The Cybersecurity Value Chain: How 25 Companies Fill 72 Foundational Roles

The cybersecurity industry isn't 72 companies — it's 25 companies filling 72 foundational roles across a layered value chain from identity and endpoint at the edge to SIEM, SOAR, and managed services at the core. The most consequential vendors — Palo Alto Networks, Microsoft, IBM, AWS, Google Cloud, Broadcom, and Datadog — appear multiple times because they've built platforms spanning the entire chain. Platform consolidation, cloud providers as default security vendors, and an attack surface expanding faster than the defense are the three forces reshaping who wins.