Incumbent
A scaled public/mega-cap incumbent (valuation or market cap in the tens of billions or more — Microsoft, Cisco, IBM, CrowdStrike, and similar category giants). Placed below Emerging deliberately: the Matrix rewards disruption over incumbency, however large the install base or revenue.
Visa
The payments network that built fraud and identity-risk capability through BioCatch, Featurespace, and CyberSource.
Axiom GRC
A London Inflexion-backed GRC and assurance platform (1,300+ specialists, 40,000+ clients) built from a GBP 500M carve-out.
F5 (Application Delivery and Security Platform)
Seattle-based ADC leader whose BIG-IP and distributed platform protect apps and APIs from zero-days, DDoS, bot attacks, and…
Deel
A payroll and HR unicorn embedding deepfake detection and continuous identity checks by acquiring Clarity in August 2026.
NetApp
A NASDAQ-listed storage vendor adding VMware disaster-recovery technology via its August 2026 acquisition of JetStream Software.
Wolters Kluwer
A listed information-services company that acquired GRC platform StandardFusion for about EUR 32M to unify audit and GRC.
Accenture
A global systems integrator buying scaled security capability via CyberCX, a $4.175B Dragos stake, runZero, and NetRise.
HPE Aruba Networking
HPE's Aruba networking division, whose ClearPass Policy Manager delivers Zero Trust network access control integrated with 150+ third-party…
Securitas
A global protective-services group that acquired SaaS OSINT platform Liferaft (USD 15.3M ARR) in March 2026.
Reply
A listed Italian digital-consulting group whose cyber boutiques Spike Reply and Communication Valley Reply serve large European enterprises.
Parsons
A NYSE-listed engineering firm that acquired utility OT cybersecurity vendor IPKeys Power Partners for $43M.
Qualcomm
A global chipmaker that acquired home-network security firm SAM Seamless Network, reportedly for over $150M.
IBM Security Verify
IBM's enterprise identity and access management suite covering SSO, adaptive MFA, identity governance, and risk-based authentication as part…
Check Point CloudGuard
Cloud security suite from veteran network-security vendor Check Point, bundling CNAPP posture management, WAF and multi-cloud network protection.
Fortra (Alert Logic MDR/XDR/WAF Bus.)
Alert Logic was Fortra’s managed detection and response (MDR), extended detection and response (XDR), and web application firewall…
IBM QRadar SIEM
IBM QRadar SIEM is IBM's long-standing security information and event management product line, providing centralized log correlation, threat…
SIMS Software
SIMS Software, based in Carlsbad, California, builds Secret Information Management System (SIMS) software used by defense contractors and…
Munich Re
A global reinsurer whose HSB subsidiary acquired cyber insurer At-Bay for $575M.
KPIT
An Indian automotive-software engineering firm acquiring Israeli automotive security firm Cymotive for up to $120M in 2026.
SGS
A Geneva-based certification giant that acquired PCI DSS specialist Panacea Infosec in January 2026.
Check Point Software Technologies
One of the original firewall vendors, now selling the Quantum NGFW line alongside cloud, endpoint, and SASE products…
Everpure
The NYSE-listed infrastructure company formerly known as Pure Storage, now building AI-ready data governance via its acquisition of…
Logicalis
A Datatec-owned global IT services provider that acquired Splunk and security partner Loial in August 2026.
Tetra Tech
A NASDAQ-listed engineering firm building federal cyber capability through its Amyx (2023) and Halvik (2026) acquisitions.