Cybersecurity companies
301 companies assessed. 161 of them, 53.5%, sit in the two least protected bands, against 53.3% across all 10,525 companies assessed.
The picture
Cybersecurity is splitting into two very different stories right now. In the West, the biggest platform and hardware players are holding their ground or gaining, because AI threats are pushing companies to consolidate tools rather than buy more point products. Palo Alto Networks, Fortinet, Verisign, HID Global and Absolute Software all sit on positions that are hard to dislodge, whether that's a government-exclusive registry contract, custom security chips, or hardware baked into hundreds of millions of devices. Meanwhile a long tail of point-solution vendors, especially in endpoint and cloud posture management, are getting run over. Lacework, Cybereason, Skybox and Horangi all ended up sold off cheap or shut down because faster-moving rivals like Wiz, CrowdStrike and SentinelOne out-executed them on AI-native detection. In China, the picture is different again: dozens of vendors (Qi An Xin, Venustech, NSFOCUS, Westone, DAS Security) are all fighting inside the same protected domestic market, and that protection is no longer enough, since AI is eroding the value of the signature-based tools most of them still sell. The one thing deciding outcomes across all of this is whether a company's product is locked into infrastructure, hardware, or a contract that can't be easily swapped, versus a subscription tool that a bigger platform can now replicate with AI features built in.
All 301 companies, most protected first
| Company | Standing |
|---|---|
| 1Password Password manager and secrets vault that businesses use to control who and what can access systems | Hard to displace |
| Absolute Software Firmware-embedded endpoint security that survives OS wipes on 600M+ devices | Hard to displace |
| AhnLab South Korean antivirus and EDR vendor, 30 years old, protects government and enterprise systems | Hard to displace |
| AlgoSec Vendor-neutral platform that manages firewall and cloud security policy across mixed networks | Hard to displace |
| Armis Armis maps and secures every connected device, IT, IoT, OT, and medical, now inside ServiceNow | Hard to displace |
| BAE Systems Applied Intelligence Cyber, intelligence, and defense systems arm of UK defense prime BAE Systems | Hard to displace |
| CHT Security Cybersecurity arm of Chunghwa Telecom, running Taiwan's largest MSSP for consumers, SMEs, and government | Hard to displace |
| Cybertrust Japan Japan's first certificate authority, running PKI, IoT identity and e-seal trust services | Hard to displace |
| Deloitte Cyber World's largest cybersecurity consulting practice, run inside Deloitte's global network | Hard to displace |
| ESET Slovak antivirus and endpoint security vendor selling to consumers and businesses worldwide | Hard to displace |
| Fortinet Fortinet sells firewalls and network security hardware built on custom chips, used by 680,000+ customers | Hard to displace |
| Gen Digital Consumer cybersecurity parent of Norton, Avast, LifeLock, and MoneyLion | Hard to displace |
| GlobalSign Belgian certificate authority providing SSL/TLS, PKI, and digital identity services under GMO Internet Group | Hard to displace |
| HID Global Makes ID cards, badges, and access readers used to secure buildings and borders worldwide. | Hard to displace |
| Hitachi Systems Captive Hitachi Ltd. subsidiary running IT infrastructure, cybersecurity, and cloud services for Japanese enterprise and government clients | Hard to displace |
| HPE Aruba Networking HPE's networking arm selling enterprise wired, wireless, and AI-ready switching gear | Hard to displace |
| Imprivata Imprivata sells badge-tap login and access software that hospitals use to get clinicians into systems fast. | Hard to displace |
| Internet Initiative Japan (IIJ) Japan's first ISP, now a carrier-neutral network, cloud, and MVNO operator | Hard to displace |
| Keyfactor Software that manages digital certificates and machine identities across clouds and devices | Hard to displace |
| LAC Co., Ltd. LAC runs Japan's JSOC security monitoring and incident response, now a KDDI subsidiary | Hard to displace |
| Moxa Taiwanese maker of ruggedized industrial networking gear for factories, rail, and energy grids | Hard to displace |
| Noname Security API security and threat detection product, now part of Akamai after 2024 acquisition | Hard to displace |
| NRI SecureTechnologies Japanese security consulting and managed security services firm owned by Nomura Research Institute | Hard to displace |
| Palo Alto Networks Cybersecurity platform giant selling firewalls, cloud and identity security to large enterprises | Hard to displace |
| Proofpoint Email and human-risk security vendor protecting Fortune 500 inboxes, owned by Thoma Bravo | Hard to displace |
| Secom Trust Systems Japan's trust and security services arm of Secom Group, running root CA, data centers, e-contracts | Hard to displace |
| Semperis Identity security vendor that recovers Active Directory after cyberattacks | Hard to displace |
| Silverfort Silverfort protects legacy logins and service accounts that most MFA tools can't reach | Hard to displace |
| Tesserent Australian cybersecurity services group, now a Thales-owned unit serving government and defence clients | Hard to displace |
