Gitnux/Report 2026

Cyber Industry Statistics

280Statistics
83Sources
12Sections
1Visuals
47mRead
Cyber Industry Statistics
Samuel NorbergWritten by Samuel Norberg·Fact-checked by Maya Johansson
Published
How this report is researched
01Editorial Scope

Gitnux editors write the brief first: the topic, the inclusion rules, and the frame for what belongs.

02Source Research

Agents search the published record and log every extracted figure back to the passage it came from.

Read our full methodology →

Search agents attach provenance to every extracted figure.

Next review: within 31 days

01 Industry overview

The cyber industry at a glance

Global information-security spending is projected at $213 billion in 2025, while rising AI use, cloud adoption, regulation and vulnerability exploitation continue to expand demand for cyber products and services.

$213B[72]
Information-security spending, 2025
12.5%[72]
Spending growth forecast, 2026
$20.9B[73]
Reported cybercrime losses, 2025
31%[57]
Breaches from vulnerability exploitation, 2026
Market size
Gartner forecasts worldwide end-user information-security spending of $213.025 billion in 2025, up from $193.408 billion in 2024. Its 2026 forecast is $239.759 billion.[72]
Forecast & CAGR
Gartner expects information-security spending to reach $323 billion in 2029, while its 2026 forecast is $244 billion with 11.6% constant-currency growth. The longer-term 2025–2029 implied compound growth from Gartner's $213 billion 2025 forecast to $323 billion in 2029 is approximately 11.0% annually.[72]
Market share & regions
Grand View Research estimates North America held 37.9% of global cybersecurity-market revenue in 2025. Asia-Pacific is identified as the fastest-growing regional market over 2026–2033, while the United States was the largest country market in 2025.[74]
Segmentation
Gartner's 2025 information-security spending model divides the market into network security ($23.273 billion), security services ($83.812 billion) and security software ($105.940 billion). Security software was the largest of the three segments, representing roughly half of total spending.[72]
Key players & concentration
The market includes large diversified technology vendors and specialist providers such as Microsoft, Palo Alto Networks, Cisco, Fortinet, CrowdStrike, Check Point, Okta and Zscaler. Futurum Research states that its leading-vendor sample represents approximately 70% of the market, indicating substantial concentration among major suppliers, although the source does not provide a formal top-five or HHI measure.
Trends, drivers & challenges
Cloud migration, generative AI adoption, regulatory requirements and escalating attacks are major demand drivers. Verizon's 2025 report found credential abuse in 22% of breaches and vulnerability exploitation in 20%, while its 2026 report identified vulnerability exploitation in 31% of breaches; the figures show the continuing challenge of reducing exposure faster than attackers can exploit it.[57][72]
Consumer behavior & competition
The FBI recorded 1,008,597 internet-crime complaints and more than $20.877 billion in reported losses in 2025; cryptocurrency-related complaints accounted for more than $11.366 billion in losses. For enterprise buyers, Verizon analyzed 22,000 security incidents and 12,195 confirmed breaches in its 2025 report, highlighting intense competition around identity, cloud, endpoint, network and managed-security offerings.[73][57]
M&A
Cybersecurity M&A remained strategically important in 2025. Google announced a $32 billion agreement to acquire Wiz in March 2025, while Palo Alto Networks announced an agreement to acquire CyberArk in July 2025; the deals emphasize cloud security and identity security as consolidation priorities.[75][56]
Regulation
The EU's Digital Operational Resilience Act applies a formal ICT-risk and incident-reporting framework to financial entities, with the European Commission adopting technical standards covering major ICT-incident notifications. DORA-related obligations became a significant compliance driver for financial-sector cybersecurity programs in 2025.[76]
Latest news
In 2025, ServiceNow announced an agreement to acquire Armis, stating that its Security and Risk business had exceeded $1 billion in annual contract value in the third quarter. The transaction reflects continued expansion by enterprise-software companies into cyber exposure management, operational technology and connected-device security.[77]

02 Ranking

Top 10 Companies in the Cyber Industry

The leading companies in the cyber industry, ranked on market impact, performance, momentum, innovation and brand popularity.

Updated November 11, 2026 · Next review December 11, 2026

Verdict

Microsoft and Broadcom are tied at the top of Gitnux's 2026 cyber ranking with an Overall score of 9.5 each.

Ranked by Overall score · How we score ↓

Editor's top 3 picks

Where to start, by need.

  1. #1 Overall · Leader in security platforms

    Microsoft

    US

    Ranked #1 · 9.5 · Security platforms

    Why we picked it: Microsoft spans identity, endpoint, cloud and security operations products, supported by R&D at 12% of revenue.

    See in ranking ↓Visit microsoft.com ↗

  2. Leader in enterprise endpoint & threat protection

    Broadcom

    US

    Ranked #2 · 9.5 · Enterprise endpoint & threat protection

    Why we picked it: Broadcom operates major enterprise endpoint and threat-protection businesses under its security software portfolio, with revenue growth 23.87%.

    See in ranking ↓Visit broadcom.com ↗

  3. Leader in network and SIEM

    Cisco

    US

    Ranked #4 · 9.3 · Network and SIEM

    Why we picked it: Cisco combines networking, security and Splunk SIEM capabilities in one enterprise platform, with operating margin 24.3%.

    See in ranking ↓Visit cisco.com ↗

Pick 1 is the #1 company overall. Picks 2 and 3 are the highest-ranked companies in the top 5 that add a new segment.

