Skip to content
Innovation Tier

Incumbent

A scaled public/mega-cap incumbent (valuation or market cap in the tens of billions or more — Microsoft, Cisco, IBM, CrowdStrike, and similar category giants). Placed below Emerging deliberately: the Matrix rewards disruption over incumbency, however large the install base or revenue.

75 /100

Palo Alto Networks Cortex XSIAM

Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…

Incumbent Security Operations
73 /100

Palo Alto Networks (Prisma AIRS)

Major cybersecurity incumbent's unified AI security platform (Prisma AIRS) for discovering, assessing and protecting AI models, agents and…

Incumbent AI Security
72 /100

AWS Wickr

AWS Wickr is Amazon's end-to-end encrypted messaging, voice, video, and file-sharing platform for regulated and government environments, holding…

Incumbent Data Protection
72 /100

CrowdStrike

Publicly traded endpoint and cloud security leader whose Falcon Exposure Management module extends its platform into AI-driven vulnerability…

Incumbent Threat & Vulnerability Management
72 /100

Microsoft Defender for Cloud

Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…

Incumbent Cloud Security
70 /100

Microsoft Sentinel

Microsoft's cloud-native SIEM, deeply integrated with Azure and Microsoft 365 telemetry, now layering agentic AI (Security Copilot/Sentinel agents)…

Incumbent Security Operations
70 /100

Cisco AI Defense (Robust Intelligence)

AI security product line built on Robust Intelligence's algorithmic red-teaming and AI Firewall technology, now integrated into Cisco's…

Incumbent AI Security
70 /100

Google Security Operations

Google's cloud-scale SIEM/SOAR (formerly Chronicle), unifying a petabyte-scale data lake with Mandiant frontline threat intelligence and Gemini-powered investigation.

Incumbent Security Operations
68 /100

CrowdStrike Falcon Cloud Security

Hybrid agent/agentless cloud security module inside CrowdStrike's Falcon platform, pairing posture management with endpoint-grade runtime detection.

Incumbent Cloud Security
68 /100

Datadog Cloud Security Management

Cloud security module embedded in Datadog's observability platform, correlating posture, identity risk, and workload telemetry via a shared…

Incumbent Cloud Security
68 /100

Microsoft Entra ID

Microsoft's cloud identity and access platform (formerly Azure AD) providing SSO, conditional access, MFA, and identity governance across…

Incumbent Identity & Access Management
67 /100

Microsoft (AI Security portfolio)

Major cloud/software incumbent extending its Purview, Defender and Security Copilot products to cover AI-specific data-security, posture and threat-detection…

Incumbent AI Security
67 /100

Palo Alto Networks Cortex Xpanse

DARPA-derived internet scanning platform, now Palo Alto Networks' EASM module, that continuously maps and attributes internet-facing assets.

Incumbent Attack Surface Management
65 /100

ServiceNow (Governance, Risk & Compliance)

ServiceNow's GRC and Integrated Risk Management module extends its enterprise workflow platform to unify risk, policy, and vendor…

Incumbent Governance, Risk & Compliance
65 /100

MITRE

Incumbent AI Security
63 /100

NinjaOne

Incumbent Network Security
63 /100

Palo Alto Networks Prisma Cloud

Code-to-runtime CNAPP from Palo Alto Networks, built through acquisitions and now being merged into the AI-driven Cortex Cloud…

Incumbent Cloud Security
62 /100

Deloitte

Deloitte is one of the world's largest professional services firms, with a cybersecurity consulting and managed-services practice spanning…

Incumbent Security Operations
62 /100

Palo Alto Networks (Cortex Xpanse)

Global cybersecurity platform vendor whose Cortex Xpanse product performs continuous, agentless internet-wide external attack surface scanning.

Incumbent Threat & Vulnerability Management
60 /100

Microsoft Purview

Microsoft's built-in data security and governance suite, unifying DLP, information protection, DSPM, and compliance across Microsoft 365 and…

Incumbent Data Protection
60 /100

NTT Communications Corporation

Incumbent Network Security
58 /100

Trend Micro (Trend Vision One – Cloud Security)

A veteran Japanese security vendor whose Trend Vision One platform bundles cloud posture management, workload, and container protection…

Incumbent Cloud Security
58 /100

OVHcloud

Incumbent
58 /100

Cisco Duo

Widely deployed MFA and access-security product, acquired by Cisco in 2018, known for simple push-based multi-factor authentication.

Incumbent Identity & Access Management