Skip to content
Oluma Cyber Security Awareness
🗺
KNOW THE PLAYERS

The Cybersecurity Provider Map

A field guide to the vendors that secure the modern enterprise — grouped by category, with each provider’s analyst standing, what they do, and the capabilities they’re known for.

110 providers16 categoriesVerified standingsAs of early 2026

About the standings: each provider’s rating reflects independent analyst recognition — Gartner Magic Quadrant & Peer Insights, Forrester Wave, and clear market position — as a category, not a single number. Placements change every year, so always verify current standing at the source. This map is for learning, not an endorsement.

Leader Strong Performer Established Fast Riser
Jump to a category
Category 01 of 16

Endpoint & XDR 8

Endpoint & XDR★ Leader

CrowdStrike

Gartner MQ Leader, EPP · 2026

Cloud-native endpoint and XDR platform (Falcon) that stops breaches from a single lightweight agent.

EDRXDRThreat Intel
Endpoint & XDR★ Leader

Microsoft Defender

Gartner MQ Leader, EPP · 2025

Endpoint detection and response built into Windows, core to Microsoft’s unified security suite.

EDRXDRBuilt-in
Endpoint & XDR★ Leader

SentinelOne

Gartner MQ Leader, EPP · 2025

AI-driven autonomous protection across endpoint, cloud and data (Singularity).

EDRXDRAutonomous AI
Endpoint & XDR★ Leader

Trend Micro

Gartner MQ Leader, EPP

Endpoint and XDR protection (Vision One) with strength across hybrid environments.

EPPXDRHybrid
Endpoint & XDR★ Leader

Sophos

Gartner MQ Leader, EPP

Endpoint, MDR and firewall protection popular with the mid-market and MSPs.

EDRMDRFirewall
Endpoint & XDR◆ Strong Performer

Palo Alto Cortex XDR

Gartner Visionary, EPP

Extended detection and response unifying endpoint, network and cloud telemetry.

XDRAnalytics
Endpoint & XDR◆ Strong Performer

Bitdefender

Strong global EPP

GravityZone endpoint protection known for high detection and a light footprint.

EPPEDRMDR
Endpoint & XDR● Established

ESET

Gartner Challenger, EPP

Long-standing, lightweight endpoint security, especially strong across Europe.

EPPEDR
Category 02 of 16

Network & Zero Trust 8

Network & Zero Trust★ Leader

Palo Alto Networks

Gartner MQ Leader, SSE & SASE

Next-gen firewalls plus Prisma SASE/SSE for network and zero-trust access.

NGFWSASEZTNA
Network & Zero Trust★ Leader

Zscaler

Gartner MQ Leader, SSE · 2025

Cloud-native zero-trust platform securing user-to-app access without VPNs.

SSEZTNASWG
Network & Zero Trust★ Leader

Netskope

Gartner MQ Leader, SSE & SASE

Cloud security platform (SSE/SASE) with strong data protection and CASB.

SSECASBDLP
Network & Zero Trust★ Leader

Fortinet

Gartner MQ Leader, Firewalls

A broad security fabric anchored by FortiGate firewalls and SASE.

NGFWSASESD-WAN
Network & Zero Trust★ Leader

Cisco

Gartner Leader, Firewalls

Networking giant with firewalls, Duo, Umbrella and a broad security portfolio.

NGFWZTNADNS
Network & Zero Trust★ Leader

Check Point

Gartner Leader, Firewalls

Long-standing network security vendor (Quantum, Harmony, CloudGuard).

NGFWCloudEmail
Network & Zero Trust◆ Strong Performer

Cloudflare

Gartner SSE MQ

Global edge network offering Zero Trust, WAF, DDoS and DNS security.

ZTNAWAFDDoS
Network & Zero Trust◆ Strong Performer

Darktrace

NDR pioneer

AI-driven network detection and response that learns normal to spot anomalies.

NDRAIEmail
Category 03 of 16

Identity & Access 8

Identity & Access★ Leader

Okta

Gartner MQ Leader, Access Mgmt

Cloud identity platform for workforce and customer single sign-on and MFA.

SSOMFAIGA
Identity & Access★ Leader

Microsoft Entra ID

Gartner MQ Leader, Access Mgmt

Microsoft’s cloud identity and access management (formerly Azure AD).