Full ranking

Sort by
Top 10 companies in the cyber industry, 2026 – Gitnux ranking
#CompanyOverall ↓Company snapshot
1

Microsoft

Security platforms · US

9.5
2

Broadcom

Enterprise endpoint & threat protection · US

9.5
3

Palo Alto Networks

Security platforms · US

9.3
4

Cisco

Network and SIEM · US

9.3
5

CrowdStrike

Security platforms · US

9.1
6

Fortinet

Network security, SASE and security operations · US

9.1
7

Cloudflare

Cloud network, application and edge security · US

8.9
8

IBM

Security software, threat intelligence and managed security · US

8.6
9

Tenable

Exposure management and vulnerability assessment · US

8.6
10

Sophos

Endpoint, network and managed cybersecurity · GB

8.5

How we score

  • Impact (30%): scale and weight in the market (revenue, market share, employees, market position).
  • Performance (20%): recent revenue growth and operating margin; an analyst assessment where a company does not publish them.
  • Momentum (20%): growth trajectory and future potential.
  • Innovation (15%): R&D intensity and how technologically advanced the company is.

Popularity (brand search demand, 15%) counts toward Overall but is not published as a column. Overall leaves out what is not known.

Scale Scores are shown on a 7–10 scale with one decimal; bars start at 7.0.

Cadence Recalculated when new figures are published; next review December 11, 2026.

Independence. Rankings are editorially independent. Scores, ranks, picks and the verdict follow the method above; no company can pay to change them.

Cite this ranking

APA

Samuel Norberg. (2026, November 11). Top 10 companies in the cyber industry. In Cyber Industry Statistics. Gitnux. https://gitnux.org/cyber-industry-statistics/#top-companies

report visual · Comparison

IC3 complaints by foreign country, excluding the United States (Global, excluding United States)

Canada leads with 7,479.

Canada7,479
India5,879
Japan5,764
United Kingdom4,106
Germany3,056
Philippines2,725
source-verifiedic3.gov

04 Statistics

Technology & Innovation

Technology & Innovation centers on agentic AI and automation in cyber monitoring: 35% report widespread agentic AI deployment in 2026, while 96% report problems implementing cybersecurity automation.

AI in the cyber industry

  • 35% of surveyed organizations report widespread deployment of agentic AI, including cybersecurity-monitoring use cases, in 2026.[1]
  • 44% of cybersecurity professionals report no impact on hiring from current or expected AI security-tool adoption globally in 2025.[2]
  • 48% of organizations report that AI has influenced cybersecurity professionals’ job satisfaction, with 71% of those citing automation of tedious tasks globally in 2024.[3]
  • 68% of cybersecurity-workforce-study respondents say generative AI was a significant topic of discussion among organizational executives globally in 2024.[4]
  • 63% of cybersecurity teams using AI security tools report a significant productivity boost globally in 2025.[2]
  • 21% of active AI security-tool users report that the technology has not yet produced a meaningful productivity impact globally in 2025.[2]

Automation in the cyber industry

  • 31% of respondents report sharing cyber-threat intelligence with organizations outside their own industry in 2025.[5]
  • 53% of respondents identify defending a growing and changing attack surface as their most significant security-operations challenge in 2024.[3]
  • 96% of respondents report problems implementing cybersecurity automation, with technology issues, lack of trust and lack of time among the leading blockers in 2025.[5]
  • 36% of respondents report sharing cyber-threat intelligence internally with departments such as human resources, legal and governance in 2025.[5]
  • 16% of surveyed organizations report fully automated security-response processes globally in 2024.[3]
  • 64% of surveyed organizations report partially integrated automated-response mechanisms globally in 2024.[3]

Digital Transformation in the software and IT services sector (sector benchmark)

  • 75% of digital leaders globally planned to increase AI-related business expenditure in 2024.[6]
  • 72% of digital leaders globally expected to increase technology spending in 2024, compared with 50% of digital laggards, according to a survey of 855 technology and business decision-makers.[6]
  • 34% of surveyed organizations globally identified replacing or upgrading legacy technology as a top digital-transformation goal in 2024.[6]
  • 45% of North American technology and business decision-makers planned to adopt AI and machine learning to improve business within 12 to 24 months.[6]
  • 54.8% of surveyed organizations reported having a chief digital officer or another executive responsible for digital transformation.[7]

Technology Adoption in the software and IT services sector (sector benchmark)

  • 57.7% of surveyed organizations reported having a chief information security officer or equivalent in 2024.[7]
  • More than 50% of surveyed global IT decision-makers were exploring AI use cases or piloting AI technologies in 2024.[6]
  • 67.6% of IT services were delivered through cloud infrastructure among surveyed organizations in 2024.[7]
  • 51.8% of surveyed organizations reported that AI solutions were somewhat or extremely rare in 2024.[7]

Cloud Computing in the software and IT services sector (sector benchmark)

  • 71.7% of EU enterprises using paid cloud services used them for office software in 2025.[8]
  • 65.5% of EU enterprises using paid cloud services used them for security software applications in 2025.[8]
  • 71.5% of EU enterprises using paid cloud services used them for file storage in 2025.[8]
  • 85.2% of EU enterprises using paid cloud services used them for email in 2025.[8]
  • 26.1% of EU enterprises using paid cloud services used computing platforms for application development, testing or deployment in 2025.[8]
  • 52.7% of EU enterprises with at least 10 employees used paid cloud-computing services in 2025.[8]

Big Data in the software and IT services sector (sector benchmark)

  • Big-data analytics adoption averaged 14% among OECD enterprises with at least 10 employees, compared with 49% for cloud computing in the latest comparable data.[9]
  • 14% of enterprises with at least 10 employees across the OECD used big-data analytics on average, based on 2022 data or the latest available year.[9]
  • 40% was the highest reported enterprise adoption rate for big-data analytics across OECD countries in the latest available data through 2023.[9]

05 Statistics

Data & Analytics

Data & Analytics highlights control gaps and data quality constraints: 97% of organizations with AI-model or AI-application breaches lacked proper AI access controls in 2025.

