Mod 13 · Tech Alliances

Eight ecosystem roles. Pick your gravity.

Cybersecurity vendors compete in categories but win or lose on which platform ecosystem they attach to. The buyer\'s workload, identity, data, workflow, endpoint, and productivity stacks each have a dominant anchor — that anchor decides what gets integrated, sold-with, and absorbed.

Ecosystem 01 Hyperscaler

Hyperscaler Ecosystem

Cloud infrastructure, marketplace distribution, committed-spend drawdown, regional sovereignty options. The buyer's workloads live here, the procurement contract lives here, and the budget is partly pre-committed via enterprise agreements.

Open
Ecosystem 02 SecOps Platform

SecOps Platform Ecosystem

Detection and response gravity. The platform owns the SOC workflow, the analyst experience, the alert pipeline, and increasingly the data layer. Categories that produce signal route through here to be usable.

Open
Ecosystem 03 Identity Plane

Identity Control Plane Ecosystem

Authentication, authorisation, lifecycle management for humans, machines, and non-human identities. Increasingly the de-facto access control layer that everything else routes through.

Open
Ecosystem 04 Data Gravity

Data Gravity Ecosystem

Security data lake, analytics infrastructure, log retention, query economics. The platform owns where the data lives; what comes out of it (detection, compliance, analytics) attaches above.

Open
Ecosystem 05 Workflow

Workflow Gravity Ecosystem

The system of record for IT and security operations — tickets, incidents, change management, governance reporting. Findings without a workflow attachment have no operational consequence.

Open
Ecosystem 06 Endpoint Telemetry

Endpoint Telemetry Ecosystem

Endpoint detection and response coverage — the single most-deployed security agent in most enterprises. Categories that need endpoint signal (XDR, identity threat detection, exposure, posture) increasingly source data from here.

Open
Ecosystem 07 Network/SASE

Network & SASE Ecosystem

Network policy enforcement, ZTNA, SWG, CASB, branch and remote-user security. The platform owns the network path; categories that need policy attachment to traffic flow attach here.

Open
Ecosystem 08 Productivity

Productivity Suite Ecosystem

Email, calendaring, document storage, collaboration, identity (often), and the everyday work surface for almost every knowledge worker. The platform is also the largest target for phishing, account takeover, and insider risk.

Open