MQ Leader 2025
MQ Leader 2026
Forrester Wave Leader
Key vendor
Click a vendor for analysis
No vendor found for ""
01
Cloud Security
CSPM +31% CAGR
CSPM — Cloud Security Posture Management
Wiz
Palo Alto Networks
Microsoft Defender for Cloud
CrowdStrike
Orca Security
Lacework
Check Point
Tenable
SSE — Security Service Edge (SWG + CASB + ZTNA)
Zscaler
Netskope
Palo Alto Networks
Microsoft
Skyhigh Security
Fortinet
Cisco
Forcepoint
SASE — Secure Access Service Edge
Netskope
Fortinet
Palo Alto Networks
Zscaler
Cisco
Cato Networks
VMware (Broadcom)
CWPP / CNAPP
Wiz
Palo Alto Networks (Prisma)
CrowdStrike
SentinelOne
Aqua Security
Sysdig
Lacework
02
Network Security
Firewall — NGFW / Hybrid Mesh Firewall
Palo Alto Networks
Fortinet
Check Point
Cisco
Juniper Networks
Sophos
Barracuda
NDR — Network Detection & Response
Darktrace
ExtraHop (Cisco)
Vectra AI
Corelight
Stamus Networks
Gigamon
SWG — Secure Web Gateway
Zscaler
Netskope
Palo Alto Networks
Cisco
Skyhigh Security
Forcepoint
03
Endpoint Security
+13.6% CAGR
EPP / EDR / XDR — MQ Leaders May 2026
CrowdStrike
SentinelOne
Microsoft Defender
Palo Alto Networks (Cortex XDR)
Trend Micro
Sophos
Bitdefender (Visionary)
ESET
Trellix
Cisco
04
Identity & Access Management
Access Management / SSO / MFA
Okta
Microsoft Entra ID
CyberArk (Idira)
Ping Identity
ForgeRock (OpenText)
IBM Security Verify
Google Cloud Identity
Thales
PAM — Privileged Access Management
BeyondTrust
CyberArk (Idira)
Delinea
ManageEngine PAM360
Saviynt
HashiCorp Vault
IGA — Identity Governance & Administration
SailPoint
Saviynt
One Identity
Omada
Microsoft Entra ID Governance
05
Security Operations (SecOps)
SIEM — MQ Leaders October 2025
Splunk
Microsoft Sentinel
Google SecOps (Chronicle)
Securonix
Exabeam
Gurucul
IBM QRadar
Devo
LogRhythm
SOAR
Palo Alto Networks (XSOAR)
Splunk SOAR
Microsoft Sentinel
Google SecOps
ServiceNow SecOps
Swimlane
Cyberthreat Intelligence — Inaugural MQ May 2026 NEW 2026
CrowdStrike
Recorded Future
Group-IB
ZeroFox
Flashpoint (Challenger)
Mandiant (Google)
ThreatConnect
Anomali
MDR — Managed Detection & Response
CrowdStrike
SentinelOne
Sophos
Arctic Wolf
Rapid7
eSentire
Secureworks
Email Security — MQ December 2025 UPDATED
Proofpoint
Microsoft Defender for Office 365
Abnormal AI
Mimecast
Darktrace
KnowBe4
Check Point
Fortinet
Cloudflare
IRONSCALES
Barracuda
Trend Micro
06
Application Security
AST — Application Security Testing
Black Duck
Checkmarx
Veracode
Snyk
Invicti
PortSwigger (Burp Suite)
GitLab
GitHub Advanced Security
WAF — Web Application Firewall
Cloudflare
Akamai
Imperva
F5
Fastly
AWS WAF
Palo Alto Networks
API Security
Salt Security
Noname Security (Akamai)
Traceable AI
Imperva
Apigee (Google)
42Crunch
07
Data Security & Privacy
DLP / DSPM
Symantec (Broadcom)
Microsoft Purview
Varonis
Forcepoint
Securiti.ai
BigID
Cyera
Normalyze (Zscaler)
Tokenization & Encryption / Post-Quantum
Thales
Entrust
Protegrity
Micro Focus (Voltage)
HashiCorp Vault
AWS KMS
Privacy & Consent / DSAR
OneTrust
TrustArc
Didomi
Usercentrics
Securiti.ai
08
Exposure & Vulnerability Management
+14% CAGR
EAP — Exposure Assessment Platforms
Tenable
Qualys
Rapid7
Palo Alto Networks (Cortex Xpanse)
CrowdStrike
Microsoft Security Exposure Mgmt
XM Cyber
CAASM — Cyber Asset Attack Surface Management
Armis
CrowdStrike Asset Graph
Axonius
JupiterOne
Noetic Cyber
BAS — Breach & Attack Simulation
SafeBreach
AttackIQ
Cymulate
XM Cyber
Picus Security
09
OT / IoT / Cyber-Physical Systems (CPS)
CPS Protection Platforms — MQ Leaders 2026 UPDATED
Nozomi Networks
Claroty
Armis
Dragos
CPS — Other vendors (2026: 13 evaluated)
Microsoft Defender for IoT
Fortinet (Challenger)
Tenable (Challenger)
Cisco (Niche Player)
TXOne Networks
Forescout
10
GRC & Risk Management
IT Risk / GRC Platform
ServiceNow GRC
MetricStream
OneTrust
RSA Archer
SAP GRC
LogicGate
Diligent
Vanta
TPRM — Third-Party Risk Management
BitSight
SecurityScorecard
ProcessUnity
Prevalent
Vanta
Panorays
Whistic
11
AI Security
Emerging category
AI Security Platforms & LLM / Agentic AI Protection
HiddenLayer
Protect AI
Robust Intelligence (Cisco)
CalypsoAI
Wiz (AI-SPM)
Microsoft Purview AI Hub
Google Cloud AI Protection
Palo Alto AI Security
CrowdStrike AI Security
SentinelOne Purple AI