Business intelligence in the cyber industry

  • 87% of enterprises surveyed by Gartner planned to increase cybersecurity funding in 2025 compared with 2024.[10]
  • 12.2% growth in worldwide security spending was forecast by IDC for 2025.[10]
  • £9.131 billion was the estimated gross value added of the UK cyber security sector in the most recent financial year covered by the 2026 analysis.[11]
  • £131,200 was estimated gross value added per employee in the UK cyber security sector in the 2026 analysis.[11]
  • £14.735 billion was the estimated annual revenue of the UK cyber security sector in the most recent financial year covered by the 2026 analysis.[11]

Data analytics in the cyber industry

  • 97% of organizations reporting AI-model or AI-application breaches lacked proper AI access controls in 2025.[12]
  • 13% of organizations surveyed globally reported an attack affecting their AI models or applications in 2025.[12]
  • One in four malicious data breaches were AI-enabled in IBM’s 2026 global study.[12]
  • $6 million was the average cost of an AI-enabled malicious breach in IBM’s 2026 global study.[12]
  • 25% of organizations had not adopted AI and automation in security operations in IBM’s 2026 study.[12]
  • Organizations using AI and automation in security operations reduced breach costs by almost $2 million on average in IBM’s 2026 study.[12]

Data Quality in the software and IT services sector (sector benchmark)

  • In 2025, 46% of organizations globally said they were fully confident in their data quality, across surveyed technology and business organizations.[13]
  • In 2025, 46% of organizations globally rated their data excellent for accuracy and integrity, across surveyed technology and business organizations.[13]
  • In 2025, 34% of organizations globally rated their data excellent for relevance and suitability, across surveyed technology and business organizations.[13]
  • In 2025, 43% of organizations globally rated their data excellent for quality and completeness, across surveyed technology and business organizations.[13]
  • In 2025, 35% of organizations globally rated their data excellent for consistency and standardization, across surveyed technology and business organizations.[13]
  • In 2024, 95% of enterprise data leaders and practitioners reported a data-quality issue with a direct impact on business outcomes, across companies with at least $1 billion in revenue.[14]

Data Governance in the software and IT services sector (sector benchmark)

  • In 2024, 18.3% of organizations reported having a data-governance or catalog solution as part of their governance program, according to a global governance study.[15]
  • In 2026, 76% of global data leaders said their company’s AI governance did not completely keep pace with employee use of AI technology.[15]
  • In 2024, 35% of U.S. technology executives prioritized data governance among their data-management areas for the next 12 months.[16]
  • In 2024, 81.7% of organizations reported having no data-governance or catalog solution as part of their governance program, according to a global governance study.[15]
  • In 2024, 61% of supply-management organizations reported having a dedicated data-governance function, based on an Institute for Supply Management survey.[17]
  • In 2024, 32% of global technology leaders prioritized data governance among their data-management areas for the next 12 months.[16]

KPIs in the cyber industry

  • 24 was the average number of cybersecurity full-time-equivalent employees among organizations surveyed by ENISA for 2025.[10]
  • 10.6% was the median share of IT full-time-equivalent staff represented by cybersecurity employees among organizations surveyed by ENISA for 2025.[10]
  • 9% was the median share of IT budgets allocated to cybersecurity among organizations surveyed by ENISA for 2024.[10]
  • 6 was the median number of cybersecurity full-time-equivalent employees among organizations surveyed by ENISA for 2025.[10]
  • 4% was the average growth in security budgets reported by 587 CISOs for 2025.[18]
  • 10.9% of IT spending was the average security-budget share reported by 587 CISOs for 2025.[18]

06 Statistics

Strategy & Growth

Strategy & Growth emphasizes workforce pressure and deal activity: the estimated global shortfall is 2.8 million cybersecurity professionals, alongside 405 cybersecurity M&A deals recorded in 2024.

Growth in the cyber industry

  • 10.9% was the 2024 year-on-year growth rate of Saudi Arabia’s cybersecurity workforce.[19]
  • 6.1% was the 2024 year-on-year growth rate of France’s cybersecurity workforce.[19]
  • 10.7% was the 2024 year-on-year growth rate of South Africa’s cybersecurity workforce.[19]
  • 5,468,173 cybersecurity professionals comprised the global workforce in 2024, up 0.1% from 2023.[20]
  • 4,763,963 additional cybersecurity professionals were needed globally in 2024, a 19.1% year-on-year increase.[4]
  • 8.0% was the 2024 year-on-year growth rate of the Netherlands’ cybersecurity workforce.[19]

Differentiation in the cyber industry

  • 72% of cybersecurity roles were filled globally in the 2024 Cybersecurity Workforce Report.[21]
  • 70% of the world’s cybersecurity vendors were located in the United States in 2024, indicating strong geographic concentration of differentiated suppliers.[21]
  • 2.8 million cybersecurity professionals was the estimated global shortfall in BCG’s 2024 workforce report.[21]
  • $200 billion was invested annually in cybersecurity products and services in the 2024 Cybersecurity Workforce Report.[21]

