Cybersecurity –Solutions andServices
Extended Detection and Response (XDR)
A research report comparing provider strengths,
challenges and competitive differentiators
Customized report courtesy of:

QUADRANT REPORT—| —AUGUST 2023 —| —BRAZIL

Table of Contents

Executive Summary03
Provider Positioning07
Introduction
Definition15
Scope of Report
16
Provider Classifications
17

Extended Detection and
18 – 23
Response (XDR)
Who Should Read This Section 
Quadrant 
Definition & Eligibility Criteria
Observations
Provider Profile

19
20
21
22
23

Appendix
Methodology & Team
Author & Editor Biographies
About Our Company & Research

25
26
28

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

2

t

Executive Summary

Report Author: David de Paulo Pereira

In Brazil, cybersecurity services and products
have become increasingly indispensable
Brazil has the second highest number ofcyberattacks in Latin America, second only to
Mexico. In other words, it continues to be oneof the most attacked countries in the world.
In fact, cyberattacks are causing financial,
operational and reputational damage to victims,
as well as compromising data security andprivacy. It is difficult to identify a sector thathas not been hit by cyberattacks in Brazil.
Government agencies, hospitals, educationgroups, manufacturing, retail chains andtechnology companies have been attacked andmade news in several newspapers.
Cybersecurity is a strategic issue to ensurebusiness continuity and customer confidence.
Therefore, it is essential to be prepared to face
the threats and minimize the impacts of attacks.
Based on data from CERT (Center for Studies,
Response and Treatment of Security Incidents
in Brazil), it can be seen that cyberattacks had apeak in 2020 and showed a drop in the following
year, but grew again in 2022.
As technology continues to advance at a rapid
pace, the cybersecurity threat in Brazil grows
constantly. In 2022, organizations across thecountry faced a range of cybersecurity threats,from ransomware attacks to data breaches
and more. There were many different types ofcybersecurity threats that businesses in Brazil
had to encounter.
Ransomware attacks: Ransomware attacks
are becoming increasingly common in
Brazil, and this trend is likely to continue.
Cybercriminals are often asking for payment
in cryptocurrencies to make it harder to trace.
Ransomware is a type of malware that encrypts
an organization’s data, rendering it unusable
until a ransom is paid. These attacks can bedevastating to businesses, causing significant
data loss and downtime. To protect against
ransomware attacks, organizations must
invest in technology and rethink processes
and provide security awareness training toemployees to help them identify and avoid
phishing scams.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

In Brazil,
cybersecurity
measures are a
strategic
investment toensure business
continuity.
CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

3

t

Executive Summary

Supply chain attacks: Supply chain attacks
are another growing threat in Brazil. In these,cybercriminals target a vendor or third-party
supplier with the goal of gaining access to theircustomer networks. This can be particularly
dangerous for organizations that rely heavily on
third-party vendors or suppliers.
Social engineering attacks: Social engineering
attacks, such as vishing, phishing and spearphishing, continue to be a significant threat
in Brazil. They involve cybercriminals tricking
individuals into divulging sensitive information,such as login credentials or financial information.
To protect against social engineering attacks,
organizations should provide security awarenesstraining to employees to help them identify
and avoid these.
IoT-based attacks: With the growing adoptionof IoT devices, the risk of IoT-based attacks isalso increasing. IoT devices are often poorly
secured, making them an attractive target
for cybercriminals. To protect against IoTbased attacks, companies must ensure that
IoT devices are properly secured with strong
passwords and updated firmware.

