The whole landscape, in twelve layers.
Each layer is a category family. Consolidation pressure shows as red intensity — heavier red = more squeeze. The 5 hot-contest layers (where positioning matters most) carry an accent border.
Network / SASE
Move from a perimeter-based stack to identity-and-context routing across distributed workers, branch offices, and cloud apps — without sacrificing performance or operability.
Endpoint / XDR
Detect-and-respond on every workstation and server, then correlate that signal with other surfaces — without buying yet another agent.
SecOps
Aggregate, correlate, and operationalize security signal across the entire stack — without going broke on per-GB licensing or drowning analysts in alerts.
Cloud Security
Cover posture, workload, identity, and runtime risk across multi-cloud — without a tool per slice and without missing the attack paths that chain across them.
Identity
Manage access, govern entitlements, and detect identity-based attacks across humans, machines, and the proliferating non-human identity surface — as the control plane attackers increasingly route through.
Exposure
Replace the vulnerability backlog with a prioritized attack-path view — "prove I'm exposed" beats "tell me about CVEs."
Data Security
Find where sensitive data lives across cloud and SaaS, govern who/what touches it (including AI agents), and recover from loss or ransom — across surfaces that don't share a common control plane.
Application / API
Secure custom apps and APIs through the developer workflow — without slowing engineering, while catching the business-logic abuse that scanners miss.
GRC / Trust
Prove control to auditors, customers, and the board on demand — and turn compliance work from cost center into revenue-enablement (trust centers).
MDR / Services
The customer either lacks a SOC or has one that can't keep up. Buy the outcome (alerts triaged, threats contained) rather than the tool.
OT / IoT
Discover, monitor, and segment operational and connected-device assets in environments where availability beats confidentiality and "move fast" is not a virtue.
AI Security
Two halves of the same emerging surface: secure the AI being deployed (models, agents, data, prompts) and use AI to secure everything else (Agentic SOC).
Layer ≠ severity. A layer's number just reflects how the market organizes by surface, not how important it is to your stack. Read pressure, not order.
Pressure tells you where positioning matters most. Very-high pressure = consolidation is actively happening; a vendor's wedge has to be deep or the platforms absorb it. Low pressure = quieter division, fewer M&A signals, but also slower growth.