Mergers and acquisitions in the cyber industry

  • 405 cybersecurity-related mergers and acquisitions were announced globally in 2024.[22]
  • $76.4 billion was the disclosed value of 320 cybersecurity M&A deals in 2025.[23]
  • 258 cybersecurity M&A deals were recorded in 2023 in Return on Security’s deal dataset.[23]
  • 405 deals made 2024 the smallest annual cybersecurity M&A total since SecurityWeek began tracking in 2021.[22]
  • $32 billion was Google’s announced acquisition price for Wiz, the largest cybersecurity acquisition on record in 2025.[24]
  • 271 cybersecurity M&A deals were recorded in 2024 in Return on Security’s deal dataset.[23]

Strategic partnerships in the cyber industry

  • 70% of surveyed cybersecurity professionals were highly concerned about supply-chain risk in 2025, increasing the importance of supplier alliances.[2]
  • 15,852 cybersecurity professionals and decision-makers contributed to ISC2’s 2024 global study, reflecting the industry’s international professional ecosystem.[20]
  • 21 named companies sponsored CrowdStrike’s Fal.Con 2024 as strategic ecosystem partners.[25]
  • 47% of surveyed organizations were not directly affected when suppliers experienced cybersecurity incidents in 2025.[2]

07 Statistics

People & Workforce

People & Workforce focuses on retention stress: 71% of SOC practitioners report burnout and 24% plan to leave cybersecurity entirely in a 2026 study.

Hiring in the cyber industry

  • 49% of enterprise organizations report cybersecurity hiring freezes in the 2025 ISC2 workforce study.[2]
  • 73% of cybersecurity hiring managers report having enough budget to adequately staff their teams in 2025.[2]
  • 75% of cybersecurity hiring managers report budget to invest in entry- and junior-level workers’ professional development in 2025.[2]
  • 34% of organizations report cybersecurity hiring freezes overall in the 2025 ISC2 workforce study.[2]
  • 70% of security professionals expect demand for technical cybersecurity professionals to rise during the year following ISACA’s 2025 survey.[26]

Employee retention in the cyber industry

  • 65% of early-career professionals would stay at least four years when offered consistent opportunities to develop in-demand skills.[2]
  • 71% of SOC practitioners report burnout and 24% plan to leave cybersecurity entirely in a 2026 study.[27]
  • 24% of cybersecurity organizations provide cross-training opportunities to learn new skills in 2025.[2]
  • 68% of cybersecurity professionals report being satisfied with their current job globally in 2025.[2]
  • 32% of early-career professionals intend to stay in their current job for at least four years without the added condition of consistent skills-development opportunities.[2]

Remote Work in the software and IT services sector (sector benchmark)

  • 84% of technology-services employers agreed in 2025 that the ability to work remotely is important for employee retention.[28]
  • 48% of U.S. software and IT professionals surveyed worked remotely in 2026, compared with 21% in France.[29]
  • 10% of technology-services respondents worked under fully flexible arrangements in 2025, allowing employees substantial control over remote work.[28]
  • 6% of global respondents worked fully remotely in 2025, defined as spending less than one day per week in the office.[28]
  • 34.8% of global software and IT services respondents worked remotely in 2026, according to the Stack Overflow Developer Survey.[29]

Hybrid Work in the software and IT services sector (sector benchmark)

  • 47% of global respondents worked in hybrid arrangements in 2025, down from 63% in Cisco’s 2022 study.[28]
  • 52% of U.S. employees with remote-capable jobs worked in hybrid arrangements in May 2026, according to Gallup.[30]
  • 56% of IT employees worked in hybrid arrangements in 2025, while 31% were fully remote and 13% attended the office daily.[31]
  • 55% of technology-services respondents worked in a hybrid arrangement in 2025, the highest share among industries measured by Cisco.[28]
  • 61% of U.S. employees with remote-capable jobs preferred hybrid work in November 2025, compared with 33% preferring fully remote work.[30]

Upskilling in the cyber industry

  • 53% of organizations need more job specialists to handle new cybersecurity roles in 2026, up from 23% in 2025.[32]
  • 95% of cybersecurity professionals report at least one skills need in 2025, according to the State of AI Data Security findings.[33]
  • 59% of organizations provide non-certification training or courses to entry- and junior-level cybersecurity professionals in 2025.[2]
  • 50% of organizations provide formal or informal mentorship programs for entry- and junior-level cybersecurity professionals in 2025.[2]
  • 88% of cybersecurity professionals report at least one significant cybersecurity consequence from a team skills shortage in 2025.[33]

Employee Engagement in the software and IT services sector (sector benchmark)

  • 74% of respondents approved of fully flexible hybrid policies in 2025, the highest positive sentiment among the policy types Cisco measured.[28]
  • 92% of employees ranked collaboration and community as very important aspects of office culture in Cisco’s 2025 global study.[28]
  • 22.2% of global software and IT respondents were happy with their current professional role in 2026, while 32.6% were unhappy.[29]
  • 54% of exclusively remote U.S. employees were thriving in May 2026, compared with 52% of hybrid employees and 49% of on-site employees with remote-capable jobs.[30]
  • 37% of exclusively remote U.S. employees were engaged in May 2026, compared with 34% of hybrid employees and 29% of on-site employees with remote-capable jobs.[30]

08 Statistics

Customer & Sales

Customer & Sales connects cyber protection to retention behavior: 92% gross retention is reported across cybersecurity companies analyzed in January 2025.