Insider threats: Insider threats such as
employee theft or sabotage continue topose a significant risk to organizations in
Brazil. To mitigate this risk, companies must
implement strict access controls and monitor
employee activity for suspicious behavior.
In addition to the set of threats describedabove, other factors becoming a challenge formost organizations are:Rapidly evolving threat landscape:Cyberthreats are constantly evolving, withnew danger possibilities and attack methods
emerging all the time.
Lack of cybersecurity expertise:
Many companies lack the internal expertiseneeded to effectively manage theircybersecurity risks. This can make identifying
and mitigating cyberthreats difficult, leaving
companies vulnerable to attack.
The increasing complexity of IT environments:
As companies adopt new technologies, their
IT environments become more complex, witha greater variety of devices, applications andsystems to manage. This complexity can makeit difficult to effectively protect an organization’s
data and infrastructure.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

Human error: Employees can be a weak link in an
organization’s cybersecurity defenses as they may
inadvertently click on phishing emails, use weakpasswords or fall for social engineering scams.
To mitigate this risk, companies should provide
security awareness training to employees andimplement strict security policies and procedures.
Budgetary constraints: Cybersecurity solutions
can be expensive, so many companies struggle
to allocate enough resources to handle them.
This can make investing in new technologies andhiring the expertise needed to effectively manage
cyber risks difficult.
Compliance requirements: Companies mustcomply with regulatory requirements on
cybersecurity, but these can be complex anddifficult to understand and require significant
resources and expertise. Even so, companies
must ensure that they comply with theseregulations, such as LGPD.
ISG has clearly observed this evolution in the
cybersecurity market in Brazil and elsewhere,
as vendors have had to adapt their security
posture and solution architecture to better meetcustomers’ needs for next-generation security by
evaluating some major themes in quadrants.

Below we describe some trends presented by
Brazilian and global companies.
Identity and Access Management (IAM)
IAM is a critical component of a company’s
cybersecurity strategy because it helps control
access to sensitive data and systems. In thisyear’s study, we looked at the following trends
in IAM:
Cloud-based IAM: Cloud-based IAM solutions
are becoming increasingly popular as morecompanies move their data and applications tothe cloud.
Zero trust IAM: Zero trust IAM is an approachthat assumes that all users and devices are
untrusted until they are verified.
Identity Governance and Administration(IGA): IGA solutions are becoming increasingly
important as companies seek to manage many
identities and access permissions across their
networks and systems.
Consumer IAM: Consumer IAM solutions
are becoming more important as companies
seek to provide a seamless and secure user
experience for customers accessing theirapplications and services.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

4

t

Executive Summary

Machine-to-machine (M2M) IAM: With theincreasing adoption of IoT devices, M2M IAM
solutions are becoming more important.
Companies must keep up with the latest
trends and technologies to effectively manage
their IAM risks and invest in the solutions
and expertise needed to protect theirsystems and data.
Extended Detection and Response (XDR)
XDR is an emerging cybersecurity technologythat aims to improve threat detection andresponse by integrating multiple security data
sources and applying advanced analytics toidentify and respond to threats. Here are someof the key trends in XDR:
Integration with cloud security: XDR solutions
are increasingly being integrated with cloudsecurity solutions as more companies movetheir data and applications to the cloud.
Automation and orchestration: XDR solutions
increasingly incorporate automation andorchestration features to help streamline thethreat detection and response processes.

Threat intelligence integration: XDR solutions
increasingly integrate threat intelligencefeeds to provide context and prioritize
potential dangers.
Behavioral analysis: XDR solutions increasingly
incorporate behavioral analysis capabilities
to help detect threats that may not be
visible through traditional signature-based
detection methods.
Managed XDR services: As XDR solutions
become more complex, some companies areturning to managed XDR services to help them
implement and manage these capabilities.
As companies look to improve their threat
detection and response methods, XDR
solutions will likely become an increasingly
important part of their cybersecurity strategy.
Technical Security Services
Technical cybersecurity services encompass awide range of services that help organizations
manage cybersecurity risks. Here are someof the key trends observed in technicalcybersecurity services:© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

Penetration testing and vulnerability
assessments: Penetration testing andvulnerability assessments are becoming
more important as organizations seek to
identify and remediate vulnerabilities in their
networks and systems.
Incident response services: incident response
services are becoming more important asorganizations seek to prepare for and respondto cybersecurity incidents.
Security training and awareness: Security
training and awareness services are becoming
more important as organizations seek toimprove their employees’ cybersecurity
awareness and skills.
Cybersecurity automation and orchestration:
Automation and orchestration are becoming
more important in technical cybersecurity
services as organizations seek to streamline
security operations and respond to threats
more quickly.
Technical cybersecurity services are evolving
rapidly as organizations seek to effectively
manage cybersecurity risks.

