Data Security¶

What It Is¶

Data security encompasses the technologies, processes, and policies that protect data --- at rest, in motion, and in use --- from unauthorized access, exfiltration, corruption, or loss. The segment spans several distinct but increasingly converging sub-categories:

• Data Loss Prevention (DLP): Monitors, detects, and blocks sensitive data from leaving the organization through email, endpoints, cloud apps, or network channels. Legacy DLP relies on regex patterns and predefined policies; next-gen DLP uses data lineage and contextual classification.
• Encryption & Key Management: Protects data confidentiality through cryptographic transformation. Covers disk/file encryption, database encryption, TLS/SSL for data in transit, tokenization, and enterprise key management (EKM). Post-quantum cryptography (PQC) readiness is an emerging driver.
• Data Security Posture Management (DSPM): Discovers, classifies, and assesses risk across data stores (cloud, SaaS, on-prem) to answer "where is my sensitive data, who has access, and what's the risk?" The fastest-growing sub-category.
• Privacy Technology: Consent management, data subject request automation, privacy impact assessments, and data mapping tools driven by GDPR, CCPA, and emerging global regulations.
• Data Classification & Discovery: Automated identification and labeling of sensitive data (PII, PHI, PCI, IP) across structured and unstructured repositories.
• AI Data Governance: Emerging category addressing training data provenance, model output security, prompt injection prevention, and sensitive data exposure through AI systems.

Buyer Profile¶

Market Landscape¶

Vendor Positioning¶

{
  "$schema": "https://vega.github.io/schema/vega-lite/v5.json",
  "description": "Data Security Vendor Positioning (2025)",
  "width": 500,
  "height": 400,
  "title": {
    "text": "Data Security Vendor Positioning (2025)",
    "fontSize": 16,
    "color": "#1B1F3B"
  },
  "config": {
    "background": "transparent",
    "axis": {
      "labelColor": "#3D4166",
      "titleColor": "#1B1F3B",
      "gridColor": "#e5e8ee"
    },
    "text": {
      "color": "#1B1F3B"
    }
  },
  "layer": [
    {
      "mark": {
        "type": "text",
        "fontSize": 13,
        "fontWeight": "bold",
        "opacity": 0.15
      },
      "data": {
        "values": [
          {
            "x": 0.75,
            "y": 0.75,
            "label": "Leaders"
          },
          {
            "x": 0.25,
            "y": 0.75,
            "label": "Platform Players"
          },
          {
            "x": 0.25,
            "y": 0.25,
            "label": "Emerging Innovators"
          },
          {
            "x": 0.75,
            "y": 0.25,
            "label": "Specialists"
          }
        ]
      },
      "encoding": {
        "x": {
          "field": "x",
          "type": "quantitative"
        },
        "y": {
          "field": "y",
          "type": "quantitative"
        },
        "text": {
          "field": "label",
          "type": "nominal"
        },
        "color": {
          "value": "#1B1F3B"
        }
      }
    },
    {
      "mark": {
        "type": "point",
        "size": 150,
        "filled": true
      },
      "data": {
        "values": [
          {
            "x": 0.6,
            "y": 0.88,
            "label": "Varonis"
          },
          {
            "x": 0.5,
            "y": 0.85,
            "label": "Broadcom Symantec DLP"
          },
          {
            "x": 0.9,
            "y": 0.9,
            "label": "Microsoft Purview"
          },
          {
            "x": 0.55,
            "y": 0.62,
            "label": "Cyera"
          },
          {
            "x": 0.65,
            "y": 0.6,
            "label": "BigID"
          },
          {
            "x": 0.7,
            "y": 0.75,
            "label": "OneTrust"
          },
          {
            "x": 0.45,
            "y": 0.72,
            "label": "Forcepoint DLP"
          },
          {
            "x": 0.35,
            "y": 0.65,
            "label": "Digital Guardian (Fortra)"
          },
          {
            "x": 0.5,
            "y": 0.42,
            "label": "Cyberhaven"
          },
          {
            "x": 0.3,
            "y": 0.35,
            "label": "Transcend"
          },
          {
            "x": 0.4,
            "y": 0.5,
            "label": "Normalyze (Proofpoint)"
          },
          {
            "x": 0.75,
            "y": 0.7,
            "label": "Zscaler DLP"
          }
        ]
      },
      "encoding": {
        "x": {
          "field": "x",
          "type": "quantitative",
          "scale": {
            "domain": [
              0,
              1
            ]
          },
          "axis": {
            "title": "Niche / Point Solution \u2192 Broad Platform",
            "format": ".0%"
          }
        },
        "y": {
          "field": "y",
          "type": "quantitative",
          "scale": {
            "domain": [
              0,
              1
            ]
          },
          "axis": {
            "title": "Emerging \u2192 Established",
            "format": ".0%"
          }
        },
        "color": {
          "value": "#00C9A0"
        },
        "tooltip": [
          {
            "field": "label",
            "type": "nominal",
            "title": "Vendor"
          },
          {
            "field": "x",
            "type": "quantitative",
            "title": "Platform Breadth"
          },
          {
            "field": "y",
            "type": "quantitative",
            "title": "Established"
          }
        ]
      }
    },
    {
      "mark": {
        "type": "text",
        "dy": -12,
        "fontSize": 11
      },
      "data": {
        "values": [
          {
            "x": 0.6,
            "y": 0.88,
            "label": "Varonis"
          },
          {
            "x": 0.5,
            "y": 0.85,
            "label": "Broadcom Symantec DLP"
          },
          {
            "x": 0.9,
            "y": 0.9,
            "label": "Microsoft Purview"
          },
          {
            "x": 0.55,
            "y": 0.62,
            "label": "Cyera"
          },
          {
            "x": 0.65,
            "y": 0.6,
            "label": "BigID"
          },
          {
            "x": 0.7,
            "y": 0.75,
            "label": "OneTrust"
          },
          {
            "x": 0.45,
            "y": 0.72,
            "label": "Forcepoint DLP"
          },
          {
            "x": 0.35,
            "y": 0.65,
            "label": "Digital Guardian (Fortra)"
          },
          {
            "x": 0.5,
            "y": 0.42,
            "label": "Cyberhaven"
          },
          {
            "x": 0.3,
            "y": 0.35,
            "label": "Transcend"
          },
          {
            "x": 0.4,
            "y": 0.5,
            "label": "Normalyze (Proofpoint)"
          },
          {
            "x": 0.75,
            "y": 0.7,
            "label": "Zscaler DLP"
          }
        ]
      },
      "encoding": {
        "x": {
          "field": "x",
          "type": "quantitative"
        },
        "y": {
          "field": "y",
          "type": "quantitative"
        },
        "text": {
          "field": "label",
          "type": "nominal"
        },
        "color": {
          "value": "#3D4166"
        }
      }
    },
    {
      "mark": {
        "type": "rule",
        "strokeDash": [
          4,
          4
        ],
        "color": "#6B6F8D"
      },
      "data": {
        "values": [
          {
            "x": 0.5
          }
        ]
      },
      "encoding": {
        "x": {
          "field": "x",
          "type": "quantitative"
        }
      }
    },
    {
      "mark": {
        "type": "rule",
        "strokeDash": [
          4,
          4
        ],
        "color": "#6B6F8D"
      },
      "data": {
        "values": [
          {
            "y": 0.5
          }
        ]
      },
      "encoding": {
        "y": {
          "field": "y",
          "type": "quantitative"
        }
      }
    }
  ]
}