Customer experience in the cyber industry

  • 48% of U.S. consumers said in 2026 that they would pay for scam-protection services from a digital service provider.[34]
  • 93% of U.S. consumers said in 2026 that it is important for their digital service provider to offer cybersecurity protections.[34]
  • 67% of respondents in high-cyber-maturity organizations expected improved customer satisfaction and retention from cybersecurity initiatives in Deloitte’s global survey.[35]
  • 70% of respondents in high-cyber-maturity organizations expected cybersecurity initiatives to improve customer loyalty in Deloitte’s global survey.[35]
  • 57% of U.S. consumers who experienced a scam reported losing money in 2026.[34]

Customer retention in the cyber industry

  • 92% was the approximate average gross retention rate across cybersecurity companies analyzed by Morningstar in January 2025.[36]
  • 90% or more was the retention rate for Gen Digital’s more-tenured Norton and LifeLock identity cohorts after the merger.[37]
  • 89% was the average gross retention rate for Morningstar’s no-moat cybersecurity cohort as of January 2025.[36]
  • 94% was the average gross retention rate for Morningstar’s moat-rated cybersecurity cohort as of January 2025.[36]
  • 111% was the average net retention rate for Morningstar’s moat-rated cybersecurity cohort as of January 2025.[36]

Customer acquisition in the cyber industry

  • 3 or higher was the customer-lifetime-value-to-acquisition-cost ratio Morningstar said it often sees among the strongest cybersecurity firms.[36]
  • 64% of U.S. consumers said in 2026 that cybersecurity protections could cause them to change digital service providers, indicating an acquisition opportunity for better-protected providers.[34]
  • 5% was Gen Digital’s direct-customer compound annual growth rate from fiscal 2020 to fiscal 2023.[37]
  • 48% of U.S. consumers said in 2026 that they would pay for scam-protection services, creating a potential acquisition path for cybersecurity offerings.[34]
  • 13 years was the approximate customer lifetime implied by Morningstar’s 92% average gross retention level for cybersecurity companies.[36]

Customer loyalty in the cyber industry

  • 82% of U.S. consumers said in 2026 that security influenced their choice of digital service provider.[34]
  • 85% of global respondents expected cybersecurity efforts to boost customer loyalty and business growth in Deloitte’s survey.[35]
  • 93% of U.S. consumers said in 2026 that cybersecurity protection from their digital service provider was important.[34]
  • 90% of North American respondents expected cybersecurity efforts to boost customer loyalty and business growth in Deloitte’s survey.[35]
  • 57% of U.S. consumers who experienced scams reported financial losses in 2026, reinforcing the importance of trusted cybersecurity services.[34]

Lead generation in the cyber industry

  • 18% of cybersecurity marketing budgets were spent on public relations and media liaison in the financial year covered by Code Red’s 2023 survey.[38]
  • 30% was the average share cybersecurity marketing leaders expected to allocate to public relations and media liaison in the following financial year.[38]

09 Statistics

Marketing & Brand

Marketing & Brand quantifies spend allocation: 32% of cybersecurity marketing spend is allocated to public relations, executive visibility, social media and influencer programs in 2026.

Marketing in the cyber industry

  • 32% of cybersecurity marketing spend was allocated to public relations, executive visibility, social media and influencer programs in 2026.[39]
  • 30% was the expected average allocation to public relations and media liaison for the next financial year among surveyed cybersecurity marketing leaders.[38]
  • 18% of cybersecurity marketing budgets were allocated to public relations and media liaison in Code Red’s survey of global security leaders.[38]

Influencer Marketing in the software and IT services sector (sector benchmark)

  • Across B2B companies, 43% of marketers reported outstanding results from their influencer programs in the 2025 B2B Influencer Marketing Report.[40]
  • Across technology companies, 27% of marketers reported dedicated but flat budgets for creator or influencer marketing in 2026, according to Nielsen’s global marketing survey.[41]
  • Across B2B companies, 55% of marketing organizations were using influencers in 2025, based on an Ipsos survey of 1,500 marketing leaders.[42]
  • Across technology companies, 64% of marketers reported dedicated and growing budgets for creator or influencer marketing in 2026, according to Nielsen’s global marketing survey.[41]
  • Across B2B companies, another 29% of marketing organizations planned to adopt influencer marketing within the next year in 2025, based on an Ipsos survey of 1,500 marketing leaders.[42]

10 Statistics

Operations & Execution

Operations & Execution shows where operations capacity is lost: 46% of SOC professionals spend more time maintaining tools than defending their organizations in 2025.

Process optimization in the cyber industry

  • 62% of security teams said detection-as-code adoption unlocked test-driven development in 2025, globally.[43]
  • 78% of security leaders said sharing data with observability teams enabled faster incident detection in 2025, globally.[43]
  • 58% of UK security teams said unified security platforms reduced time spent on tool maintenance in 2025.[43]
  • 63% of security leaders said domain-specific AI significantly or extremely enhanced security operations in 2025, globally.[43]
  • 59% of organizations said unified threat detection and response platforms accelerated incident response in 2025, globally.[43]

Operational efficiency in the cyber industry

  • 57% of security professionals said data-management gaps caused them to lose valuable investigation time in 2025, globally.[43]
  • 52% of US security teams said they were overworked in 2025.[43]
  • 65% of US security teams said they received too many alerts in 2025.[43]
  • 46% of SOC professionals said they spent more time maintaining tools than defending their organizations in 2025, globally.[43]
  • 59% of security professionals said they faced too many alerts in 2025, globally.[43]