Strategic Security Services
Cybersecurity consulting and strategic services
help organizations develop and implement
effective cybersecurity strategies to manage
cybersecurity risks. Here are some of the key
trends in cybersecurity consulting and strategic
services observed in the ISG study:
Risk management: Risk management
is becoming increasingly important incybersecurity consulting and strategic services
as it helps organizations identify, assess, andprioritize their cybersecurity risks, as well as
develop risk mitigation strategies aligned withbusiness objectives.
Compliance and regulatory requirements:
Compliance and regulatory requirements are
becoming more complex, with new regulations
such as LGPD.
Cybersecurity governance: Cybersecurity
governance is becoming more importantas organizations seek to ensure that theircybersecurity policies and procedures
are effective and aligned with theirbusiness objectives.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

5

t

Executive Summary

Developing cybersecurity programs:
Effective cybersecurity development
and programs include incident responseplans, security awareness training, andvulnerability management.

Advanced threat detection and response:
MSS vendors are increasingly using advanced
analytics, ML and AI to detect and respond to
threats more quickly and effectively.

Cybersecurity analysis: Cybersecurity analysis
is becoming more important in cybersecurity
consulting and strategic services.

Zero trust security: Zero trust security
is becoming more important in MSS
as organizations seek to improve theirsecurity posture.

Cybersecurity consulting services and strategic
services are evolving rapidly as organizations
seek to manage their cybersecurity risks
more effectively.

Managed detection and response (MDR):
MDR is an emerging trend in MSS that focuses
on detecting and responding to threats more
quickly and effectively.

Managed Security Services - SOC

Security automation and orchestration:
Automation and orchestration are becoming
more important in MSS as organizations seek
to streamline their security operations andrespond to threats more quickly.

Managed security services (MSS) areoutsourced cybersecurity services thatprovide organizations with comprehensive
security solutions. Here are some of the key
trends seen in the Managed Security Services SOC quadrant:
Cloud-based MSS: With the increasing
adoption of cloud computing, cloud-based
MSS are becoming more popular.

Today, organizations in Brazil andaround the world face a variety
of cybersecurity challenges,
including ransomware attacks,
supply chain attacks, social
engineering scams, IoT-based
attacks and insider threats. It is
no longer enough to just update
antivirus to ensure information
security. A broader, more strategic
approach is needed to addressthese challenges.

To effectively manage cybersecurity risks,
organizations must stay up to date with thelatest trends and technologies in MSS andinvest in the solutions and expertise needed toprotect their systems and data.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

6

tProvider Positioning

Provider Positioning

Page 1 of 8

Identity and Access
Management (IAM)

Extended Detection
and Response (XDR)

Security Service
Edge (SSE)

Technical Security
Services

Strategic Security
ServicesManaged Security
Services - SOC

Accenture

Not InNot InNot InLeaderLeaderLeaderAgility

Not InNot InNot InLeaderNot InLeaderAtos

Not InNot InNot InNot InProduct Challenger

Product Challenger

BluePexNot InContender

Not InNot InNot InNot InBroadcom

LeaderLeaderProduct Challenger

Not InNot InNot InCapgemini

Not InNot InNot InLeaderLeaderProduct Challenger

Cato Networks

Not InNot InLeaderNot InNot InNot InCheck Point

Contender

Product Challenger

Not InNot InNot InNot InCipherNot InProduct Challenger

Not InContender

Market Challenger

Product Challenger

CirionNot InNot InNot InNot InNot InLeader© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

7

tProvider Positioning

Provider Positioning

Page 2 of 8

Identity and Access
Management (IAM)

Extended Detection
and Response (XDR)

Security Service
Edge (SSE)