SSOMFACond. Access
Identity & Access★ Leader

Ping Identity

Gartner MQ Leader, Access Mgmt

Enterprise workforce and customer IAM, now combined with ForgeRock.

SSOCIAMMFA
Identity & Access★ Leader

CyberArk

Gartner MQ Leader, PAM

Privileged access and identity security protecting credentials and secrets.

PAMSecretsIdentity
Identity & Access★ Leader

SailPoint

Leader, Identity Governance

Identity governance and administration for access certification and lifecycle.

IGAAccess Reviews
Identity & Access◆ Strong Performer

BeyondTrust

Leader, PAM

Privileged access management and secure remote access.

PAMRemote Access
Identity & Access◆ Strong Performer

Delinea

Leader, PAM

Privileged access management formed from Thycotic and Centrify.

PAMSecrets
Identity & Access◆ Strong Performer

JumpCloud

SMB identity platform

Cloud directory unifying identity, device and access for smaller orgs.

DirectorySSOMDM
Category 04 of 16

Cloud Security / CNAPP 7

Cloud Security / CNAPP★ Leader

Wiz

Forrester Wave Leader, CNAPP · 2026

Agentless, graph-based cloud security across posture, workloads, identities and data.

CSPMCWPPCIEMDSPM
Cloud Security / CNAPP★ Leader

Prisma / Cortex Cloud

CNAPP market leader

Full code-to-cloud CNAPP (now Cortex Cloud) with broad multi-cloud coverage.

CSPMCWPPIaC
Cloud Security / CNAPP◆ Strong Performer

Microsoft Defender for Cloud

Major CNAPP

Multi-cloud CNAPP integrated with Azure and the wider Microsoft security stack.

CSPMCWPPMulti-cloud
Cloud Security / CNAPP◆ Strong Performer

Orca Security

Forrester Strong Performer, CNAPP · 2026

Agentless cloud security via patented SideScanning for fast, broad visibility.

AgentlessCSPMDSPM
Cloud Security / CNAPP◆ Strong Performer

CrowdStrike Falcon Cloud

Major CNAPP

Cloud workload and CNAPP protection unified with Falcon endpoint telemetry.

CWPPCDR
Cloud Security / CNAPP◆ Strong Performer

Aqua Security

Container security leader

Cloud-native security focused on containers, Kubernetes and the build pipeline.

ContainersK8sCWPP
Cloud Security / CNAPP◆ Strong Performer

Sysdig

Runtime CNAPP

Runtime-focused cloud security built on open-source Falco.

RuntimeContainersCDR
Category 05 of 16

SIEM & Detection 7

SIEM & Detection★ Leader

Microsoft Sentinel

Gartner MQ Leader, SIEM · 2025

Cloud-native SIEM and SOAR unifying detection across the Microsoft estate.

SIEMSOARUEBA
SIEM & Detection★ Leader

Splunk

Gartner MQ Leader, SIEM · 11x

Powerful data platform and SIEM (Enterprise Security), now part of Cisco.

SIEMAnalyticsSOAR
SIEM & Detection★ Leader

Securonix

Gartner MQ Leader, SIEM

Cloud-native SIEM with strong user and entity behavior analytics.

SIEMUEBA
SIEM & Detection★ Leader

Exabeam

Gartner MQ Leader, SIEM

Security analytics and SIEM centered on behavioral detection.

SIEMUEBA
SIEM & Detection◆ Strong Performer

IBM QRadar

Established SIEM

Long-standing enterprise SIEM with deep correlation and threat intel.

SIEMAnalytics
SIEM & Detection◆ Strong Performer

Google Security Operations

Gartner SIEM MQ

Cloud-scale SIEM/SecOps (Chronicle) with Mandiant threat intelligence.

SIEMThreat Intel
SIEM & Detection◆ Strong Performer

Elastic Security

Open SIEM

Search-powered, open SIEM popular with engineering-led teams.

SIEMOpenSearch
Category 06 of 16

GRC & Compliance 9

GRC & Compliance▲ Fast Riser

Vanta

G2 Leader, compliance

Automates security compliance (SOC 2, ISO 27001) with continuous evidence collection.

