Incumbent
A scaled public/mega-cap incumbent (valuation or market cap in the tens of billions or more — Microsoft, Cisco, IBM, CrowdStrike, and similar category giants). Placed below Emerging deliberately: the Matrix rewards disruption over incumbency, however large the install base or revenue.
Cisco (Secure Firewall)
CISO ReviewedCisco's Secure Firewall line embeds NGFW, IPS, and zero-trust segmentation into the networking giant's dominant enterprise infrastructure footprint.
Trend Micro (Trend Vision One – Cloud Security)
A veteran Japanese security vendor whose Trend Vision One platform bundles cloud posture management, workload, and container protection…
OVHcloud
A European cloud provider that integrated ANSSI-certified zero-knowledge encryption from Seald as OVHcloud E2EE in January 2026.
Cisco Duo
Widely deployed MFA and access-security product, acquired by Cisco in 2018, known for simple push-based multi-factor authentication.
Leonardo
A European defense group building owned Zero Trust technology via stakes in SSH Communications, Becrypt, Axiomatics, and Arbit.
Booz Allen
A public federal consulting firm that completed its Defy Security acquisition in April 2026 to push Vellox into…
ServiceNow Security Operations
ServiceNow Security Operations is ServiceNow's workflow-driven product line for security incident response, vulnerability response, and threat intelligence, built…
AT&T Business
A telecom incumbent delivering network-native security via AT&T Dynamic Defense, managed SASE, and LevelBlue.
Kaseya
A Miami, PE-backed MSP software incumbent consolidating IT management and security (Datto, RocketCyber, ID Agent).
OpenText
A public information-management giant bundling Fortify, ArcSight, NetIQ, and Webroot under one security portfolio.
Zurich
A global insurer whose roughly $11B Beazley acquisition and BOXX deal build a leading cyber-insurance and incident-response business.
Databricks
A data-and-AI platform building a lakehouse-native security analytics stack via Panther Labs, Antimatter, SiftD, and Lakewatch.
Snowflake
A public data-cloud platform extending into security observability and AI-agent access governance via Observe and Natoma.
Splunk (a Cisco company)
Long-standing machine-data and log-analytics platform, now Cisco's security and observability backbone, powering SIEM and SOAR for a large…
Akamai (App & API Protector)
Edge-network security business protecting web applications, APIs and DDoS surfaces at global CDN scale.
Google (Cloud Security AI portfolio)
Major cloud incumbent applying its Secure AI Framework and Google Cloud security products, including Model Armor, to protect…
NETSCOUT
A four-decade, NASDAQ-listed network-visibility and DDoS-defense incumbent (Arbor, Omnis).
Microsoft Defender External Attack Surface Management
Microsoft's EASM product, built on acquired RiskIQ technology, that maps internet-facing assets for organizations already using the Microsoft…
i-Sprint Innovations
25-year-old Singapore-based IAM vendor providing enterprise authentication, mobile app protection, and post-quantum cryptography migration tooling, primarily serving Asian…
Qoria
Qoria is an Australia-based, ASX-listed provider of digital safety and student wellbeing solutions, built around subsidiary brands Linewize…
OpenAI
A leading AI lab that acquired AI red-teaming tool Promptfoo in March 2026 to embed security testing in…
AXA XL
AXA's specialty insurer agreeing in August 2026 to buy the remaining ~51% of cyber-risk consultancy S-RM.
IBM
Diversified technology incumbent; its security portfolio and consulting acquisitions (including Logiq, September 2026) are tracked here.
Cisco Systems
A scaled public incumbent whose security portfolio, built through Splunk, Duo, and AI-security acquisitions, rides on its networking…