Technical Security
Services

Strategic Security
ServicesManaged Security
Services - SOC

Cisco

Contender

Contender

LeaderNot InNot InNot InClaranet

Not InNot InNot InProduct Challenger

Product Challenger

Rising Star

Cloudflare

Not InNot InMarket Challenger

Not InNot InNot InCompugraf

Not InNot InNot InContender

Not InNot InCrowdStrike

Not InLeaderNot InNot InNot InNot InCyberArk

Product Challenger

Not InNot InNot InNot InNot InCybereason

Not InProduct Challenger

Not InNot InNot InNot InDeloitte

Not InNot InNot InLeaderLeaderProduct Challenger

DXC Technology

Not InNot InNot InProduct Challenger

Not InContender

Edge UOLNot InNot InNot InNot InNot InLeader© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

8

tProvider Positioning

Provider Positioning

Page 3 of 8

Identity and Access
Management (IAM)

Extended Detection
and Response (XDR)

Security Service
Edge (SSE)

Technical Security
Services

Strategic Security
ServicesManaged Security
Services - SOC

Ericom Software

Not InNot InProduct Challenger

Not InNot InNot InE-TRUST

LeaderNot InNot InNot InNot InNot InEY

Not InNot InNot InNot InLeaderNot InFastHelp

Not InNot InNot InContender

Not InContender

Forcepoint

Not InNot InLeaderNot InNot InNot InForgeRock

Product Challenger

Not InNot InNot InNot InNot InFortinet

Contender

Rising Star

Product Challenger

Not InNot InNot InGoCacheNot InContender

Not InNot InNot InNot InHackerSec

Not InNot InNot InNot InContender

Not InHPE (Aruba)

Not InNot InRising Star

Not InNot InNot In© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

9

tProvider Positioning

Provider Positioning

Page 4 of 8

Identity and Access
Management (IAM)

Extended Detection
and Response (XDR)

Security Service
Edge (SSE)

Technical Security
Services

Strategic Security
ServicesManaged Security
Services - SOC

Huge Networks

Not InContender

Not InNot InNot InNot InIBLISS

Not InNot InNot InNot InProduct Challenger

Not InIBM

LeaderProduct Challenger

Not InLeaderLeaderLeaderiboss

Not InNot InProduct Challenger

Not InNot InNot InInfinite Networks

Not InNot InContender

Not InNot InNot InISH

Not InNot InNot InLeaderLeaderLeaderiT.eamNot InNot InNot InContender

Not InContender

ItaltelNot InNot InNot InNot InNot InContender

Kaspersky

Not InLeaderNot InNot InNot InNot InKPMG

Not InNot InNot InNot InProduct Challenger

Not In© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

10

tProvider Positioning

Provider Positioning

Page 5 of 8

Identity and Access
Management (IAM)

Extended Detection
and Response (XDR)

Security Service
Edge (SSE)

Technical Security
Services

Strategic Security
ServicesManaged Security
Services - SOC

KyndrylNot InNot InNot InRising Star

Product Challenger

Not InLogicalis

Not InNot InNot InLeaderLeaderLeaderLookout

Not InNot InContender

Not InNot InNot InMicrosoft

LeaderLeaderNot InNot InNot InNot InNEC

Not InNot InNot InNot InMarket Challenger

Not In

Netskope

Not InNot InLeaderNot InNot InNot InNextios

Not InNot InNot InContender

Not InNot InNTT Ltd.

Not InNot InNot InLeaderRising Star

Leader

Okta

LeaderNot InNot InNot InNot InNot InOne Identity (OneLogin)

Product Challenger

Not InNot InNot InNot InNot In© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

11

tProvider Positioning

Provider Positioning

Page 6 of 8

Identity and Access
Management (IAM)

Extended Detection
and Response (XDR)

Security Service
Edge (SSE)

Technical Security
Services

Strategic Security
ServicesManaged Security
Services - SOC

Open Systems

Not InNot InContender

Not InNot InNot InOpenText

Rising Star

LeaderNot InNot InNot InNot InOracleContender

Not InNot InNot InNot InNot InPalo Alto Networks

Not InProduct Challenger

LeaderNot InNot InNot InPerimeter 81

Not InNot InContender

Not InNot InNot InPing Identity

Product Challenger

Not InNot InNot InNot InNot InProofpoint

Not InNot InContender

Not InNot InNot InPwC

Not InNot InNot InLeaderLeaderNot InRedbelt

Not InNot InNot InNot InContender

Not In

RSA

LeaderNot InNot InNot InNot InNot In© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

