Skip to content
Innovation Tier

Incumbent

A scaled public/mega-cap incumbent (valuation or market cap in the tens of billions or more — Microsoft, Cisco, IBM, CrowdStrike, and similar category giants). Placed below Emerging deliberately: the Matrix rewards disruption over incumbency, however large the install base or revenue.

42 /100

ABS Group

A well-established risk-and-assurance subsidiary of classification society ABS, adding meaningful ICS/OT cybersecurity depth through the RMC Global acquisition,…

Incumbent Network Security
42 /100

Cegeka

An established, privately held European IT-services firm building meaningful defense-sector cybersecurity and identity-management depth through targeted acquisitions (3Point,…

Incumbent Identity & Access Management
42 /100

Symantec Enterprise Security (Broadcom)

Broadcom's enterprise security portfolio — Symantec Endpoint Security, Data Loss Prevention, and Secure Web Gateway — now run…

Incumbent Network Security
42 /100

Bridgepoint

A well-capitalized, publicly listed European private-equity firm using a buy-and-build strategy to consolidate asset-intelligence and identity-security platforms, giving…

Incumbent Attack Surface Management
40 /100

Eurazeo

A large, publicly listed European private-equity firm backing a respected German threat-intelligence and forensics vendor (Nextron Systems) through…

Incumbent Security Operations
40 /100

ScanSource

A large, publicly traded technology distributor extending into managed cybersecurity services through acquisition of a channel solutions provider;…

Incumbent Security Operations
40 /100

Westcon Comstor

An established global technology distributor making a targeted geographic-expansion acquisition to enter the Balkans cybersecurity distribution market --…

Incumbent Security Operations
40 /100

Andersen

A large, well-established global professional-services association extending its footprint into cybersecurity, compliance, and privacy consulting through targeted additions…

Incumbent Governance, Risk & Compliance
40 /100

Howden

A large global insurance broker strengthening its cyber-risk analytics capability through the Cybeta IP acquisition, relevant to CISOs…

Incumbent Governance, Risk & Compliance
40 /100

Wipfli

A large, well-established US accounting and advisory firm adding meaningful infosec/privacy compliance depth through the CompliancePoint acquisition, a…

Incumbent Governance, Risk & Compliance
40 /100

Carlyle

A major global private-equity firm backing NSA-certified hardware-encryption technology through the Secturion Systems acquisition, providing growth capital to…

Incumbent Data Protection
40 /100

Gryphon Investors

A long-established (1995) middle-market private equity firm whose portfolio company executed a disclosed, well-documented GRC roll-up acquisition --…

Incumbent Governance, Risk & Compliance
40 /100

Accel-KKR

A well-established, technology-focused global private-equity firm providing continuation capital to a German cybersecurity SME platform (Securepoint) via the…

Incumbent Network Security
38 /100

Bank of America

A major global bank absorbing a respected boutique offensive-security consultancy (MDSec) to strengthen internal red-team and penetration-testing capability,…

Incumbent Attack Surface Management
38 /100

FGS Global

A large global communications/advisory firm launching a genuinely new AI Advisory practice anchored by a credible threat-intelligence acquisition…

Incumbent Security Operations
35 /100

IronNet

A cautionary but historically significant case: after going public via SPAC in 2021 and reporting mounting losses, IronNet…

Incumbent Network Security
33 /100

THL (Thomas H. Lee Partners)

A long-established, major middle-market private equity firm whose direct cybersecurity relevance is limited to portfolio-wide security governance rather…

Incumbent Governance, Risk & Compliance