Quality management in the cyber industry

  • 58% of US security teams said they lacked the skills or expertise to create effective detections in 2025.[43]
  • 77% of security leaders said they planned to improve the quality of SOC detections in 2025, globally.[43]
  • 61% of security leaders said they somewhat trusted AI for mission-critical SOC activities in 2025, globally.[43]
  • 87% of UK senior cybersecurity managers said faster certification can reduce certification credibility in 2026.[1]
  • 46% of US security teams reported a detection-as-code skills gap in 2025.[43]

Supply chain in the cyber industry

  • 88% of cybersecurity leaders were very or somewhat concerned about supply-chain cybersecurity risks in 2025, globally.[44]
  • 65% of organizations surveyed by Black Duck experienced a software supply-chain attack in the year before its 2025 report.[45]
  • 37% of organizations continuously monitored running applications for supply-chain threats in Ponemon’s 2024 research.[46]
  • 5% of organizations experienced 10 or more material third-party cybersecurity incidents in 2025, globally.[44]
  • Fewer than 50% of organizations monitored cybersecurity across even half of their extended supply chains in 2025, globally.[44]

Outsourcing / Offshoring in the software and IT services sector (sector benchmark)

  • Across European organizations, 35% planned to increase their use of nearshore outsourcing in the 2024/2025 sourcing study.[47]
  • Among German IT-service generalists, 10.2% of digital-experience services for customer projects were delivered offshore in 2024.[48]
  • Among German IT-service generalists, 19.5% of digital-experience services for customer projects were delivered nearshore in 2024.[48]
  • Across German digital-experience service providers, 13.2% of services for customer projects were delivered nearshore in 2024.[48]
  • Across German digital-experience service providers, 7.6% of services for customer projects were delivered offshore in 2024.[48]

11 Statistics

Finance & Pricing

Finance & Pricing shows retention and pricing dynamics: 99% is a cybersecurity company’s 2025 net dollar retention rate.

Pricing strategy in the cyber industry

  • 24% was CrowdStrike’s fiscal 2026 year-over-year ARR growth, reaching $5.25 billion.[25]
  • 99% was a cybersecurity company’s 2025 net dollar retention rate, compared with 100% in 2024.[49]
  • 22% was Zscaler’s fiscal 2025 year-over-year ARR growth, reaching $3.015 billion.[50]
  • 20.5% was the 2025 year-over-year increase in average contract value reported by a cybersecurity company, to $66,500.[49]
  • 93% was a cybersecurity company’s dollar-based net retention rate as of December 31, 2025.[49]

Cost reduction in the cyber industry

  • 14% of respondents identified cost efficiency as their top OT-security success measure in 2026.[51]
  • 55% of security professionals said false positives contributed to SOC inefficiency in 2025, globally.[43]
  • 46% of SOC professionals said they spent more time maintaining tools than defending organizations in 2025, indicating a major efficiency cost.[43]
  • 11% of respondents identified cost efficiency as their top OT-security success measure in 2022, according to Fortinet’s trend series.[52]
  • 50% of organizations expected cybersecurity spending to grow from 2023 to 2025, according to research cited by Palo Alto Networks.[53]

Profitability in the cyber industry

  • 27.6% was A10 Networks’ estimated 2024 EBITDA margin in a cybersecurity comparables analysis.[54]
  • 21.7% was Zscaler’s estimated 2024 EBITDA margin in a cybersecurity comparables analysis.[54]
  • 18.2% was Cloudflare’s estimated 2024 EBITDA margin in a cybersecurity comparables analysis.[54]
  • 44.8% was Check Point Software’s estimated 2024 EBITDA margin in a cybersecurity comparables analysis.[54]
  • 30.0% was Palo Alto Networks’ estimated 2024 EBITDA margin in a cybersecurity comparables analysis.[54]

Financial planning in the cyber industry

  • $6.80 billion was Fortinet’s 2025 revenue.[55]
  • $9.22 billion was Palo Alto Networks’ fiscal 2025 revenue.[56]
  • $6.77 billion was Palo Alto Networks’ fiscal 2025 gross profit.[56]
  • $5.25 billion was CrowdStrike’s annual recurring revenue as of January 31, 2026.[25]
  • $1.91 billion was Fortinet’s 2025 fourth-quarter revenue, representing 15% year-over-year growth.[55]

12 Statistics

Product & Service

Product & Service tracks AI-security supply: 111 UK firms explicitly offered cyber security for artificial-intelligence systems in 2026.

Product development in the cyber industry

  • 111 UK firms explicitly offered cyber security for artificial-intelligence systems in 2026, up from 66 in 2025.[11]
  • 29% of 2,603 UK cyber security firms were mainly involved in cyber security product development in 2025.[11]
  • £184 million was raised across 47 investment deals involving dedicated UK cyber security firms in 2025.[11]
  • 57% of UK AI-security providers mentioned AI or machine-learning model security among their offerings in 2026.[11]
  • £6.364 billion was generated by UK cyber security product companies in the most recent financial year covered by the 2026 analysis.[11]

Product lifecycle in the cyber industry

  • 960 UK AI and software-security providers were identified in the 2025 market analysis.[11]
  • 66 UK providers were identified as offering AI security in the 2025 market analysis.[11]
  • 1,141 UK firms provided software security services in 2026, including 108 specialist software-security providers.[11]
  • 30%–40% of known exploited vulnerability instances were fixed within the first week even by organizations with the strongest remediation performance in 2026.[57]