SOC 2ISO 27001Automation
GRC & Compliance▲ Fast Riser

Drata

G2 Leader, compliance

Compliance automation with continuous control monitoring across frameworks.

SOC 2ISO 27001Continuous
GRC & Compliance▲ Fast Riser

Secureframe

Compliance automation

Automates security and privacy compliance across many frameworks.

SOC 2HIPAAAutomation
GRC & Compliance★ Leader

AuditBoard

Leader, audit & GRC

Connected risk, audit and compliance platform for larger enterprises.

AuditRiskSOX
GRC & Compliance◆ Strong Performer

LogicGate

GRC platform

Risk Cloud platform for building flexible GRC and risk workflows.

RiskWorkflows
GRC & Compliance● Established

Archer

Established GRC

Long-standing enterprise GRC / integrated risk platform (formerly RSA Archer).

IRMRiskCompliance
GRC & Compliance◆ Strong Performer

ServiceNow IRM

Integrated risk

Integrated risk management built on the ServiceNow platform.

IRMWorkflows
GRC & Compliance◆ Strong Performer

Hyperproof

Compliance ops

Compliance operations platform for managing controls and evidence.

ComplianceControls
GRC & Compliance▲ Fast Riser

Sprinto

Compliance automation

Compliance automation aimed at fast-growing cloud companies.

SOC 2ISO 27001
Category 07 of 16

Privacy & Data Gov 8

Privacy & Data Gov★ Leader

OneTrust

Privacy market leader

The largest privacy and data governance platform (consent, DSARs, assessments).

PrivacyConsentDSAR
Privacy & Data Gov★ Leader

BigID

Leader, data security & privacy

Data discovery and intelligence for privacy, security and governance.

Data DiscoveryDSPMPrivacy
Privacy & Data Gov★ Leader

Securiti

Leader, data & AI governance

A data command center for privacy, security and AI governance.

PrivacyDSPMAI Gov
Privacy & Data Gov● Established

TrustArc

Privacy veteran

Long-standing privacy management and consent platform.

PrivacyConsent
Privacy & Data Gov▲ Fast Riser

Osano

Privacy SaaS

Approachable consent management and privacy platform for the mid-market.

ConsentPrivacy
Privacy & Data Gov▲ Fast Riser

DataGrail

Privacy automation

Automates privacy requests and data mapping.

DSARData Mapping
Privacy & Data Gov▲ Fast Riser

Transcend

Privacy automation

Modern privacy platform automating data rights and governance.

DSARPrivacy
Privacy & Data Gov◆ Strong Performer

Collibra

Data governance leader

Enterprise data governance and catalog (broader than privacy alone).

Data GovCatalog
Category 08 of 16

Ratings & TPRM 6

Ratings & TPRM★ Leader

SecurityScorecard

Security ratings leader

Outside-in security ratings (A–F) for your own org and third parties.

RatingsTPRMAttack Surface
Ratings & TPRM★ Leader

BitSight

Security ratings leader

Security ratings and cyber-risk analytics for third-party risk.

RatingsTPRMRisk
Ratings & TPRM◆ Strong Performer

UpGuard

Ratings & TPRM

Security ratings, vendor risk and data-leak detection.

RatingsTPRMLeaks
Ratings & TPRM◆ Strong Performer

Panorays

TPRM platform

Third-party security risk management with automated questionnaires.

TPRMQuestionnaires
Ratings & TPRM◆ Strong Performer

Black Kite

TPRM ratings

Third-party cyber-risk ratings with financial and compliance scoring.

TPRMRatings
Ratings & TPRM◆ Strong Performer

RiskRecon

TPRM ratings

Mastercard’s third-party security assessment and ratings service.

TPRMRatings
Category 09 of 16

Vuln & Exposure 3

Vuln & Exposure★ Leader

Tenable

Leader, vulnerability mgmt

Vulnerability management and exposure platform (Nessus, Tenable One).

Vuln MgmtExposureNessus
Vuln & Exposure★ Leader

Qualys

Leader, vulnerability mgmt

Cloud-based vulnerability management, compliance and patching.

Vuln MgmtCloudCompliance
Vuln & Exposure★ Leader

Rapid7

Leader, vuln & SecOps

Vulnerability management (InsightVM) plus SIEM and SOC tooling.

