
AppSec & DevSecOps▲ Fast RiserSemgrep↗Fast, open SASTLightweight, fast static analysis loved by developer teams.SASTOpen
Threat Intelligence★ LeaderRecorded Future↗Threat intel leaderReal-time threat intelligence across the open, deep and dark web.CTIDark Web
Threat Intelligence★ LeaderMandiant↗IR & intel leaderFrontline threat intelligence and incident response, now part of Google Cloud.CTIIRForensics
Threat Intelligence★ LeaderCrowdStrike Falcon Intel↗Adversary intel leaderAdversary-focused threat intelligence woven across the Falcon platform.CTIAdversary
Threat Intelligence◆ Strong PerformerFlashpoint↗Deep & dark web intelIntelligence focused on illicit online communities and emerging threats.CTIDark Web
Threat Intelligence◆ Strong PerformerIntel 471↗Cybercrime intelCybercrime and adversary intelligence for proactive defense.CTICybercrime
Threat Intelligence◆ Strong PerformerZeroFox↗Digital risk protectionExternal threat intelligence and digital risk protection for brands.DRPBrand
Threat Intelligence● EstablishedAnomali↗Threat intel platformA platform for aggregating, managing and operationalizing threat feeds.TIPFeeds
Data Security & DLP★ LeaderVaronis↗Data security leaderData security platform centered on monitoring and least-privilege for data.DLPDSPMMonitoring
Data Security & DLP▲ Fast RiserCyera↗DSPM leaderAI-powered data security posture management across cloud and SaaS.DSPMAI
Data Security & DLP◆ Strong PerformerMicrosoft Purview↗Integrated DLP & governanceData governance, loss prevention and compliance across the Microsoft estate.DLPGovernanceCompliance
Data Security & DLP◆ Strong PerformerForcepoint↗DLP veteranData-first security and data loss prevention across endpoints and cloud.DLPCASB
Data Security & DLP● EstablishedSymantec DLP↗Enterprise DLPLong-standing enterprise data loss prevention (now Broadcom).DLPEnterprise
Data Security & DLP▲ Fast RiserCyberhaven↗Data lineage DDRData detection and response that traces data lineage to stop leaks.DDRDLP
OT / ICS Security★ LeaderClaroty↗Gartner CPS LeaderCyber-physical systems protection across OT, IoT and healthcare devices.OTIoTCPS
OT / ICS Security★ LeaderNozomi Networks↗Gartner CPS LeaderOT and IoT visibility, monitoring and threat detection.OTIoTNDR
OT / ICS Security★ LeaderArmis↗Gartner CPS LeaderAsset visibility and security across IT, OT, IoT and medical devices.Asset VisibilityIoTOT
OT / ICS Security◆ Strong PerformerDragos↗ICS / OT specialistIndustrial control system cybersecurity and dedicated OT threat intelligence.ICSOTThreat Intel
OT / ICS Security◆ Strong PerformerMicrosoft Defender for IoT↗Gartner CPS Leader · 2025OT and IoT threat detection integrated with the Microsoft security stack.OTIoT
OT / ICS Security◆ Strong PerformerForescout↗Device & OT visibilityDevice visibility and control spanning IT and OT environments.NACOTVisibility
OT / ICS Security◆ Strong PerformerTenable OT↗OT exposureOT security and exposure management for industrial environments.OTVuln Mgmt
Backup & Cyber Resilience★ LeaderVeeam↗Gartner Leader, Backup · 9xData protection and ransomware recovery across cloud, SaaS and on-prem.BackupRecoveryRansomware
Backup & Cyber Resilience★ LeaderRubrik↗Gartner Leader, BackupCyber resilience and data security with rapid, secure recovery.BackupCyber Recovery
Backup & Cyber Resilience★ LeaderCohesity↗Gartner Leader, Backup · 6xData protection and management with anti-ransomware (now with Veritas).BackupAnti-ransomware
Backup & Cyber Resilience★ LeaderCommvault↗Gartner Leader, Backup · 13xData protection and cyber resilience across hybrid and multi-cloud.BackupResilience
Backup & Cyber Resilience★ LeaderDruva↗Gartner Leader, Backup (SaaS)Fully cloud-native, SaaS data protection and backup.BackupSaaSCloud
Backup & Cyber Resilience◆ Strong PerformerDell PowerProtect↗Enterprise data protectionEnterprise backup and recovery (PowerProtect, Data Domain).BackupEnterprise