12

tProvider Positioning

Provider Positioning

Page 7 of 8

Identity and Access
Management (IAM)

Extended Detection
and Response (XDR)

Security Service
Edge (SSE)

Technical Security
Services

Strategic Security
ServicesManaged Security
Services - SOC

SailPoint

Product Challenger

Not InNot InNot InNot InNot Insenhasegura

LeaderNot InNot InNot InNot InNot InService IT

Not InNot InNot InProduct Challenger

Not InNot InSkyhigh Security

Not InNot InProduct Challenger

Not InNot InNot InSONDA

Not InNot InNot InMarket Challenger

Not InMarket Challenger

SophosNot InProduct Challenger

Not InNot InNot InNot InStefanini

Not InNot InNot InProduct Challenger

Product Challenger

LeaderTCS

Not InNot InNot InProduct Challenger

Product Challenger

Not InTDEC

Not InNot InNot InNot InNot InContender

Thales

Product Challenger

Not InNot InNot InNot InNot In© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

13

tProvider Positioning

Provider Positioning

Page 8 of 8

Identity and Access
Management (IAM)

Extended Detection
and Response (XDR)

Security Service
Edge (SSE)

Technical Security
Services

Strategic Security
ServicesManaged Security
Services - SOC

TIVIT

Not InNot InNot InProduct Challenger

Not InProduct Challenger

Trellix

Not InProduct Challenger

Not InNot InNot InNot InTrend Micro

Not InLeaderNot InNot InNot InNot InT-Systems

Not InNot InNot InProduct Challenger

Not InLeaderUnisysMarket Challenger

Not InNot InNot InProduct Challenger

LeaderVersa Networks

Not InNot InLeaderNot InNot InNot In

VMwareNot InLeaderContender

Not InNot InNot InWipro

Not InNot InNot InProduct Challenger

Product Challenger

LeaderZscalerNot InNot InLeaderNot InNot InNot In© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

14

Introduction

Definition

Identity and Access
Management (IAM)

In this study,
the following
quadrants were
evaluated as main
focus areas for IPL
Cybersecurity –Solutions andServices 2023

Extended Detection andResponse (XDR)

Security Service Edge (SSE)

Technical Security Services

Strategic Security Services

Simplified Illustration; Source: ISG 2023

The year 2022 could be termed as tumultuousfrom a cybersecurity perspective; although
there was a decrease in data breach
incidents, the year saw significantly increased
sophistication and severity in the attacks. In
2022, enterprises increased their investment
in cybersecurity and prioritized relevant
initiatives to prevent attacks and improve theirsecurity posture. The continued learnings
from the 2021 attacks led to executives andbusinesses of all sizes and across industries
investing in measures to respond to and survive
cybersecurity threats and cyberattacks.
From an enterprise perspective, evensmall businesses understood the impact
of cyber threats and realized that they
are actively targeted and are highly
vulnerable to cyberattacks. This reinforced
the need for (managed) security services
and cyber resiliency services that would
enable businesses to recover and resume
operations quickly after a cyber incident.

Service providers and vendors are, therefore,
offering services and solutions that help inrecovery and business continuity.
From the perspective of the cybercriminals,
they began exploiting large-scale vulnerabilities,
such as Log4shell, and continued using
ransomware to disrupt business activities,
specifically targeting healthcare, supply chain
and public sector services.
These prompted businesses to invest incapabilities such as identity and accessmanagement (IAM), data loss prevention (DLP),
managed detection and response (MDR) andsecuring cloud and endpoints. The market
is shifting toward integrated solutions, suchas security service edge (SSE) and extended
detection and response (XDR), which leverage
the best tools and human expertise and areaugmented with behavioral and contextual
intelligence and automation to deliver asuperior security posture.

