Incumbent
A scaled public/mega-cap incumbent (valuation or market cap in the tens of billions or more — Microsoft, Cisco, IBM, CrowdStrike, and similar category giants). Placed below Emerging deliberately: the Matrix rewards disruption over incumbency, however large the install base or revenue.
Logicalis
A Datatec-owned global IT services provider that acquired Splunk and security partner Loial in August 2026.
AEA Investors
A New York private equity firm that made a majority investment in 1,700-customer MSP Magna5 in February 2026.
Serasa Experian
Brazil's dominant credit-bureau subsidiary of Experian, strengthened in fraud prevention through the ClearSale acquisition.
Montagu
A London private equity firm taking a majority stake in certification body DQS in April 2026.
Presidio
A BC Partners-owned IT and security integrator consolidating regional firms such as Internetwork Engineering and Red Sky Solutions.
ABS Group
The risk-and-assurance subsidiary of the American Bureau of Shipping, adding ICS/OT cybersecurity through RMC Global in 2026.
Cegeka
A family-owned Belgian IT-services firm building defense-sector cyber and IAM practices via 3Point and SecurIT.
Symantec Enterprise Security (Broadcom)
Broadcom's enterprise security portfolio — Symantec Endpoint Security, Data Loss Prevention, and Secure Web Gateway — now run…
Bridgepoint
A listed London private equity firm with majority stakes in Lansweeper and iC Consult and a stake in…
Eurazeo
A listed French private equity firm that took a majority stake in forensics vendor Nextron Systems in 2026.
ScanSource
A NASDAQ-listed technology distributor extending into managed cybersecurity services through its $220.5M MicroAge acquisition.
Westcon Comstor
A global cybersecurity distributor that entered the Balkans by acquiring Slovenia's REAL Security in January 2026.
Andersen
A global professional-services association extending into cyber and privacy advisory through BD Emerson and a collaboration with S-RM.
Howden
A global insurance broker that acquired Cybeta's cyber-risk analytics IP in May 2026.
Wipfli
A top-25 US accounting and advisory firm that added infosec and privacy compliance by acquiring CompliancePoint in 2026.
Carlyle
A global private equity firm that acquired NSA-certified encryption vendor Secturion Systems in July 2026.
Gryphon Investors
A San Francisco private equity firm whose portfolio company Ncontracts acquired Quantivate to form a 4,000-institution GRC platform.
Accel-KKR
A technology-focused private equity firm leading a continuation fund backing German SME security vendor Securepoint.
Bank of America
A major bank acquiring UK offensive-security consultancy MDSec to build in-house red-team capability.
FGS Global
A global strategic communications firm launching an AI Advisory practice anchored by its acquisition of OSINT/threat-intelligence firm Memetica.
IronNet
The NSA-director-founded Collective Defense pioneer that went public via SPAC in 2021 and ceased independent operations in February…
THL (Thomas H. Lee Partners)
A Boston private equity firm that standardizes eSentire MDR across more than 35 portfolio companies.