| Thales French defense and cybersecurity conglomerate building radar, avionics, satellites, and encryption for governments | Hard to displace |
| Trend Micro Japan's Trend Micro sells endpoint, cloud, and OT security software to enterprises worldwide. | Hard to displace |
| Tufin Tufin manages firewall and cloud security rules across many vendors' systems. | Hard to displace |
| Utimaco German maker of hardware security modules that safeguard encryption keys for banks and governments | Hard to displace |
| Verisign Verisign runs the .com and .net domain registries under an exclusive US government contract | Hard to displace |
| Accenture Security Accenture's cybersecurity practice, a $10B unit selling security consulting, managed services, and now OT threat data | Defensible for now |
| BitSight BitSight sells cyber risk ratings and exposure data used by insurers, regulators, and enterprises. | Defensible for now |
| Bitwarden Open-source password manager serving 15M+ users and 80,000 businesses | Defensible for now |
| Check Point Software Technologies Israeli firm selling firewalls, VPNs, and cloud security to enterprises worldwide | Defensible for now |
| Claroty Claroty secures industrial control systems and connected devices in factories, hospitals, and grids. | Defensible for now |
| Cogito Group Australian firm running government PKI, identity credentials and cybersecurity services | Defensible for now |
| Cohesity Enterprise backup and data security platform, now merged with Veritas's data protection business | Defensible for now |
| Cyber Defense Institute NEC-owned Japanese firm doing courtroom-grade incident response, forensics, and security diagnostics | Defensible for now |
| CyberArk Privileged access management specialist, now a Palo Alto Networks unit | Defensible for now |
| CyberCX Australian cybersecurity services firm, now an Accenture subsidiary after Feb 2026 buyout | Defensible for now |
| DigiCert Certificate authority issuing and managing TLS/SSL trust for websites | Defensible for now |
| Digital Arts Inc. Japanese vendor of web/email content filters (i-FILTER, m-FILTER) and new SSE platform Z-FILTER | Defensible for now |
| Dragos Dragos sells threat detection software for industrial control systems and factory networks | Defensible for now |
| Ensign InfoSecurity Singapore's largest pure-play cybersecurity services firm, majority owned by Temasek | Defensible for now |
| Entrust Entrust makes ID verification, PKI, HSMs, and secure card issuance systems for governments and banks. | Defensible for now |
| EY Cybersecurity Big Four unit selling cybersecurity audits, risk consulting, and compliance work to large enterprises | Defensible for now |
| ForgeRock Identity platform now absorbed into Ping Identity, handling logins and access for big companies | Defensible for now |
| Genians Korean network access control and endpoint security vendor protecting government, military, and finance networks | Defensible for now |
| Global Security Expert Inc. Japanese firm doing penetration testing, security training, and EC-Council/ISC2 certification distribution | Defensible for now |
| Huntress Managed detection and response for small businesses, sold mainly through MSP partners | Defensible for now |
| Jamf Jamf sells software that manages and secures Apple devices for businesses and schools | Defensible for now |
| Juniper Networks Router and switch maker now run as HPE's networking division after the 2025 buyout | Defensible for now |
| Keeper Security Password manager and privileged access management vendor for businesses and consumers | Defensible for now |
| KPMG Cyber Big Four cybersecurity consulting arm advising boards on risk, audits, and breach response | Defensible for now |
| Kroll Kroll is a risk advisory firm doing cyber incident response, valuations, and court-appointed settlement work | Defensible for now |
| Macnica Japan's top cybersecurity and electronics distributor, reselling and integrating global security tools. | Defensible for now |
| Nozomi Networks OT/ICS security vendor protecting industrial networks, now a Mitsubishi Electric subsidiary | Defensible for now |
| NTT Security Managed security arm of Japan's NTT, running SOC and MDR services for enterprises worldwide | Defensible for now |
| Penta Security Systems South Korean vendor of web application firewalls and IoT security for public and private clients | Defensible for now |
| Perception Point Email and workspace security platform, now absorbed into Fortinet after its 2024 acquisition | Defensible for now |
| Ping Identity Enterprise identity and access management vendor for large regulated companies | Defensible for now |
| Recorded Future Threat intelligence platform owned by Mastercard, tracking 200+ billion data points on hackers | Defensible for now |
| Rubrik Rubrik sells cloud based backup and ransomware recovery software for enterprise data. | Defensible for now |
| SAIC SAIC runs IT, cybersecurity, and engineering programs for US defense and civilian agencies | Defensible for now |
| Saviynt Identity governance platform that manages who and what can access enterprise systems | Defensible for now |
| Sectigo Sectigo issues and manages digital certificates that keep websites and devices trusted online | Defensible for now |
| SK Shieldus South Korea's top physical and cyber security operator, born from ADT Caps and SK Infosec. | Defensible for now |
