Worldwide revenue for security products totaled $106.8 billion in 2023, an increase of 15.6% compared to 2022, and revenue growth was strong across the board with all six product categories registering double-digit year-over-year growth, according to new data from the International Data Corporation (IDC) Worldwide Semiannual Security Products Tracker.
“Security is a board level conversation; cyber risk is business risk. Thus, security spending remains strong and carries with it a certain level of immunity from the negative effects of economic uncertainty. In fact, the emergence of GenAI and other AI technologies are contributing to increased budgets for security offerings in 2024,” Frank Dickson, group vice president, security and trust at IDC, said. “GenAI brings pressure to increase cybersecurity budgets on two fronts: to secure an organization’s development and use of GenAI applications and to use GenAI assistants to uplevel security analysts, in both efficacy and efficiency.”
The largest technology category in 2023 was network security, with worldwide revenues totaling $27.4 billion. Nearly three quarters of this revenue came from four secondary markets:
- Firewall/unified threat management (UTM)
- Secure web gateway
- Web application and API protection
- Virtual private network (VPN)/Zero trust network access (ZTNA)
The Network Security category includes five other secondary markets:
- Segmentation
- Infrastructure protection
- Intrusion detection systems/intrusion prevention systems (IDS/IPS)
- Cloud access security broker
- Network sandboxing
The next largest technology categories were Endpoint security and security analytics with 2023 revenues of $21.6 billion and $20 billion, respectively. Revenue in the endpoint security segment was divided between the modern endpoint and consumer digital life protection secondary markets. The vulnerability management and security information and event management (SIEM) secondary markets accounted for nearly two thirds of the security analytics revenue, with the remainder coming from the network security analytics, orchestration and automation tools and cloud-native XD markets.
The remaining technology categories — identity and access management, information and data security and cloud native application protection platforms (CNAPP) — delivered $37.8 billion in combined revenue for 2023.
The technology category with the greatest year-over-year revenue growth in 2023 was cloud native application protection platforms at 31.5%, followed by identity and access management at 21.4%. The other categories all saw annual revenue growth in the mid- to upper teens.
In terms of deployment, public cloud continued to capture a growing share of security product spending. In 2023, nearly two-thirds of all security products revenue came from public cloud deployments with the remainder coming from on-premise deployments and hardware appliances.
The top five companies in the security products market in 2023 were Microsoft, Palo Alto Networks, Cisco, Gen Digital and Fortinet with combined revenue of $28.8 billion or nearly 27% of the overall market.
IDC forecasts the global security product market will continue to see double-digit growth over the next five years with total revenue reaching $200 billion in 2028. The fastest-growing product categories over the 2024 – 2028 forecast period will be cloud native application protection platforms, security analytics, identity and access management and information and data security, all with compound annual growth rates (CAGRs) in the teens or higher.
