Showing 64 results
-
Oct. 09, 2025Hybrid-multi cloud architectures, an explosion of API and machine identities, and tightening global regulations have made Identity and Access Management (IAM) the keystone of zero-trust security. Beyond familiar challenges such as joiner-mover-leaver management, organizations now confront AI-enabled threats – deepfake onboarding, synthetic-voice authorizations, and autonomous agents spinning up credentials in seconds. Enterprises must therefore govern workforce, consumer, and non-human identities continuously, enforce least privilege in milliseconds, and demonstrate compliance on demand, all while delivering friction-free user experiences. Service partners are answering this call with cloud-ready IAM reference architectures, behavioral analytics that correlate identity events with threat intelligence, and automation modules that apply, adjust, and certify least-privilege access at scale. Many are also investing in proprietary accelerators and low-code toolkits to compress assessment-to-deployment timelines. Emerging priorities include machine-identity governance for IoT, operational technology, and robotic process automation fleets, consumer IAM platforms that boost conversion while safeguarding privacy, and integrated ITDR modules that surface credential-centric attacks before lateral movement can occur. This report comprehensively analyzes 25 global IAM providers as featured on the IAM Services PEAK Matrix® Assessment 2025. It will help buyers select the right-fit provider for their needs, while providers will be able to benchmark themselves against each other.
-
Oct. 03, 2025Cybersecurity has become a board-level priority for mid-market enterprises as they accelerate digital adoption. Organizations in the US$1-5 billion revenue range are increasingly moving workloads to cloud and SaaS platforms, deploying IoT devices, and enabling hybrid workforces. These shifts expose them to heightened risks such as ransomware, insider threats, and regulatory noncompliance. Unlike large enterprises, mid-market firms often lack the financial and human capital to build comprehensive in-house security functions, making them highly dependent on external providers. Mid-market buyers evaluate providers on a different set of priorities than their large-enterprise peers. They look for cost efficiency, modular adoption paths, and transparent contracts that avoid long lock-ins. Regional proximity and right-sized delivery footprints are valued for faster support and contextual understanding. Providers that embed AI- and automation-driven SOC workflows, offer accelerators and packaged compliance toolkits, and enable outcome-linked SLAs are best positioned to help these enterprises offset skill shortages and reduce deployment timelines. Industry-aligned frameworks for BFSI, healthcare, life sciences, manufacturing, and utilities are also essential to addressing regulatory requirements and ensuring audit-readiness. In this research, Everest Group assesses 13 providers in the Cybersecurity Services for Mid-Market Enterprises PEAK Matrix® Assessment 2025. Providers are evaluated on their market impact and vision and capability, reflecting their effectiveness in delivering cybersecurity to mid-market clients. The analysis is based on Everest Group’s annual RFI process for 2025, provider briefings, buyer reference checks, and ongoing market intelligence. This report provides enterprises with insights into sourcing considerations for cybersecurity in the mid-market, while enabling providers to benchmark their strengths and improvement areas in this fast-growing segment.
-
Provider Compendium
Managed Detection and Response (MDR) Services Specialists – Provider Compendium 2025
Aug. 14, 2025A surge in cloud workloads, IoT deployments, and IT-OT integration is reshaping the cybersecurity landscape, leaving enterprises vulnerable to advanced threats and operational inefficiencies. With limited in-house resources, many security teams are turning to specialist Managed Detection and Response (MDR) providers for their niche focus, agility, and outcome-oriented models. These MDR specialists distinguish themselves through capabilities such as 24/7 human-led monitoring, curated threat intelligence, proactive threat hunting, and automated response strategies. Their ability to deliver identity-aware detection, orchestrated response across endpoint, cloud, and OT telemetry, and seamless deployment via unified agents makes them attractive to enterprises seeking a high degree of customization and rapid time-to-value. Moreover, many are extending their differentiation through co-innovation ecosystems, breach simulation capabilities, and modular service tiers tailored to the unique needs of different enterprise segments. This compendium provides detailed and fact-based snapshots of eight MDR specialist providers. The evaluation draws from our proprietary RFI process, briefings with the providers, buyer interviews, and continued monitoring of the global MDR landscape. Each provider profile includes detailed information on the organization’s revenue mix, solution offerings, delivery capabilities, partnerships, strategic investments, and market traction.