| Systex Corporation Taiwan IT systems integrator serving banks, insurers, and government agencies. | Defensible for now |
| Team Cymru Threat intel firm selling internet visibility from ISP telemetry and passive DNS data | Defensible for now |
| Tencent Security Cybersecurity unit inside Tencent Cloud, selling tools built on Tencent's own WeChat, gaming, and payments data | Defensible for now |
| Venafi Venafi builds machine identity and certificate management tools now folded into Palo Alto's Idira platform | Defensible for now |
| Viettel Cyber Security State-owned Vietnamese cybersecurity arm running SOC/MDR for government, banks, and defense. | Defensible for now |
| Zscaler Zscaler runs a cloud-based zero trust network and internet security platform (SASE/SSE). | Defensible for now |
| A10 Networks A10 Networks makes application delivery controllers and DDoS/security appliances for carriers and data centers | Protection under test |
| Acer Cyber Security Inc. Taiwan-listed managed security firm running SOC, compliance audits, and Acer's ISAC | Protection under test |
| Beijing Topsec Technology Chinese cybersecurity vendor making firewalls and gov/public-security monitoring tools | Protection under test |
| Binary Defense Managed detection and response provider running human-staffed security operations centers for mid-market clients | Protection under test |
| BlackBerry Cybersecurity Canadian firm selling secure comms and device management to governments and enterprises | Protection under test |
| Cato Networks Cato Networks sells a cloud-based network security service that replaces old-school MPLS and firewall boxes | Protection under test |
| Cloud4C Indian managed cloud and SAP services firm with a cybersecurity SOC arm, now owned by Capgemini | Protection under test |
| Coalition Cyber insurance carrier and security platform, largest cyber premium writer in North America. | Protection under test |
| Constella Intelligence Sells breach and stolen-identity data to companies, banks, and police. | Protection under test |
| Corelight Corelight sells network detection boxes that watch traffic for security teams to catch attackers | Protection under test |
| Cyble Cyble runs an AI-driven threat intelligence platform tracking darknet chatter for enterprises and governments | Protection under test |
| Cyera Cyera makes software that scans cloud data to find and lock down sensitive information | Protection under test |
| Delinea Delinea sells privileged access management software to control who and what can reach sensitive systems | Protection under test |
| Doppel Doppel finds and takes down fake sites, accounts, and phishing that impersonate brands and executives | Protection under test |
| ESTsecurity Korean antivirus/endpoint security vendor behind ALYac and Dr.Capsule, sits #2/3 in Korea | Protection under test |
| ExtraHop Networks Network detection and response platform that decrypts wire data to spot threats other tools miss | Protection under test |
| F-Secure Finnish consumer cybersecurity firm selling antivirus, VPN, and scam protection through telecom carriers | Protection under test |
| Gigamon Gigamon builds hardware that taps and decrypts network traffic for security and observability tools | Protection under test |
| GreatHorn Cloud email security vendor, fully absorbed into Proofpoint since 2022, no longer independent | Protection under test |
| GuidePoint Security Vendor-neutral cybersecurity integrator and managed security services provider for enterprises and government | Protection under test |
| HackerOne Marketplace linking 2M security researchers to companies for bug bounty and disclosure | Protection under test |
| HYPR HYPR sells passwordless login and identity verification tools to banks and large enterprises | Protection under test |
| Imperva Web app, API and data security vendor, top-3 in WAAP rankings, owned by Thales | Protection under test |
| Intel 471 Sells cybercrime threat intelligence gathered by human operators inside criminal forums | Protection under test |
| Island Island builds a browser companies deploy to control and secure work applications. | Protection under test |
| ITSEC Asia Indonesian cybersecurity consulting and managed-services firm, first listed on IDX | Protection under test |
| Ivanti Ivanti sells IT and endpoint management software with a security suite bolted on | Protection under test |
| JumpCloud Cloud directory and identity management platform for cross-OS SMBs and MSPs | Protection under test |
| KnowBe4 KnowBe4 trains employees to spot phishing and scams, sold to 70,000+ organizations worldwide | Protection under test |
| Kordia (Aura Information Security) NZ Crown-owned telecom firm with Aura, a cybersecurity and managed-SOC division | Protection under test |
| LastPass LastPass sells password and credential vaults to consumers and businesses | Protection under test |
| Mandiant Threat intel and incident response firm, now a Google Cloud subsidiary | Protection under test |
| MarkAny Korean document security, DRM, and watermarking vendor since 1999 | Protection under test |
| NetScout Systems Sells network traffic visibility gear and DDoS defense to carriers and enterprises | Protection under test |
| NetSPI Penetration testing and attack surface management firm for regulated enterprises | Protection under test |
| Netwrix Netwrix sells data security and Active Directory auditing software to over 13,000 organizations, PE-backed | Protection under test |