Managed Security Services - SOC© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

15

Introduction

Scope of the Report
In this ISG Provider Lens™ quadrant report, ISG
covers the following six quadrants for services/
solutions: Identity and Access Management(IAM), Extended Detection and Response (XDR),Security Service Edge (SSE), Technical Security
Services, Strategic Security Services andManaged Security Services (SOC), the latterof which is divided into Large Accounts andMidmarket quadrants.
Vendors offering Security Service Edge (SSE)
solutions are analyzed and positioned from a
global perspective, rather than by individual
regions, as the market is yet in the earlystages of maturity.
This ISG Provider Lens™ study offers IT
decision-makers:● Transparency about the strengths andweaknesses of the relevant software vendors● A differentiated positioning of suppliers bysegments (quadrants)● Focus on the regional market

Our study serves as the basis for making
important decisions about positioning, key
relationships and market entry considerations.
ISG’s consultants and corporate clients also
use the information in these reports to evaluate
their existing supplier relationships andpotential engagements.
Provider Classifications
The provider position reflects the suitabilityof IT providers for a defined market segment(quadrant). Without further additions, theposition always applies to all company sizes
classes and industries. In case the IT service
requirements from enterprise customers differ
and the spectrum of IT providers operatingin the local market is sufficiently wide, afurther differentiation of the IT providers byperformance is made according to the target
group for products and services. In doing so,
ISG either considers the industry requirementsor the number of employees, as well as
the corporate structures of customers andpositions IT providers according to their focus
area. As a result, ISG differentiates them, if
necessary, into two client target groups that are
defined as follows:© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

● Midmarket: Companies with 100 to 4,999
employees or revenues between $20 million
and $999 million with central headquarters
in the respective country, usually privately
owned.
● Large Accounts: Multinational companies
with more than 5,000 employees or revenue
above $1 billion, with activities worldwide
and globally distributed decision-making
structures.
The ISG Provider Lens™ quadrants are createdusing an evaluation matrix containing four
segments (Leader, Product Challenger, Market
Challenger and Contender), and the providers
are positioned accordingly. Each ISG Provider
Lens™ quadrant may include service providers
that ISG believes have strong potential to moveinto the Leader quadrant. This type of provider
can be classified as a Rising Star.
● Number of providers in each quadrant:
ISG rates and positions the most relevant
providers according to the scope of thereport for each quadrant and limits the
maximum of providers per quadrant to
25 (exceptions are possible).

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

16

Introduction

Provider Classifications: Quadrant Key

Product Challengers offer a product andservice portfolio that reflect excellent service
and technology stacks. These providers andvendors deliver an unmatched broad and deep
range of capabilities. They show evidence ofinvesting to enhance their market presence
and competitive strengths.

Leaders have a comprehensive product andservice offering, a strong market presence andestablished competitive position. The productportfolios and competitive strategies of Leaders
are strongly positioned to win business in themarkets covered by the study. The Leaders also
represent innovative strength and competitive
stability.

Contenders offer services and products
meeting the evaluation criteria that qualifies
them to be included in the IPL quadrant. These
promising service providers or vendors show
evidence of rapidly investing in products/
services and a follow sensible market approachwith a goal of becoming a Product or Market
Challenger within 12 to 18 months.

Market Challengers have a strong presencein the market and offer a significant edge
over other vendors and providers basedon competitive strength. Often, Market
Challengers are the established and well-known
vendors in the regions or vertical markets
covered in the study.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

Rising Stars have promising
portfolios or the market experience
to become a Leader, including therequired roadmap and adequate
focus on key market trends
and customer requirements.
Rising Stars also have excellent
management and understandingof the local market in the studied
region. These vendors andservice providers give evidence ofsignificant progress toward theirgoals in the last 12 months. ISG
expects Rising Stars to reach theLeader quadrant within the next 12
to 24 months if they continue theirdelivery of above-average market
impact and strength of innovation.