After-sales in the cyber industry

  • 40% of surveyed managed-service-provider customers preferred providers able to explain risks and incidents in plain language in 2026.[58]
  • 53% of managed-service-provider customers said they were expected to support expanding digital operations without additional resources in 2026.[58]
  • 29% of surveyed organizations were considering or evaluating a managed service provider for security in 2026.[58]
  • 29% of managed-service-provider prospects said they could secure compromised accounts and restore operations within hours of an incident in 2026.[58]
  • 66% of surveyed organizations already outsourced security services to a managed service provider in 2026.[58]

Value proposition in the cyber industry

  • 61% of UK cyber security employees worked for firms primarily offering services or managed services in 2025.[11]
  • 72% of UK cyber security firms were mainly involved in service provision, including managed services and reselling, in 2025.[11]
  • 63% of UK cyber security providers mentioned security consulting and advisory among their offerings in 2026.[11]
  • £8.383 billion was generated by UK cyber security service and managed-security-service providers in the most recent financial year covered by the 2026 analysis.[11]
  • 46% of UK cyber security providers mentioned incident response and recovery among their offerings in 2026.[11]

13 Statistics

Sustainability & Ethics

Sustainability & Ethics includes measured intensity figures: Check Point’s Scope 1 and 2 emissions intensity is 1.004 tonnes of CO2e per million dollars of revenue in 2024.

Sustainability in the cyber industry

  • 60% was Check Point's progress toward training one million people in cybersecurity by 2028, measured in 2024.[59]
  • 9% of EU IT investment represented information security investment in 2023.[10]
  • 267,844 people received cybersecurity training from Check Point in 2024, equal to 60% of its 2028 target.[59]
  • 76,117 gigajoules of energy were consumed by Check Point in 2024.[59]
  • 1.004 tonnes of CO2e per million dollars of revenue was Check Point's Scope 1 and 2 emissions intensity in 2024.[59]

ESG in the cyber industry

  • 78,542 gigajoules was Check Point's energy consumption in 2022.[59]
  • 18% of Check Point's total reported emissions were Scope 1 emissions in 2024.[59]
  • 462 tonnes of CO2e were Check Point's Scope 1 emissions in 2024.[59]
  • 9,291 tonnes of CO2e were Check Point's location-based Scope 2 emissions in 2024.[59]
  • 2,576 tonnes of CO2e were Check Point's combined market-based Scope 1 and Scope 2 emissions in 2024.[59]

Ethics in the cyber industry

  • 90% of organizations reported having ethical AI frameworks in 2025.[60]
  • 85% of organizations reported providing ethics training in 2025.[60]
  • 81% of security professionals were concerned about AI-powered threats in the 2025 SANS survey.[3]
  • 38% of cybersecurity professionals surveyed in late 2023 said their organizations had a formal policy for safe and secure AI deployment.[19]
  • 61% of organizations identified bias and fairness in AI algorithms as an ethical concern regarding Industry 5.0 technologies in 2025.[60]

CSR in the cyber industry

  • 267,844 people participated in Check Point cybersecurity training programs in 2024.[59]
  • 15% was Check Point's progress toward its goal of training one million people in cybersecurity by 2028 in 2022.[59]
  • 33% was Check Point's progress toward its goal of training one million people in cybersecurity by 2028 in 2023.[59]
  • 179,503 people participated in Check Point cybersecurity training programs in 2023.[59]
  • 150,000 people participated in Check Point cybersecurity training programs in 2022.[59]

Carbon footprint in the cyber industry

  • 1.004 tonnes of CO2e per million dollars of revenue was Check Point's market-based Scope 1 and 2 emissions intensity in 2024.[59]
  • 9,536 tonnes of CO2e were Check Point's market-based Scope 1 and 2 emissions in 2022.[59]
  • 2,576 tonnes of CO2e were Check Point's total market-based Scope 1 and Scope 2 emissions in 2024.[59]
  • 9,875 tonnes of CO2e were Check Point's market-based Scope 1 and 2 emissions in 2023.[59]
  • 455.7 tonnes of CO2e came from refrigerants in Check Point's Scope 1 emissions in 2024.[59]

15 Statistics

Globalization & Expansion

Globalization & Expansion points to vendor concentration and workforce gaps: 70% of the world’s cybersecurity vendors are based in the United States in 2024.

Globalization in the cyber industry

  • 124,978 cybersecurity professionals represented the Middle East and Africa workforce gap in 2024.[4]
  • 542,687 cybersecurity professionals represented North America’s workforce gap in 2024.[4]
  • 5,468,173 people made up the estimated global cybersecurity workforce in 2024.[20]
  • 3,374,580 cybersecurity professionals represented the Asia-Pacific workforce gap in 2024.[4]
  • 70% of the world’s cybersecurity vendors were based in the United States in 2024.[21]

Cultural adaptation in the cyber industry

  • 21,148 employees were included in the global organization studied for demographic patterns in cybersecurity culture.[27]
  • 45% of North American cybersecurity professionals identified balancing personal fulfillment and professional growth as their top career goal in 2024.[20]
  • 43% of European cybersecurity professionals identified balancing personal fulfillment and professional growth as their top career goal in 2024.[20]
  • 6,502 employees responded to a global cybersecurity-culture survey covering a safety-critical and critical-infrastructure organization.[27]
  • 42% of Asia-Pacific cybersecurity professionals identified balancing personal fulfillment and professional growth as their top career goal in 2024.[20]

