The Business of Cyber Security

Networking & Edge Infrastructure

Networking is cybersecurity's oldest adjacency — the firewall was born as a network device, and the industry's largest vendors (Cisco, Palo Alto Networks, Fortinet, Check Point) all sit on the boundary. What keeps the adjacency current rather than historical is SASE: the architectural shift that made the network and its security a single cloud-delivered purchase, collapsing two markets into one buying decision (Network & SASE covers the security side; this page covers the traffic crossing from the infrastructure side).

The market and its players

Cisco remains the definitional case: the largest networking vendor built a multi-billion-dollar security business through decades of M&A and then paid $28B for Splunk to anchor its security-and-observability platform (42a). HPE closed its ~$14B acquisition of Juniper Networks (2025) — consolidating enterprise networking under pressure from the AI-datacenter buildout, with Juniper's Mist AI as the prize and security features embedded throughout. Cloudflare and Akamai are the edge-network converts: both now report security as a majority or near-majority of revenue, having turned content-delivery infrastructure into security-service platforms (Zero Trust, WAF, DDoS, API security). Netskope and Zscaler attacked from the security side and became network operators by necessity — running global points of presence that make them infrastructure companies in practice. Arista, Extreme, and F5 (application delivery, now heavily API/app security) fill out the enterprise tier; Versa and Cato Networks are the SASE pure-plays, perennial acquisition candidates for anyone needing the full stack.

Player Origin Security position now
Cisco Networking Security + Splunk observability as core growth thesis
HPE (+Juniper) Infrastructure ~$14B consolidation; embedded security, AI ops
Cloudflare / Akamai Edge / CDN Security is the growth engine of both
Zscaler / Netskope Security-side entrants Operate global networks; SASE leaders
Cato / Versa SASE pure-plays The remaining independent full-stack assets

The convergence mechanics

Architecture did the converging. When users left the office and applications left the datacenter, the perimeter became a cloud service: secure web gateway, ZTNA, CASB and SD-WAN delivered from the same points of presence. That made network performance and network security the same engineering problem and — decisively for M&A — the same budget line. Every remaining independent SASE component is therefore a target for two acquirer sets at once: networking incumbents buying security capability, and security platforms buying network infrastructure.

The edge players changed the competitive map. Cloudflare's model — infrastructure economics, self-serve go-to-market, security products priced at disruption levels — pressures every appliance-heritage vendor's margins, the same dynamic the per-GB SIEM faces from bundlers (03e). And the AI buildout adds a new current: datacenter networking demand (the HPE–Juniper logic) pulls capital into infrastructure that increasingly ships with security embedded, while inference traffic creates new edge-security surface (API gateways, AI firewalls — 20).


Updated 2026-08-16 18:47 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.