Key Vendors¶

Competitive Dynamics¶

DSPM consolidation is nearly complete. Seven standalone DSPM startups were acquired between 2023--2024: Dig Security (Palo Alto Networks, $400M), Laminar (Rubrik), Normalyze (Proofpoint), Eureka Security (Tenable), Flow Security (CrowdStrike), and others absorbed by IBM and Netskope (Cyera Blog). Cyera remains the last major independent DSPM player at $9B valuation, but faces growing competition from platform vendors who acquired its competitors.

Microsoft Purview is the bundling threat. Similar to endpoint security, Microsoft's inclusion of DLP, classification, and information protection in E5 licenses forces pure-play vendors to justify premium pricing. Organizations already invested in the Microsoft ecosystem increasingly default to Purview for "good enough" data security.

DLP is being reinvented. Legacy regex-based DLP (Symantec, Forcepoint) generates excessive false positives and cannot handle cloud data sprawl. Next-gen vendors like Cyberhaven use data lineage --- tracking every piece of data from creation through every copy, edit, and share --- to dramatically reduce false positives and provide contextual enforcement. Gartner predicts that by 2027, 70% of CISOs in larger enterprises will adopt a consolidated approach to address both insider risk and data exfiltration.

Privacy tech is a compliance-driven market. OneTrust dominates with ~18% market share and $500M+ ARR, but the segment faces margin pressure as privacy features are subsumed into broader GRC and data security platforms.