Supplier management in the cyber industry

  • 37% of European essential and important entities performed supplier due diligence or risk assessments in 2024.[10]
  • 32% of surveyed third-party suppliers were regularly monitored in BlueVoyant’s study.[68]
  • 86% of European banking entities had a third-party-risk-management policy in 2024.[10]
  • 61% of organizations used cybersecurity ratings services in 2023, up from 42% in 2020.[69]
  • 55% of European digital-infrastructure entities had a third-party-risk-management policy in 2024.[10]

Stakeholder management in the cyber industry

  • 90% of surveyed cybersecurity professionals reported skills shortages in their organizations in 2024.[19]
  • 74% of surveyed UK organizations prioritized recovery speed after cyberattacks, according to 2026 research.[1]
  • 70% of respondents were highly concerned about supply-chain risk in ISC2’s 2025 cyber-supply-chain survey.[2]
  • 64% of surveyed cybersecurity professionals considered skills shortages more serious than personnel shortages in 2024.[19]
  • 47% of respondents said their organizations were not directly affected when suppliers experienced cybersecurity incidents in 2025.[2]

Distribution channels in the cyber industry

  • 21 companies sponsored CrowdStrike’s Fal.Con 2024 as partners supporting innovation and go-to-market activity.[25]
  • 40% of cybersecurity M&A transactions were cross-border in 2025, supporting international expansion through corporate channels.[70]
  • $1.73 billion was the announced value of Veeam’s 2025 acquisition of Securiti AI, expanding its data-security portfolio and route to customers.[71]

Key questions about the cyber industry

What is the projected global information-security spending for 2025 and the 2026 growth forecast?
Global information-security spending is projected at $213 billion in 2025. Spending growth forecast for 2026 is 12.5%.
What does Gartner forecast for worldwide end-user information-security spending in 2026?
Gartner forecasts $244 billion for 2026 and 11.6% constant-currency growth.
Which companies lead the cyber industry?
Microsoft and Broadcom are tied at the top of Gitnux's 2026 cyber ranking with an Overall score of 9.5 each.
What technology shift is most represented in 2026 deployment data for agentic AI?
In 2026, 35% of surveyed organizations report widespread deployment of agentic AI, including cybersecurity-monitoring use cases.
How is the 2025 information-security market segmented by Gartner’s model?
Gartner divides 2025 spending into network security ($23.273 billion), security services ($83.812 billion) and security software ($105.940 billion). Security software is roughly half of total spending.
How have vulnerability-exploitation and credential-abuse shares changed from 2025 to 2026?
Verizon’s 2025 report shows credential abuse in 22% of breaches and vulnerability exploitation in 20%. Verizon’s 2026 report identifies vulnerability exploitation in 31% of breaches.
Reference

Cite This Report

This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.

APA
Samuel Norberg. (2026, November 11). Cyber Industry Statistics. Gitnux. https://gitnux.org/cyber-industry-statistics
MLA
Samuel Norberg. "Cyber Industry Statistics." Gitnux, 11 Nov 2026, https://gitnux.org/cyber-industry-statistics.
Chicago
Samuel Norberg. 2026. "Cyber Industry Statistics." Gitnux. https://gitnux.org/cyber-industry-statistics.

Sources & references

83 sources cited across this report

  1. techradar.com
  2. isc2.org
  3. sans.org
  4. cache.pressmailing.net
  5. securonix.com
  6. teksystems.com
  7. higherlogicdownload.s3.amazonaws.com
  8. ec.europa.eu
  9. oecd.org
  10. enisa.europa.eu
  11. gov.uk
  12. newsroom.ibm.com
  13. riverbed.com
  14. anomalo.com
  15. informatica.com
  16. kpmg.com
  17. utah.ismworld.org
  18. ians.com
  19. dejavu.org
  20. xmc-qa-vercel.isc2.org
  21. web-assets.bcg.com
  22. securityweek.com
  23. returnonsecurity.com
  24. apnews.com
  25. ir.crowdstrike.com
  26. isaca.org
  27. arxiv.org
  28. newsroom.cisco.com
  29. survey.stackoverflow.co
  30. gallup.com
  31. computerworld.com
  32. giac.org
  33. reddit.com
  34. isemag.com
  35. deloitte.com
  36. morningstar.com
  37. equibles.com
  38. coderedcomms.com
  39. 10fold.com
  40. toprankmarketing.com
  41. brand-news.it
  42. business.linkedin.com
  43. splunk.com
  44. securityscorecard.com
  45. blackduck.com
  46. assets.blackduck.com
  47. whitelane.com
  48. luenendonk.de
  49. d18rn0p25nwr6d.cloudfront.net
  50. ir.zscaler.com
  51. scribd.com
  52. waterisac.org
  53. paloaltonetworks.com
  54. www2025.lincolninternational.com
  55. investor.fortinet.com
  56. investors.paloaltonetworks.com
  57. verizon.com
  58. barracuda.com
  59. checkpoint.com
  60. ust.com
  61. static.fortra.com
  62. gtia.org
  63. cdn.sypher.eu
  64. pagerduty.com
  65. corpgov.law.harvard.edu
  66. dhrglobal.com
  67. info.equilar.com
  68. bluevoyant.com
  69. cyentia.com
  70. clairfield.com
  71. axios.com
  72. gartner.com
  73. ic3.gov
  74. grandviewresearch.com
  75. sec.gov
  76. finance.ec.europa.eu
  77. newsroom.servicenow.com
  78. microsoft.com
  79. investors.broadcom.com
  80. cisco.com
  81. investors.tenable.com
  82. trendmicro.com
  83. eba.europa.eu