Vuln MgmtSIEMSOAR
Category 10 of 16

Email & Human Risk 4

Email & Human Risk★ Leader

Proofpoint

Leader, email security

Email security, data loss prevention and security awareness training.

EmailDLPAwareness
Email & Human Risk▲ Fast Riser

Abnormal

Leader, email security

AI-native email security that stops advanced phishing and business email compromise.

EmailAIBEC
Email & Human Risk◆ Strong Performer

Mimecast

Email security

Email security, archiving and operational resilience.

EmailArchiving
Email & Human Risk★ Leader

KnowBe4

Leader, awareness training

Security awareness training and simulated phishing campaigns.

AwarenessPhishing Sim
Category 11 of 16

MDR & Managed SecOps 8

MDR & Managed SecOps★ Leader

Arctic Wolf

MDR market leader

Security operations delivered as a concierge service, with a named team and a 24/7 SOC.

MDRSOC24/7
MDR & Managed SecOps★ Leader

CrowdStrike Falcon Complete

Leading managed MDR

Fully managed detection and response running on the Falcon platform.

MDREDR24/7
MDR & Managed SecOps★ Leader

Expel

Top-rated MDR

Transparent MDR with strong analytics across cloud, SaaS and on-prem.

MDRCloudSOC
MDR & Managed SecOps★ Leader

Red Canary

Detection-led MDR

MDR known for high-fidelity detection and deep threat research.

MDRDetection
MDR & Managed SecOps◆ Strong Performer

Sophos MDR

Widely deployed MDR

One of the most widely adopted MDR services, strong across the mid-market.

MDR24/7
MDR & Managed SecOps◆ Strong Performer

eSentire

MDR pioneer

Managed detection and response with around-the-clock threat hunting.

MDRThreat Hunting
MDR & Managed SecOps● Established

Secureworks

Established MDR (Taegis)

Managed detection and response delivered via the Taegis platform.

MDRXDR
MDR & Managed SecOps▲ Fast Riser

Huntress

SMB & MSP MDR

Managed security purpose-built for small businesses and the MSPs that serve them.

MDRSMBMSP
Category 12 of 16

AppSec & DevSecOps 8

AppSec & DevSecOps★ Leader

Snyk

Gartner AST Leader · 2025

Developer-first security for code, open-source dependencies, containers and IaC.

SCASASTContainers
AppSec & DevSecOps★ Leader

Veracode

Gartner AST Leader · 11x

Application security testing platform spanning SAST, DAST and SCA.

SASTDASTSCA
AppSec & DevSecOps★ Leader

Checkmarx

Gartner AST Leader · 7x

Application security testing across the whole software development lifecycle.

SASTSCAAPI
AppSec & DevSecOps★ Leader

Black Duck

Gartner AST Leader

Application security and software composition analysis (formerly Synopsys).

SCASASTDAST
AppSec & DevSecOps◆ Strong Performer

GitHub Advanced Security

Native code security

Code scanning, secret scanning and dependency review built into GitHub.

SASTSecretsSCA
AppSec & DevSecOps★ Leader

HackerOne

Bug bounty leader

Crowdsourced security testing and the best-known bug bounty platform.

Bug BountyPentest
AppSec & DevSecOps◆ Strong Performer

Salt Security

API security leader

Dedicated API security for discovery, posture and runtime protection.

APIRuntime
AppSec & DevSecOps▲ Fast Riser

Semgrep

Fast, open SAST

Lightweight, fast static analysis loved by developer teams.

SASTOpen
Category 13 of 16

Threat Intelligence 7

Threat Intelligence★ Leader

Recorded Future

Threat intel leader

Real-time threat intelligence across the open, deep and dark web.

CTIDark Web
Threat Intelligence★ Leader

Mandiant

IR & intel leader

Frontline threat intelligence and incident response, now part of Google Cloud.

CTIIRForensics
Threat Intelligence★ Leader

CrowdStrike Falcon Intel

Adversary intel leader

Adversary-focused threat intelligence woven across the Falcon platform.

CTIAdversary
Threat Intelligence◆ Strong Performer

Flashpoint

Deep & dark web intel

Intelligence focused on illicit online communities and emerging threats.

CTIDark Web
Threat Intelligence◆ Strong Performer

Intel 471

Cybercrime intel

Cybercrime and adversary intelligence for proactive defense.