| OneTrust OneTrust sells software that helps companies track privacy, data, and AI compliance rules | Protection under test |
| OpenText Cybersecurity OpenText's bundled security portfolio: identity, SIEM, AppSec, endpoint, and forensics tools under one slow-growth parent | Protection under test |
| Ordr Ordr makes software that finds and secures every connected device on a network | Protection under test |
| Peraton Peraton runs classified IT, cyber, and mission-critical systems for US defense and civilian agencies | Protection under test |
| PwC Cybersecurity PwC's cyber consulting arm advises big companies on security risk and breach response | Protection under test |
| Radware Israeli vendor selling DDoS and web application firewall protection to carriers and enterprises | Protection under test |
| Raonsecure South Korean biometric authentication and mobile ID security vendor | Protection under test |
| ReliaQuest Runs GreyMatter, a vendor-neutral platform that manages security detection and response for enterprises | Protection under test |
| Safe Security Cyber risk quantification platform that turns hacking risk into dollar figures for boards | Protection under test |
| SailPoint SailPoint manages who and what can access enterprise systems, selling identity governance software. | Protection under test |
| Sangfor Technologies Chinese cybersecurity and hyperconverged infrastructure vendor selling to enterprises and government | Protection under test |
| SecureMetric ASEAN PKI and digital signature vendor selling trust services to governments | Protection under test |
| Securiti Securiti finds, classifies, and governs sensitive data and AI use for large enterprises, now inside Veeam | Protection under test |
| SecurityScorecard Rates companies' cyber risk using external scans, sold to enterprises and insurers | Protection under test |
| Senetas Senetas builds certified hardware encryptors for governments, sold globally via Thales | Protection under test |
| SISA Information Security PCI compliance auditor and forensics firm for payment security, based in India | Protection under test |
| Skyhigh Security Skyhigh Security sells cloud security (SSE/SASE) tools for web, cloud apps, and data protection | Protection under test |
| Socket Socket scans open-source code and AI-generated dependencies for hidden malware before install | Protection under test |
| Softcamp Korean vendor selling document encryption (E-DRM), file-scrubbing (CDR), and browser isolation for enterprises | Protection under test |
| Sophos UK cybersecurity vendor selling endpoint, network, and MDR services to businesses, owned by Thoma Bravo | Protection under test |
| Sublime Security AI-native email security platform that detects phishing and business email compromise | Protection under test |
| Tanium Tanium runs real-time endpoint visibility and security across 36M+ devices for large enterprises and government. | Protection under test |
| Tenable Tenable makes software that finds security holes in company networks and cloud systems | Protection under test |
| Traceable AI API security and observability platform, now Harness's AppSec unit after its 2025 merger | Protection under test |
| TrustArc TrustArc sells privacy compliance software: cookie consent, DSR handling, regulatory research, assessments. | Protection under test |
| Vade French email security and anti-phishing engine, now absorbed into Proofpoint via Hornetsecurity | Protection under test |
| WithSecure Finnish cybersecurity vendor selling endpoint protection and Salesforce cloud security, now owned by CVC Capital Partners | Protection under test |
| Acronis Backup and cyber protection platform for MSPs and IT departments, owned by EQT | Losing its protection |
| Anchore Makes SBOM and container image scanning tools for software supply chain security | Losing its protection |
| Anomali Anomali sells a threat intelligence platform that helps security teams track and share attacker data. | Losing its protection |
| Antiy Labs Chinese antivirus engine and threat intelligence vendor founded 2000 in Harbin and Beijing | Losing its protection |
| archTIS Makes data classification and access-control software for defence and government | Losing its protection |
| Arctic Wolf Arctic Wolf sells outsourced 24/7 security monitoring and threat response run by human analysts | Losing its protection |
| Asiainfo Security Chinese cybersecurity and digital intelligence vendor listed on Shanghai's STAR Market | Losing its protection |
| Astrix Security Startup securing non-human identities and AI agents across enterprise SaaS, now a Cisco unit | Losing its protection |
| At-Bay Licensed cyber insurance carrier bundled with an in-house risk monitoring and MDR platform | Losing its protection |
| Axonius Axonius tracks and normalizes every device, app, and identity a company owns for security teams | Losing its protection |
| Baidu Security Internal security unit inside Baidu Inc, bundled into Baidu AI Cloud, not a standalone business | Losing its protection |
| Barracuda Networks Barracuda sells email, network, and data security tools to SMBs, mostly through managed service providers. | Losing its protection |
| BBSec (Broadband Security Inc.) Tokyo-listed firm doing PCI DSS/SWIFT security audits, vulnerability scans, and 24/7 SOC monitoring | Losing its protection |
