Spending on cloud safety might be $111 billion in 2025, representing 3% of the whole IT spend. Microsoft alone is predicted to realize $37.2 billion in income by its cybersecurity division this yr.
The small print come from HG Insights, a market intelligence agency that gives data and insights helpful for go-to-market selections – which may embody massive firms in search of acquisitions to increase or solidify their repertoire, or small startups seeking to hone their advertising and marketing instructions.
Most of the fundamental market details are predictable, however the particulars can nonetheless be shocking. For instance, whereas it may very well be anticipated that cloud safety spending within the US is excessive, it’s considerably shocking that it represents 38% ($42 billion) of the entire international spend. The US market is greater than the whole spend within the APAC area ($35.58 billion), or EMEA ($26.38 billion). This instantly tells builders that any new cloud safety product should primarily be focused on the US.
The explanations are a number of. The US is a land of enterprise, and the nursery of cloud computing. The West Coast has a tradition of early adoption in new expertise. The East Coast dominates in finance – and finance and insurance coverage, unsurprisingly, is the world’s largest client of cloud safety.
When it comes to cloud safety suppliers, measured by buyer rely, Microsoft dominates the market with nearly 60,000 clients. Splunk is available in second with lower than 16,000 clients, adopted by Palo Alto, AWS, and Fortinet. Google is a lowly tenth on this record.
For CNAPP suppliers by buyer rely, Microsoft once more dominates with greater than 2,500 clients. Palo Alto is second with simply lower than 1,300 clients, and Wiz is third with simply greater than 1.200 clients. Google doesn’t determine in any respect on this itemizing.
The absence of Google as a serious supplier of cloud safety might seem shocking given its long-standing e mail and search associated dominance of the web, and extra not too long ago its motion into cloud companies with the Google Cloud Platform (GCP). GCP is mostly thought of the quantity 3 cloud supplier behind AWS and Azure.
The reason being most likely historic. “AWS and Microsoft had been the primary horses within the barn,” explains Matt Hogan, VP of development advertising and marketing at HG insights. “Google is just a little late to the get together.” Commercial. Scroll to proceed studying.
It was most likely much less a disinterest within the cloud, and extra a deal with shoring up the Google Menace Intelligence Platform (GTIP) first. In 2022 Google spent $5.4 billion to accumulate Mandiant, gaining a lot from the Mandiant model title whereas integrating Mandiant’s risk intelligence with the massive malware dataset it acquired with VirusTotal in 2012, and the huge insights it already has from billions of worldwide customers and billions of worldwide units.
GTIP is now a serious participant in risk intelligence, and Google can refine its focus additional. It might be a Johnny-come-lately to cloud safety, however it appears to be repeating the identical playbook right here. In March 2025, it introduced plans to accumulate Wiz for $32 billion, a transaction that’s more likely to full in 2026.
The attraction is clearly proven within the HG Insights market evaluation. Whereas Google at present doesn’t seem as a supplier of CNAPP, Wiz is ranked at quantity three. The mixture of the Wiz title and product backed by the quantity 3 cloud supplier and a serious risk intelligence platform has the potential to alter markets.
The State of the Cloud Safety Market in 2025 is a snapshot of the cloud safety market as it’s as we speak. It’s drawn from the continual assortment of cloud dynamics knowledge by HG Insights, sourced from a complete of greater than 11 million companies worldwide. Whereas this snapshot is effective, the true worth for go-to-market decision-makers comes from monitoring market intelligence because it evolves over time. It supplies a steady street map to navigate expansionist acquisitions, new product growth, and finely focused advertising and marketing instructions.
Associated: CloudSEK Raises $19 Million for Menace Intelligence Platform
Associated: Oracle Confirms Cloud Hack
Associated: CISA Points Steering After Oracle Cloud Hack
Associated: CISA Points Binding Operational Directive for Improved Cloud Safety