CTICybercrime
Threat Intelligence◆ Strong Performer

ZeroFox

Digital risk protection

External threat intelligence and digital risk protection for brands.

DRPBrand
Threat Intelligence● Established

Anomali

Threat intel platform

A platform for aggregating, managing and operationalizing threat feeds.

TIPFeeds
Category 14 of 16

Data Security & DLP 6

Data Security & DLP★ Leader

Varonis

Data security leader

Data security platform centered on monitoring and least-privilege for data.

DLPDSPMMonitoring
Data Security & DLP▲ Fast Riser

Cyera

DSPM leader

AI-powered data security posture management across cloud and SaaS.

DSPMAI
Data Security & DLP◆ Strong Performer

Microsoft Purview

Integrated DLP & governance

Data governance, loss prevention and compliance across the Microsoft estate.

DLPGovernanceCompliance
Data Security & DLP◆ Strong Performer

Forcepoint

DLP veteran

Data-first security and data loss prevention across endpoints and cloud.

DLPCASB
Data Security & DLP● Established

Symantec DLP

Enterprise DLP

Long-standing enterprise data loss prevention (now Broadcom).

DLPEnterprise
Data Security & DLP▲ Fast Riser

Cyberhaven

Data lineage DDR

Data detection and response that traces data lineage to stop leaks.

DDRDLP
Category 15 of 16

OT / ICS Security 7

OT / ICS Security★ Leader

Claroty

Gartner CPS Leader

Cyber-physical systems protection across OT, IoT and healthcare devices.

OTIoTCPS
OT / ICS Security★ Leader

Nozomi Networks

Gartner CPS Leader

OT and IoT visibility, monitoring and threat detection.

OTIoTNDR
OT / ICS Security★ Leader

Armis

Gartner CPS Leader

Asset visibility and security across IT, OT, IoT and medical devices.

Asset VisibilityIoTOT
OT / ICS Security◆ Strong Performer

Dragos

ICS / OT specialist

Industrial control system cybersecurity and dedicated OT threat intelligence.

ICSOTThreat Intel
OT / ICS Security◆ Strong Performer

Microsoft Defender for IoT

Gartner CPS Leader · 2025

OT and IoT threat detection integrated with the Microsoft security stack.

OTIoT
OT / ICS Security◆ Strong Performer

Forescout

Device & OT visibility

Device visibility and control spanning IT and OT environments.

NACOTVisibility
OT / ICS Security◆ Strong Performer

Tenable OT

OT exposure

OT security and exposure management for industrial environments.

OTVuln Mgmt
Category 16 of 16

Backup & Cyber Resilience 6

Backup & Cyber Resilience★ Leader

Veeam

Gartner Leader, Backup · 9x

Data protection and ransomware recovery across cloud, SaaS and on-prem.

BackupRecoveryRansomware
Backup & Cyber Resilience★ Leader

Rubrik

Gartner Leader, Backup

Cyber resilience and data security with rapid, secure recovery.

BackupCyber Recovery
Backup & Cyber Resilience★ Leader

Cohesity

Gartner Leader, Backup · 6x

Data protection and management with anti-ransomware (now with Veritas).

BackupAnti-ransomware
Backup & Cyber Resilience★ Leader

Commvault

Gartner Leader, Backup · 13x

Data protection and cyber resilience across hybrid and multi-cloud.

BackupResilience
Backup & Cyber Resilience★ Leader

Druva

Gartner Leader, Backup (SaaS)

Fully cloud-native, SaaS data protection and backup.

BackupSaaSCloud
Backup & Cyber Resilience◆ Strong Performer

Dell PowerProtect

Enterprise data protection

Enterprise backup and recovery (PowerProtect, Data Domain).

BackupEnterprise
Rising together.Oluma Cyber Security · Provider Map
Building a stack? → Start with your biggest risk

Standings summarise publicly available analyst research and market position as of early 2026 and are categorical, not numeric scores. GARTNER and MAGIC QUADRANT are registered trademarks of Gartner, Inc.; FORRESTER WAVE is a trademark of Forrester Research, Inc. Neither firm endorses any vendor, and their research reflects analyst opinion, not statements of fact. Logos and names belong to their respective owners. Listing here is informational and not an endorsement by Oluma.