Recent M&A and Funding¶

Pricing Models¶

TCO friction points:

• Classification is the hidden tax. Effective DLP requires accurate data classification, which requires ongoing tuning, policy refinement, and exception management. Organizations underestimate this by 2--3x.
• Multi-tool sprawl. Enterprises commonly run separate tools for DLP, encryption, classification, privacy, and DSPM --- each with its own console, policies, and licensing model. Consolidation is desired but difficult.
• Cloud data costs compound. Scanning cloud data stores (S3, Azure Blob, GCS, SaaS apps) for DSPM incurs both vendor license costs and cloud provider egress/API fees.
• Microsoft "free" DLP illusion. Purview DLP is included in E5, but advanced features (exact data match, endpoint DLP, auto-labeling) require E5 Compliance add-ons, and effective deployment demands significant configuration effort.

Integration & Ecosystem¶

Data security tools sit at the intersection of security, compliance, and data management:

• SIEM/XDR integration: DLP alerts feed SIEM platforms for correlation with other security events. High false-positive rates in legacy DLP create significant SIEM noise.
• CASB/SSE linkage: Cloud DLP policies are increasingly enforced through CASB (Cloud Access Security Broker) and SSE (Security Service Edge) platforms --- Zscaler, Netskope, and Palo Alto embed DLP in their SSE stacks.
• Identity and access: DSPM findings ("this S3 bucket contains PII and is accessible to 500 users") drive identity governance remediation through IGA platforms.
• Cloud security (CSPM/CNAPP): DSPM extends CSPM by adding data context --- not just "is this bucket public?" but "does this public bucket contain credit card numbers?"
• GRC and privacy: Privacy platforms (OneTrust, BigID) feed data maps and processing records into GRC workflows for regulatory reporting.
• AI/ML pipelines: Emerging integration point --- data security tools must monitor training data pipelines, model registries, and inference outputs for sensitive data leakage.

SWOT Analysis¶

Pain Points & Complaints¶

DLP false positives are the #1 practitioner complaint:

• Legacy DLP relies on regex pattern matching that generates massive noise --- benign data routinely matches sensitive data patterns (e.g., 16-digit part numbers flagged as credit card numbers). "Security analysts are forced to manually investigate thousands of low-risk alerts daily, leading to severe alert fatigue" (Cyera Blog).
• Cyberhaven claims 80--90% fewer false positives using data lineage instead of pattern matching (Cyberhaven), highlighting how broken legacy approaches are.

Data classification is fundamentally hard:

• Over 80% of enterprise data is unstructured in 2025, and "legacy tools lack the linguistic intelligence to accurately classify data based on context and meaning" (Cyera Blog).
• Without accurate classification, DLP either over-blocks (killing productivity) or under-blocks (missing real exfiltration).
• AI-generated content adds a new classification challenge --- LLM outputs may contain reformulated sensitive data that pattern-based classifiers cannot detect.

Cloud data sprawl overwhelms security teams:

• Sensitive data duplicates across sanctioned cloud services, shadow IT, SaaS apps, and AI tools. "Legacy DLP cannot monitor systems it doesn't know exist, leaving vast pools of sensitive data exposed to unmanaged risk."
• DSPM was created specifically to solve this problem, but adoption is still nascent (Gartner projected 20%+ adoption by 2026, up from <1% in 2022) (Palo Alto Networks).

Broadcom/Symantec DLP post-acquisition friction:

• Since Broadcom's acquisition of Symantec (2019), practitioners report "delays in support response times, limited engagement during troubleshooting, and difficulty accessing timely updates or documentation" (Gartner Peer Insights).
• Customer defections have accelerated, with organizations evaluating next-gen alternatives (Cyberhaven, Zscaler DLP, Microsoft Purview).

Privacy tool fatigue:

• Privacy teams are overwhelmed by the proliferation of regulations (20+ US state privacy laws as of 2026) and the manual effort required to map data flows, process DSRs, and maintain consent records across jurisdictions.

Emerging Technologies & Trends¶

timeline
    title Evolution of Data Security
    2000s : Encryption standards
          : Early DLP (Vontu, Verdasys)
          : Perimeter-based controls
    2010s : Cloud DLP
          : CASB emergence
          : GDPR drives privacy tech
    2018 : Privacy platforms
         : OneTrust, BigID founded
         : Consent management
    2022 : DSPM coined
         : Gartner Hype Cycle
         : Cloud data discovery
    2025 : DSPM consolidation
         : AI data governance
         : Data lineage DLP
    2027+ : Unified data security
          : Post-quantum crypto
          : Autonomous classification

Key trends shaping 2025--2027:

1. DSPM becomes a platform feature, not a product. With seven DSPM startups acquired in 18 months, standalone DSPM is rapidly being absorbed into broader security platforms (Palo Alto Prisma, CrowdStrike Falcon, Rubrik, Proofpoint). Cyera ($9B valuation) is betting it can remain independent by building a full data security platform around DSPM. The outcome will define whether DSPM follows the CASB trajectory (absorbed) or the SIEM trajectory (standalone category).

