A field guide to how the cybersecurity market actually works.
What vendors sell, what buyers need, and what gets displaced. The frameworks that don't change weekly — separate from the Kumite, where live vendor standings live.
Common reasons people open the Atlas. The fastest route from intent to the right module.
- Start I need the lay of the land. →Market Map
- Sell I need to know who actually buys this category. →Buyer & Maturity
- Time I need to know why this buyer is moving right now. →Trigger Events
- Distribute I need to pick the right route to market. →Routes & Channel
- Comply I need to understand the regulation pulling this deal. →Compliance Gravity
- Compete I need to position against an incumbent. →Displacement
- Target I need a sector-specific angle. →Verticals
- Locate I need to know how this region actually buys. →Geo & Market Entry
- Attach I need to pick the right platform ecosystem. →Tech Alliances
- Decode I'm hunting for a clean definition. →Glossary
- Diagnose I want to match my motion to a pattern. →The Lab
Market Map
Twelve layers, consolidation pressure as red intensity. Where the squeeze is — at a glance.
Buyer & Maturity Matrix
Four maturity stages, executive vs operational personas, and the fit matrix that maps category to buyer to industry.
Consolidation & Displacement
The five battles every vendor must fight: replacement, consolidation, augmentation, orchestration, managed outcome.
Glossary
The canonical lexicon. Plain-English definition plus the thing no dictionary gives you — the GTM implication.
The Lab
Wall-safe framework-matching pickers. Tell us about your motion — match to the right Atlas pattern with the winning claim and the trap.
Attack Surface Map
Ten surfaces with identity as the hub. What lives on each, what threats land, and which defensive categories belong there.
Adversary Ecosystem
Six durable archetypes from opportunistic to nation-state, plus the insider class. Capability tiers, typical targets, fit defenses.
Vertical Risk Map
Nine sectors. Primary risks, who actually buys, the categories that fit each one, and the angle that lands in the room.
Routes & Channel
Ten ways cyber actually gets sold: direct, PLG, MSP, MSSP, VAR, SI, marketplace, co-sell, OEM, insurance/advisory. Channel Fit Matrix included.
Compliance Gravity
Eleven regulations that don't just describe security — they create budget, urgency, evidence burden, and a wider buying committee.
Trigger Events
Twelve events that make cyber buyers move. What happens, what shifts, which categories activate, the typical motion, and the common mistake that loses the deal.
Geo & Market Entry
Twelve regions and how cyber gets bought in each. Channel reliance, procurement friction, compliance anchors, entry strategy. Geo Fit Matrix included.
Tech Alliances
Eight ecosystem roles every cyber vendor attaches to or competes against. Framework-first: roles durable, vendor anchors refreshed quarterly.
- i Resource, not product. The Atlas explains how the market is structured. It does not track live vendor state — that's the Kumite's job. If content needs refreshing more than ~quarterly, it belongs there, not here.
- ii
- iii The lexicon is the only tie to Kumite. Terms defined in the Glossary mean the same thing in Kumite dossiers. That shared vocabulary is the entire integration. No score-level coupling.