| Beyond Identity Startup selling passwordless, hardware-bound login security to businesses | Losing its protection |
| BeyondTrust BeyondTrust sells privileged access management software for enterprises. | Losing its protection |
| BigID BigID finds and classifies sensitive data across enterprise systems for security and privacy compliance | Losing its protection |
| Bishop Fox Offensive security firm that pen-tests networks, apps, and attack surfaces for large enterprises | Losing its protection |
| Bitdefender Romanian maker of endpoint and threat prevention software, sold direct and through MSPs and OEM partners | Losing its protection |
| Blackpanda Singapore firm doing cyber incident response, recovery, and Lloyd's-backed cyber insurance bundles | Losing its protection |
| Bolster AI platform that detects and takes down phishing and brand impersonation sites | Losing its protection |
| Bugcrowd Runs a crowdsourced bug bounty and pentesting platform connecting hackers to companies | Losing its protection |
| Censys Censys scans the internet daily and sells that attack surface data to security teams and governments | Losing its protection |
| Cequence Security Cequence sells software that watches API traffic and bot behavior to block attacks in real time. | Losing its protection |
| Chainguard Sells hardened, compliance-ready container images so companies pass security audits faster | Losing its protection |
| Chaitin Tech Chinese app security vendor selling WAF hardware, cloud WAF, and an open-source firewall called SafeLine | Losing its protection |
| Cloudbric South Korean web application firewall and DDoS protection vendor under Penta Security | Losing its protection |
| CloudSEK CloudSEK sells AI-driven dark-web and brand threat monitoring to enterprises | Losing its protection |
| CMC Cyber Security Cybersecurity arm of Vietnam's CMC Corporation, running SOC, pentest, and threat-intel services | Losing its protection |
| Coalfire Compliance auditor and pen-tester for FedRAMP, CMMC, PCI, and HITRUST clients | Losing its protection |
| Cobalt.io Cobalt.io sells human-run pentests as a service, used for compliance sign-off | Losing its protection |
| Cofense Cofense sells phishing detection and response, fed by a 35M+ human-reporter network across enterprises. | Losing its protection |
| ConnectWise ConnectWise sells the software MSPs use to run tickets, remote access, and security for their clients | Losing its protection |
| Cyberhaven Startup that maps data lineage across cloud apps to spot and stop data leaks | Losing its protection |
| Cybersixgill Dark web threat intel firm now absorbed into Bitsight after a $115M acquisition | Losing its protection |
| Cycode Israeli startup selling application security posture management (ASPM) across the software pipeline | Losing its protection |
| CyCognito CyCognito finds and ranks a company's exposed internet-facing assets and vulnerabilities | Losing its protection |
| CyCraft Technology AI-driven threat detection firm from Taiwan, sells XCockpit for SOC alert triage and response | Losing its protection |
| Cymulate Cymulate runs breach and attack simulation software that tests if security defenses actually work | Losing its protection |
| Cynet Cynet sells an all-in-one XDR and MDR security platform mainly to MSPs protecting small businesses | Losing its protection |
| Cythera Australian managed detection and response provider built through PE-backed acquisitions | Losing its protection |
| DAS Security Chinese cybersecurity vendor (DBAPPSecurity/DAS-Security) selling to government and enterprise clients | Losing its protection |
| Dashlane Dashlane makes a password manager and credential security platform for consumers and businesses | Losing its protection |
| DataDome DataDome sells real time bot and fraud detection that protects websites and APIs from automated attacks. | Losing its protection |
| Datto Backup, disaster recovery, and cybersecurity tools for MSPs, now a Kaseya brand | Losing its protection |
| DBAPPSecurity Hangzhou vendor selling vulnerability scanning, WAF, and database/log auditing tools in China | Losing its protection |
| Deepwatch Deepwatch is a managed detection and response firm layered on top of customers' security tools | Losing its protection |
| Devo Technology Devo sells cloud-native SIEM security data analytics to enterprises and MSSPs | Losing its protection |
| Digital Hearts Japanese company doing outsourced game QA, security testing, and debugging for publishers | Losing its protection |
| Dropzone AI Dropzone AI builds an AI analyst that investigates security alerts on its own | Losing its protection |
| Duo Security Duo makes login security (MFA) tools, owned by Cisco since 2018 | Losing its protection |
| Egress Software Technologies UK email security and DLP vendor, now absorbed into KnowBe4's training platform | Losing its protection |
| Endor Labs Endor Labs scans code and containers to find real, exploitable vulnerabilities, not just theoretical ones | Losing its protection |
| eSentire eSentire runs managed detection and response services for finance, legal, and healthcare clients | Losing its protection |
| Exabeam Exabeam sells SIEM and behavior analytics software that security teams use to spot threats in log data | Losing its protection |
| Expel Expel runs human-led managed detection and response services across a company's existing security tools | Losing its protection |