-
Tech Launch Perspective
Cybersecurity – Review of Palo Alto Networks’ Product Announcements at RSAC 2025
Aug. 08, 2025Palo Alto Networks’ announcements at the RSA Conference (RSAC) 2025 reflect a strong commitment to AI-driven security and platform unification, offering enterprises enhanced threat detection and posture management. Key updates and launches fall into three strategic pillars: Prisma Access Web Browser 2.0 introduces a SASE-native browser that ensures consistent, policy-based secure access across all devices. It offers real-time gen AI controls and AI-powered protection against phishing, cloaking, and script-based threats. It also includes a built-in password manager for enhanced credential security and ease of use. Prisma AIRS secures the entire AI life cycle by scanning models for vulnerabilities and preventing risks such as tampering. It provides posture management to identify excessive permissions and data exposure across the AI ecosystem. Built-in AI red teaming enables automated testing to uncover potential weaknesses. Additionally, it offers runtime and AI agent security against adversarial threats such as prompt injection, identity impersonation, and memory poisoning. Cortex XSIAM 3.0 unifies proactive and reactive security operations to prevent breaches and enable rapid incident response. It leverages AI for smart exposure management, automatically remediating high-risk vulnerabilities across cloud, network, and endpoints. The platform enhances email security using LLMs to detect and block phishing threats. A centralized data engine powers real-time analytics and automation for faster, more accurate threat handling. These capabilities strengthen Palo Alto Networks’ position as a comprehensive cybersecurity provider. However, clearer guidance on interoperability, scalability, and operationalization will be important for enterprises to fully realize the value of these innovations in diverse environments.
-
July 31, 2025Discoveries focus on specific science and technology innovations that address today’s critical business issues and challenges. These brief yet detailed profiles highlight innovations across the world’s leading companies, start-ups, universities, institutes, and the entire R&D ecosystem and leverage the Strengths, Opportunities, Aspirations, and Results (SOAR) framework to analyze the innovations’ rationale and possible benefits. The insights will help you understand the themes shaping science and technology development, enhance your R&D, strengthen strategies, comprehend the developer landscape, and identify best practices for your product pipelines.
-
Tech Launch Perspective
Cybersecurity – Review of Cisco’s Product Announcements at RSAC 2025
July 31, 2025In this report, we evaluate Cisco’s latest cybersecurity innovations unveiled at the RSA Conference (RSAC) 2025, focusing on AI-driven threat response, enhanced automation, and industrial security. Cisco’s key announcements include the introduction of agentic AI capabilities in its XDR platform, delivering Instant Attack Verification and automated forensics. These enhancements aim to reduce incident response time and improve detection accuracy. Another key development is the integration of Splunk SOAR 6.4 into Cisco XDR, enabling deeper automation of threat investigation and remediation workflows. This feature is expected to reduce security operations teams’ manual effort. Cisco also expanded its portfolio with the launch of Cisco Industrial Threat Defense, reflecting a strategic push into protecting Operational Technology (OT) environments, a key area for infrastructure-heavy sectors. While Cisco’s vision aligns with enterprise demands for AI-enabled, multi-cloud-compatible cybersecurity solutions, several gaps remain. There is limited transparency on how new features interoperate across Cisco’s diverse security ecosystem, particularly in hybrid, multi-provider environments. These solutions’ scalability in globally distributed enterprises also requires clearer articulation. Additionally, as AI becomes foundational to Cisco’s strategy, enterprises expect stronger positioning on governance, explainability, and responsible AI use.
-
July 29, 2025Enterprises face a surge in identities, human, machine, and application, across on-premises, multi-cloud, and edge environments. Against that backdrop, Identity and Access Management (IAM) technology has become the control plane for enforcing Zero-trust policies, ensuring compliance with regulatory mandates, and enabling seamless, secure user experience. Everest Group’s Identity and Access Management Technology-Voice of the Customer 2025 report provides a panoramic, buyer-validated view of today’s IAM technology landscape. Drawing on a global survey of senior security and identity leaders across enterprises, the study examines how enterprises allocate budgets across IAM technology domains, revealing clear differences by industry, geography, and company size. It also links spending patterns to real-world experiences, such as onboarding friction, integration gaps, pricing pain, or stalled innovation, which erode satisfaction. The report benchmarks 11 leading IAM technology providers against 8 parameters relevant to IAM technology, offering buyers and providers a clear view of competitive strengths and improvement areas.
