Overview

What this covers

A reference on the cybersecurity industry as a business. It treats cybersecurity not as a technical discipline but as an economy: the flow of money from customers to the vendors and service providers that protect them, from investors to the companies they fund, and through the consolidation that follows — with attackers and regulation as the two external forces that drive demand. It is written for business readers — company executives, board members and investors, security leaders (CISOs), and product leaders — rather than for engineers, and favors market structure, economics, and strategy over technical implementation.

The industry is organized here as a value chain: demand, created by threats and regulation, is met by builders (vendors, service providers, and the channel that distributes them); those builders are funded and consolidated by capital (investors, lenders, and advisors); and value is ultimately realized through mergers, acquisitions, and public-market exits.

Start here

The ideas behind it all — Core Concepts & Mental Models maps the analytical lenses used throughout (the value chain, manufactured demand, profit pools, platform gravity, the absorption clock, threat as a leading indicator, regulation as a demand engine), as a companion to the book The Business of Cyber Security.
The market overall — Market Structure and Market Sizing for how large the industry is and how it divides into segments, and Consolidation for the direction it is heading.
The product landscape — Vendors & Products and the segment pages (identity, cloud, endpoint, network, and the rest) for what the categories are and who leads them.
How security is delivered and sold — Service Providers and Channel & Distribution.
Economics and business models — Economics, Unit Economics, and Pricing & Business Models.
Capital and investors — Private Equity, Venture Capital, and the corporate-VC, lender, and advisor pages.
What drives demand — Threat Economy and Regulation, the two forces that make security spending largely non-discretionary, together with Cyber Insurance, a third.
AI and cybersecurity — AI Security, covering both the use of AI in security and the securing of AI systems.
Valuation and M&A — Valuation Benchmarks and Deals & Comps for how companies in the sector are valued and acquired.

The value chain

The industry as a value chain: two external forces — the threat economy and regulation — create largely non-discretionary demand; roughly $244B of 2026 spending flows to builders (vendors, service providers, channel), which are funded and consolidated by capital (investors, lenders, advisors); value is realized through mergers, acquisitions, and public exits.

Methodology and sourcing

Figures are drawn from public reporting, vendor disclosures, market-research houses (Gartner, Cybersecurity Ventures, MarketsandMarkets, Precedence), advisory league tables, and reputable trade press (SecurityWeek, CSO Online, Infosecurity). Revenue and ARR figures for private companies are estimates and are labeled as such; valuation multiples are medians from cited windows and move over time. Currency is USD unless noted. This is a reference for general information and market understanding, not investment, legal, or tax advice; material figures should be confirmed against the primary source before being relied upon.

Updated 2026-08-16 18:13 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.