| Fasoo South Korean vendor of persistent document encryption and DLP software for regulated firms | Losing its protection |
| Feitian Technologies Chinese maker of FIDO2 hardware keys, OTP tokens, and smart cards for login security | Losing its protection |
| FireMon FireMon makes software that manages firewall rules and compliance across many vendors' gear | Losing its protection |
| Flashpoint Flashpoint sells dark-web and threat intelligence data to governments and companies for risk teams | Losing its protection |
| Forcepoint Forcepoint sells data loss prevention and insider threat software to enterprises and government | Losing its protection |
| Forescout Technologies Maker of device visibility and network access control software for enterprise, OT, and IoT security | Losing its protection |
| Fortra Fortra is a PE-owned cybersecurity roll-up selling file transfer, DLP, and threat intel tools to enterprises | Losing its protection |
| Graylog German-founded, Houston-based maker of the Graylog log management and SIEM platform | Losing its protection |
| GreyNoise Intelligence GreyNoise sells internet scanning noise and threat intel from a global honeypot sensor network | Losing its protection |
| Group-IB Threat intelligence and fraud prevention firm tracking cybercrime via dark web data and law enforcement ties | Losing its protection |
| Hillstone Networks Chinese vendor selling firewalls and NDR/XDR gear to government, telecom, and enterprise networks | Losing its protection |
| HUMAN Security HUMAN Security detects bots, fraud, and fake traffic across web, app, and ad platforms | Losing its protection |
| iboss iboss sells cloud-based secure web gateway and SSE tools to enterprises, schools, and governments | Losing its protection |
| Idemia French biometric ID and security tech firm being split up and sold off piece by piece by its private equity owner | Losing its protection |
| IGLOO Security Korean SIEM and managed security monitoring vendor, 25 years old, #3 domestic player | Losing its protection |
| Illumio Illumio sells software that walls off parts of a network so a breach can't spread everywhere | Losing its protection |
| Immuta Immuta sells one policy layer to control data access across Snowflake, Databricks, and cloud warehouses. | Losing its protection |
| Indusface Indian vendor selling managed cloud WAF/WAAP with 24/7 SOC for mid-market apps | Losing its protection |
| INKA Entworks Korean app security vendor selling mobile app shielding (AppSealing) and video DRM/watermarking (PallyCon), now branded DoveRunner | Losing its protection |
| Ironscales AI-native email security vendor stopping phishing for 17,000+ organizations | Losing its protection |
| Kasada Kasada builds anti-bot and fraud defense software that blocks scrapers and fake traffic | Losing its protection |
| Kaspersky Russian-founded antivirus and threat-intelligence vendor serving consumer and enterprise markets worldwide | Losing its protection |
| Kela Israeli firm that infiltrates dark web forums to sell cyber threat intelligence and ransomware tracking | Losing its protection |
| Lacework Cloud security analytics platform now sold as FortiCNAPP inside Fortinet | Losing its protection |
| Legit Security Israeli startup selling ASPM software that finds and fixes flaws across the software build pipeline | Losing its protection |
| LogRhythm SIEM and security analytics vendor, now a product line inside Thoma Bravo-owned Exabeam | Losing its protection |
| Lookout Mobile and cloud security vendor protecting phones and apps for enterprises and governments | Losing its protection |
| Malwarebytes Malwarebytes sells consumer and small-business malware protection plus MSP endpoint tools | Losing its protection |
| Material Security Startup that scans and protects email and cloud data sitting inside Microsoft 365 and Google Workspace | Losing its protection |
| McAfee Consumer antivirus and identity protection software, owned by private equity since 2022 | Losing its protection |
| Meiya Pico Chinese state-owned firm that extracts phone data for police forensic investigations | Losing its protection |
| Menlo Security Menlo Security sells isolation based browser security to large banks and government agencies | Losing its protection |
| Mimecast Mimecast sells email security, archiving, and human-risk software, owned by Permira since 2022. | Losing its protection |
| N-able N-able makes RMM and security software that MSPs use to manage client IT systems | Losing its protection |
| NCC Group UK firm that tests and certifies companies' cybersecurity, from penetration testing to code review | Losing its protection |
| Netskope Netskope sells cloud security software (SASE/SSE) that inspects and protects data across web, cloud apps, and private networks. | Losing its protection |
| Nexusguard Sells DDoS scrubbing capacity and carrier partnerships to regional telcos in Asia-Pacific | Losing its protection |
| NSFOCUS Chinese cybersecurity vendor selling threat intelligence and managed detection to carriers and banks | Losing its protection |
| NSHC South Korean mobile security and dark-web threat intelligence vendor | Losing its protection |
| Nudge Security Startup that finds shadow SaaS and AI app use by scanning email metadata for security teams | Losing its protection |
| Oligo Security Runtime application security startup using eBPF to catch threats inside live production code | Losing its protection |