-
Tech Launch Perspective
Cybersecurity – Review of Google Cloud’s Product Announcements at RSAC 2025
July 22, 2025Google Cloud’s announcements at the RSA Conference (RSAC) 2025 advance its unified, intelligence‑centric cyber defense vision. Key updates fall into four strategic pillars: AI‑powered security operations – Gemini AI agents are embedded in the Security Operations platform, formerly Chronicle, to triage alerts autonomously, recommend remediation, and automate playbook execution through native Security Orchestration, Automation, and Response (SOAR) capabilities. This reduces Mean Time To Detect (MTTD) and Mean Time To Respond (MTTR) by minimizing manual intervention. Unified multi-cloud visibility – The new Google Unified Security platform converges Security Information and Event Management (SIEM), SOAR, and Threat Intelligence into a single console. Enhanced connectors extend telemetry coverage beyond Google Cloud Platform (GCP) to Amazon Web Services (AWS) and Microsoft Azure, delivering consistent monitoring across hybrid and multi-cloud estates. Data‑centric protection and compliance – Security Command Center’s Cloud‑native Application Protection Platform (CNAPP) adds Data Loss Prevention (DLP) and sensitive‑workload discovery features, enabling enterprises to enforce controls across Software‑as‑a‑Service (SaaS), container, and serverless environments. Assured Workloads updates address regional digital sovereignty requirements with country‑specific control configurations. Mandiant services for SOC transformation – New offerings such as Detection Migration and SOAR Engineering provide expert guidance for enterprises transitioning to Google’s platform. Flexible prepaid credits for Mandiant consulting, incident response, and training help organizations align service consumption with their evolving security needs. These capabilities strengthen Google Cloud’s position as a comprehensive cybersecurity provider. Nonetheless, enterprises will seek clearer AI governance, broader endpoint device coverage, and consistent product naming to avoid confusion stemming from frequent rebranding.
-
Tech Launch Perspective
Cybersecurity – Review of CrowdStrike’s Product Announcements at RSAC 2025
July 22, 2025CrowdStrike used the RSA Conference (RSAC) 2025 to reinforce its unified, intelligence‑led cyber defense vision. The provider’s portfolio enhancements spanned four strategic pillars: Agentic AI for the Security Operations Centre (SOC) – Charlotte AI autonomously triages alerts, hunts threats with Falcon OverWatch managed hunting, and triggers remediation actions through Falcon for IT automation. This promises faster Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) by minimizing costly human touchpoints. Identity‑centric security – Falcon Privileged Access applies behavioral risk analytics to grant or revoke elevated rights Just‑In‑Time (JIT) across on‑premises Active Directory (AD) and cloud Identity Providers (IdPs). By continuously monitoring privilege use, it blocks lateral movement and aligns with Zero Trust (ZT) principles. Unified data protection – Falcon Data Protection delivers real‑time Data Loss Prevention (DLP) that spans endpoints, cloud storage, and generative AI workloads. Organizations can enforce consistent controls and gain visibility into sensitive data flows irrespective of where users work. Cloud‑native threat detection and response – Falcon Cloud Security Innovations add runtime protection for containers, serverless functions, and AI models. New Shadow AI detection uncovers unsanctioned model usage, while expanded multi-cloud visibility reduces blind spots across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). Collectively, these launches position CrowdStrike to address key enterprise imperatives: shrinking breach windows, securing distributed identities, and protecting data in a perimeter‑less world. Nevertheless, large enterprises will expect transparent AI governance, tangible proof points on third‑party telemetry breadth, and clarity on how Falcon Data Protection differentiates from legacy DLP offerings.
-
Tech Launch Perspective
Cybersecurity – Review of SentinelOne’s Product Launch Announcements at RSAC 2025
June 30, 2025In this report, we assess SentinelOne’s evolving cybersecurity portfolio, emphasizing the strategic innovations showcased at the RSA Conference (RSAC) 2025. SentinelOne introduced Purple AI Athena, an agentic AI that autonomously triages, investigates, and remediates security incidents. It also enhanced Singularity Hyperautomation, a no‑code workflow engine that converts analyst actions into reusable playbooks and integrates with third‑party Security Information and Event Management (SIEMs) and data lakes for a unified security‑operations view. These enhancements aim to tackle persistent Security Operations Center (SOC) challenges by filtering alert noise, expediting investigations, and orchestrating cross‑tool responses at machine speed. SentinelOne also strengthened its multi‑cloud workload‑protection capabilities and highlighted interoperability across containerized and serverless environments. However, the expanded automation features may overlap with established Security Orchestration, Automation, and Response (SOAR) platforms, and large enterprises will scrutinize Purple AI’s explainability and guardrails before adopting autonomous response at scale. SentinelOne’s future roadmaps must clarify integration depth with legacy security stacks and outline a robust AI governance framework.