2. AI data governance emerges as a critical category. As enterprises deploy LLMs and AI agents, new security challenges arise: training data may embed sensitive information in model weights, prompt injection can extract confidential data, and AI agents operating with broad permissions can exfiltrate data without triggering traditional DLP. Italy fined OpenAI $15M for GDPR violations in training data processing (Corporate Compliance Insights). The EU AI Act's August 2026 deadline for high-risk AI systems creates compliance urgency.

3. Data lineage replaces regex for DLP. Next-gen DLP vendors (Cyberhaven, MIND) track every data object from creation through every transformation, copy, and share to build a lineage graph. This contextual approach dramatically reduces false positives because the system understands what the data is and how it got there, not just whether it matches a pattern.

4. Post-quantum cryptography (PQC) transition. NIST finalized PQC standards in 2024, and enterprises face a multi-year migration to quantum-resistant algorithms. Over 60% of new encryption deals in 2025 include PQC-readiness components (MarketsandMarkets). "Harvest now, decrypt later" attacks create urgency for organizations handling long-lived secrets.

5. Regulatory acceleration. The regulatory landscape is intensifying: GDPR fines exceeded $2B in 2025 (cumulative $6.7B+ since 2018), CCPA's most significant expansion takes effect January 2026, Colorado and Texas AI Acts take effect in 2026, and the EU AI Act phases in high-risk requirements through 2027 (SecurePrivacy). Privacy tech demand correlates directly with enforcement intensity.

6. Convergence of insider risk and DLP. Traditional DLP focuses on data movement; insider risk management (IRM) focuses on user behavior. Vendors are merging these into unified platforms --- Cyberhaven, Microsoft Purview, and Code42 (acquired by Mimecast) lead this convergence. Gartner predicts 70% of large-enterprise CISOs will adopt consolidated insider risk + DLP by 2027.

Gaps & Underserved Areas¶

Geographic Notes¶

Open-Source Alternatives¶

Sources & Further Reading¶

1. Mordor Intelligence --- Data Security Market Size & Forecast (2025--2030)
2. Mordor Intelligence --- Data Loss Prevention Market (2025--2030)
3. Fortune Business Insights --- Data Loss Prevention Market (2026--2034)
4. MarketsandMarkets --- Encryption Software Market (2025--2030)
5. Mordor Intelligence --- Privacy Management Software Market (2025--2030)
6. Fortune Business Insights --- Data Privacy Software Market (2025--2034)
7. Palo Alto Networks --- DSPM Market Size: 2026 Guide
8. Palo Alto Networks --- 2026 DSPM Adoption Report
9. TechCrunch --- Cyera Hits $9B Valuation with $400M Series F
10. Cyberhaven --- Record Growth in FY2026
11. BigID --- $60M Growth Round for AI Data Security
12. OneTrust --- On Track to Surpass $500M ARR
13. OneTrust --- Named Leader in 2025 IDC MarketScape for Data Privacy
14. Varonis Systems --- Financial Overview
15. Cyera Blog --- Top DSPM Acquisitions (2025 Updated)
16. Cyera Blog --- 4 Reasons Data Classification in DLP Is Broken
17. Infosecurity Magazine --- Biggest Cybersecurity M&A of 2025
18. Bank Info Security --- Why Cybersecurity Giants Are Rushing to Acquire DSPM Startups
19. Gartner Peer Insights --- Data Loss Prevention Reviews
20. Gartner Peer Insights --- Symantec DLP Reviews
21. Forcepoint --- 2025 Gartner Market Guide for DLP Insights
22. MIND & ESG --- The State of Data Loss Prevention Report 2025
23. SecurePrivacy --- Privacy Laws 2026: Global Updates & Compliance Guide
24. OneTrust Blog --- 5 Trends Shaping Global Privacy in 2026
25. Corporate Compliance Insights --- 2026 Operational Guide to Cybersecurity & AI Governance
26. Cranium AI --- AI Safety and Security in 2026
27. Microsoft Presidio --- Open Source PII Detection
28. Apache Ranger --- Centralized Security for Big Data
29. Mozilla SOPS --- Secrets OPerationS

Glossary¶

This glossary defines the acronyms and key terms used throughout the cybersecurity market research site. Use it as a quick reference when navigating segment analyses, pain-point discussions, and opportunity assessments.

A¶

B¶

C¶

D¶

E¶

F/G¶

H¶

I¶

L¶

M¶

N¶

O¶

P¶

R¶

S¶

T¶

V¶

X¶

Z¶