| One Identity Identity governance and access management vendor spinning out of Quest Software | Losing its protection |
| Optiv Optiv is a Denver based cybersecurity integrator and managed services provider owned by KKR | Losing its protection |
| Osano Osano sells software that tracks vendor privacy risk and manages cookie consent for companies. | Losing its protection |
| Panorays Panorays runs a platform that scores and manages the cyber risk of a company's vendors and partners | Losing its protection |
| Pentera Automated pentesting platform that simulates real attacks on live enterprise networks | Losing its protection |
| Push Security Push Security makes a browser extension that catches identity attacks like phishing and session hijacking in real time | Losing its protection |
| Qi An Xin (Qianxin) Chinese cybersecurity vendor selling threat detection, SOC, and endpoint tools to government and enterprise clients. | Losing its protection |
| Qihoo 360 Chinese cybersecurity and internet firm serving government, enterprise, and consumer users | Losing its protection |
| Quick Heal Technologies Indian antivirus maker selling consumer AV plus Seqrite enterprise security software | Losing its protection |
| Rapid7 Rapid7 sells vulnerability management and detection & response tools to over 11,500 companies | Losing its protection |
| Red Canary Managed detection and response provider, now a Zscaler subsidiary since August 2025 | Losing its protection |
| RedShield Security NZ firm that virtual-patches web apps to meet PCI and NZISM compliance rules | Losing its protection |
| Resilience Cyber insurance MGA pairing risk-quantification software with underwriting capacity | Losing its protection |
| RSA Security Identity and access management vendor for regulated, high assurance enterprises | Losing its protection |
| SafeBreach Israeli firm selling breach and attack simulation software to test enterprise defenses | Losing its protection |
| Salt Security Salt Security sells a platform that finds and protects APIs from attack and abuse | Losing its protection |
| Secui Korean network security appliance maker, Samsung SDS subsidiary, long-time government NGFW vendor | Losing its protection |
| Secure Code Warrior Enterprise platform that trains developers to write secure code | Losing its protection |
| Secureworks Managed detection and response (MDR) provider now absorbed into Sophos's security portfolio | Losing its protection |
| Securonix Cloud-native SIEM platform for enterprise threat detection, investigation and response | Losing its protection |
| SentinelOne AI-driven endpoint security vendor selling detection and response software to enterprises | Losing its protection |
| Sentra Cloud data security startup that finds, classifies, and protects sensitive data across clouds | Losing its protection |
| Seqrite Indian cybersecurity vendor selling endpoint protection and enterprise security under the Seqrite brand | Losing its protection |
| Sequretek India-based managed security and identity vendor serving BFSI clients | Losing its protection |
| SGA Solutions Korean cybersecurity firm building Zero Trust and N2SF systems for government agencies | Losing its protection |
| SonicWall Maker of firewalls and VPN appliances sold mainly to small and midsize businesses | Losing its protection |
| Sucuri Sucuri sells website malware cleanup and a WAF/CDN, owned by GoDaddy since 2017 | Losing its protection |
| Synack Synack runs crowdsourced penetration testing with vetted human hackers plus AI tools for federal and enterprise clients | Losing its protection |
| ThreatBook Beijing-based vendor selling threat intelligence and detection tools to enterprises and governments | Losing its protection |
| Tigera Tigera makes Calico, security and networking software for container and Kubernetes environments | Losing its protection |
| Torq Torq runs an AI-driven SOC platform that automates security alert triage and response | Losing its protection |
| Transmit Security Passwordless identity and fraud-prevention platform used by major US banks | Losing its protection |
| Trellix Trellix sells XDR and endpoint security, born from the McAfee Enterprise and FireEye merger | Losing its protection |
| Trustview Inc. Taiwanese DRM/DLP vendor selling document encryption and leak-tracking software since 2000 | Losing its protection |
| Trustwave Managed security and compliance services provider, now a brand inside LevelBlue | Losing its protection |
| TXOne Networks Taiwan-based OT/ICS security firm protecting factory and industrial control systems from cyberattacks | Losing its protection |
| UpGuard UpGuard scores and monitors vendor and third-party cyber risk for mid-market security teams | Losing its protection |
| V-Key Singapore vendor selling software-based mobile security to APAC banks and telcos | Losing its protection |
| Varonis Varonis finds and locks down sensitive company data across cloud and on-prem systems | Losing its protection |
| Venustech Chinese cybersecurity vendor selling firewalls, IDS, and SOC tools to state, bank, and telecom clients | Losing its protection |
| Versa Networks Versa Networks sells SASE and SD-WAN software that secures branch, cloud, and remote access traffic | Losing its protection |
| Wallarm Wallarm sells API and AI-traffic security software that inspects and blocks attacks in real time | Losing its protection |
