Symantec Enterprise Security (Broadcom)

In 2019, Broadcom acquired Symantec’s Enterprise Security business for $10.7 billion, folding the decades-old antivirus and enterprise-security pioneer into Broadcom Software (now part of Broadcom’s infrastructure software segment alongside VMware). What remains is one of the largest, most deployed portfolios in enterprise security: Symantec Endpoint Security — one of the longest-running endpoint protection platforms, historically evaluated in MITRE ATT&CK Evaluations — Symantec Data Loss Prevention (DLP), long considered one of the most mature and widely deployed DLP suites in large regulated enterprises, plus network/web security (Symantec Secure Web Gateway, formerly Blue Coat ProxySG) and email security.

Since the Broadcom acquisition, the commercial model has shifted sharply: independent industry press and customer/reseller commentary widely report Broadcom raising prices, forcing customers into large consolidated enterprise license agreements, and pushing smaller or non-strategic accounts toward partners or off the platform — the same playbook Broadcom later applied to VMware after that acquisition. This has produced real customer friction and portfolio consolidation, even as the underlying technology retains significant large-enterprise market share, particularly in DLP and endpoint protection at organizations that adopted it before the acquisition.

For CISOs, Symantec Enterprise Security under Broadcom is now less a growth product and more a mature, deeply entrenched incumbent: hard to displace given the sunk cost in DLP policy configuration and endpoint agent deployment, but increasingly viewed as a vendor-lock-in and cost-management problem rather than a source of innovation.