Enterprise security is no longer a single product line, it's a six-layer stack from identity at the apex through endpoint, network, cloud, vulnerability management, and data security. Each layer is dominated by a handful of public-market platform companies. Below: the US-listed names actually operating in each one.
Identity at the apex. Data at the foundation. Every US-listed public company actually operating in between.
Who can log in, what they can do, and how privileged credentials are protected. Okta as the workforce and customer identity standard, CyberArk as a privileged-access platform for sensitive accounts.
Detection and response on the laptop, server, and workload itself. CrowdStrike's Falcon agent and SentinelOne's Singularity platform, the two AI-driven EDR platforms that displaced traditional antivirus across the enterprise.
Next-generation firewalls and network security platforms, Palo Alto Networks' breadth across firewall, SOC, and cloud security; Fortinet's appliance-driven model with deep SD-WAN integration; Check Point's incumbent enterprise install base.
Secure access service edge, the converged networking-plus-security stack that replaces the corporate VPN. Zscaler's Zero Trust Exchange and Cloudflare's edge platform, both built on globally distributed proxies that sit between users and applications.
Continuous discovery, prioritization, and remediation of weaknesses across the attack surface, Tenable's Nessus and exposure-management suite, Rapid7's Insight platform, and Qualys's cloud-native scanning. The pre-breach side of the security budget.
Where the actual data sits and how it's monitored, Varonis for data security posture management, Elastic for security analytics on top of its observability stack, Datadog for cloud monitoring with an expanding security product line.
Constituent lists are reviewed quarterly against segment disclosures, product portfolio, and addressable-market commentary. Quotes are sourced from licensed market data; the Veridion Score is computed from six published factors. Inclusion is not a recommendation.