| Wangsu Science & Technology China-licensed CDN, edge computing, and cloud security operator since 2000 | Losing its protection |
| WatchGuard Technologies Maker of network security appliances and MDR for small businesses and MSPs | Losing its protection |
| Westone Information Industry Chinese state-linked cybersecurity and cryptography vendor, now part of CETC group (002268.SZ) | Losing its protection |
| Wins 30-year-old Korean network security and managed security (MSSP) vendor on KOSDAQ | Losing its protection |
| Wipro Indian IT services giant selling outsourced tech labor, cybersecurity, and consulting to big enterprises | Losing its protection |
| Xage Security Xage sells zero-trust cybersecurity that locks down industrial and critical-infrastructure systems. | Losing its protection |
| Yubico Yubico makes YubiKey hardware security keys for phishing-resistant login | Losing its protection |
| ZeroFox ZeroFox finds and takes down fake accounts, phishing sites, and impersonation scams for companies and executives | Losing its protection |
| Zimperium Zimperium sells mobile threat defense and app protection software for phones and apps | Losing its protection |
| Alert Logic Alert Logic sells managed detection and response, now folded into LevelBlue after leaving Fortra | Little protection left |
| Beixinyuan 30-year-old Chinese endpoint security software vendor listed on SZSE ChiNext | Little protection left |
| Bkav Corporation Vietnamese cybersecurity firm selling antivirus software, SOC services, Bphone handsets, and AI View cameras | Little protection left |
| Cybereason Endpoint detection and response vendor, now absorbed into LevelBlue after a November 2025 acquisition | Little protection left |
| CyFirma Singapore-based threat intelligence firm that tracks hacker chatter and exposed attack surfaces | Little protection left |
| Deep Instinct Israeli vendor selling deep learning malware prevention for endpoints and cloud storage | Little protection left |
| eScan (MicroWorld Technologies) eScan is a bootstrapped Indian antivirus and endpoint security vendor from Mumbai. | Little protection left |
| Hauri Inc. Small Korean antivirus vendor making ViRobot, founded 1998, trailing AhnLab at home | Little protection left |
| Horangi Cyber Security Singapore cloud security startup, now a folded-in Bitdefender product line | Little protection left |
| Knownsec Chinese offensive security firm selling scanning tools and hacking services to state agencies | Little protection left |
| Moresec Chinese startup making MurphySec, a tool that scans code for vulnerable open-source components | Little protection left |
| Rising (Beijing Rising Information Technology) Beijing Rising sells signature antivirus and endpoint security to Chinese government and enterprise buyers | Little protection left |
| Skybox Security Former vulnerability management and security posture vendor, now fully shut down since Feb 2025 | Little protection left |
| Wing Security Wing Security sells SaaS security posture management and now AI-agent governance tools | Little protection left |
Questions people ask
- Will Palo Alto Networks survive the AI era in cybersecurity?
- Yes, it's positioned as one of the strongest players, with a broad platform spanning firewalls, cloud and identity security that large enterprises are consolidating around rather than replacing. It shows almost no visible customer loss in current data.
- Is the Chinese cybersecurity market too crowded to survive AI disruption?
- It looks that way. Vendors like Qi An Xin, Venustech, NSFOCUS, Westone and DAS Security are all competing for the same protected government and enterprise contracts, and several, including Venustech, have posted revenue drops of 20-30% as rivals move faster on AI products.
- What happened to Cybereason?
- Cybereason lost the endpoint detection and response race to CrowdStrike, SentinelOne, and Microsoft Defender, and was acquired in a distressed deal by LevelBlue in November 2025.
- Why did Feitian Technologies stock and revenue fall so much?
- Feitian, a Chinese maker of hardware security keys, lost the high-profile OpenAI/ChatGPT hardware key deal to Yubico in April 2026, and its revenue fell 41% year over year in the same quarter.
- Which cybersecurity companies are losing to Microsoft Defender?
- AhnLab in Korea, Seqrite in India, and ESTsecurity are all named as losing ground to Microsoft Defender as it absorbs consumer and mid-market endpoint security seats through bundling.
- Is CrowdStrike killing smaller endpoint security vendors?
- Along with SentinelOne and Microsoft Defender, yes, it's cited as a direct cause of Cybereason's distressed sale and continues to pressure smaller detection vendors across the market.
What to watch
- More small or mid-size Chinese cybersecurity vendors get acquired or quietly wound down
- Yubico or another hardware key maker announces additional large enterprise or AI-lab deals beyond OpenAI
- Another cloud security or endpoint point-solution vendor sells at a steep valuation discount, similar to Lacework or Skybox
Head to head in this sector
Baidu Security vs Qihoo 360Qi An Xin (Qianxin) vs Qihoo 360Qihoo 360 vs Rising (Beijing Rising Information Technology)AhnLab vs ESTsecurityAhnLab vs SK ShieldusCMC Cyber Security vs Viettel Cyber SecurityFeitian Technologies vs YubicoLAC Co., Ltd. vs NRI SecureTechnologies
Sectors with a similar picture