According to the 2022 Gartner CISO Security Vendor Consolidation XDR and SASE Trends Survey:

1. 75% of respondents’ organizations are pursuing a vendor consolidation strategy.
2. 57% of organizations are working with fewer than 10 vendors for their security needs.

Vendor consolidation can take a long time; nearly two-thirds of respondents say their organizations have been consolidating for three or more years.

Enterprise cybersecurity leaders have chosen the best solutions for their category (endpoint, network, email, identity, cloud) even though they do not integrate.

However, this created siloed security. The downside of siloed security is blind spots, complexity, and the need for time-consuming, repetitive tasks to close the gaps.

Now, large cybersecurity vendors are offering more variety of solutions. Often some combination of SIEM, EDR, NDR, Email, and SOAR.

Prospects are incentivized to purchase more than one of these solutions with preferred pricing and the promise of better communication between tools.

Enterprise security leaders now have to pick between consolidating within major vendors or sticking with the point solutions they’ve chosen for their compatibility with their environment and team.

However, the experienced security leader knows that compromising their best-in-class approach can create both financial and security-related issues in the medium to long term.

They have to choose between consolidation to solve the siloed security problem or sticking with the best solutions for their environment, compromising on connectivity.

The technical term for this integration of the various security solutions is cybersecurity mesh architecture. We’ve taken to calling it a point-solution mesh architecture because we think it’s important the emphasize that teams should be able to deploy the correct solutions for their environment, not the most convenient ones.