Not in means the service provider
or vendor was not included in thisquadrant. Among the possible
reasons for this designation:
ISG could not obtain enoughinformation to position thecompany; the company does
not provide the relevant service
or solution as defined for eachquadrant of a study; or the company
did not meet the eligibility criteria
for the study quadrant. Omission
from the quadrant does not imply
that the service provider or vendor
does not offer or plan to offer thisservice or solution.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

17

avv

ExtendedSuntin culpa
Detectionqui
andofficia deser
Response(XDR)
mollitanim laborum

Extended Detection and Response (XDR)

Who Should Read This Section
This report is relevant to companies across all
sectors in Brazil, aiming to evaluate vendorsof extended detection and response (XDR)
products designed to provide workspace
security, network security or workload security.
In this report, ISG highlights the current market
positioning of XDR product vendors working on
threat detection and response in enterprises in
Brazil and how each vendor addresses the key
challenges faced in the region.
Agility is key in threat detection and response,as the cybercriminal’s access time in theenvironment is proportional to the damage
caused. Thus, companies are looking at XDR
platforms with AI and automation tools todecrease the average time to detect andrespond to threats.

The constantly emerging threats, such as
new scams, new social engineering attacks
and new ransomware tactics, are concerningfor organizations. Vendors are investing
in integrating their XDR platforms withintelligence feeds, to enable the tool to act
against new threats.
Visual control of security, with dashboards, isincreasingly demanded by companies, as it
facilitates and simplifies the visualization ofdata, such as suspicious behaviors, protectedassets and detected threats.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

Information Security Directors should readthis report to understand how XDR solution
providers are upgrading to address new
types of attacks.

Data privacy professionals should read thisreport to understand the relative positioningof XDR solution providers and how they
assist in responding to data incidents.

Chief Technology Officers (CTOs)
should read this report to understand thecapabilities of XDR solution providers
and how they can help them with theircompany’s cybersecurity strategy.

Digital product professionals should readthis report to understand how XDR vendors
can help with product stabilization toincrease the safety of their customers.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

19

Source: ISG RESEARCH

Cybersecurity – Solutions and Services
Extended Detection and Response (XDR)

Brazil 2023

H

PORTFOLIO ATTRACTIVENESS

Fortinet

L

Check Point
CipherTrend Micro

Trellix

VMwareCybereason

Product Challenger

Palo Alto Networks

Kaspersky
IBM

Sophos

CrowdStrike

Microsoft

OpenText
Broadcom

Leader

GoCacheContender

Market Challenger

Cisco
Huge Networks

L

This quadrant evaluates
XDR solution vendorsthat provide softwareand services tocontinuously monitor
all endpoints andprovide full visibility.
They can analyze,
prevent and respond toadvanced threats.
David de Paulo Pereira

BluePexCOMPETITIVE STRENGTH© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

H

Rising StarCYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

20

Extended Detection and Response (XDR)

Definition
The XDR solution providers evaluated for thisquadrant are characterized by their ability toprovide a platform that integrates, correlates,
and contextualizes data and alerts fromvarious threat prevention, detection, andresponse components.
XDR is a cloud-delivered technology comprisingmulti-point solutions. It uses advanced
analytics to correlate alerts from multiple
sources, including weak individual signals toenable accurate detections. XDR solutions
consolidate and integrate multiple products
and are designed to provide comprehensive
workspace, network, or workload security.
Typically, XDR solutions aim to greatly improvethe visibility and context of the identified
threat across the enterprise. Therefore, thesesolutions include specific features including
telemetry and contextual data analysis,
detection, and response.

XDR solutions also comprise multiple
products and solutions integrated into a single
dashboard to visualize, detect and respond withsophisticated capabilities. High automation
maturity and contextual analysis provide
unique response capabilities customized to theaffected system and prioritize alerts based on
severity relative to known baseline structures.
Pure service providers that do not offer an XDR
solution based on proprietary software are notincluded here. XDR solutions aim to reduce
product dispersion, alert fatigue, integration
challenges, and operational overhead, and areparticularly well suited for security operations
teams that have difficulty managing a portfolioof leading-edge solutions or deriving value froma security information and event management(SIEM) or security, orchestration, automation,and response (SOAR) solution.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

Eligibility Criteria

1.

The XDR offering must be basedon proprietary software and noton third-party software

2.

An XDR solution needs to have
two main components: front-end
XDR and back-end XDR

3.

The front-end must have threeor more solutions or sensors,
including but not limited
to endpoint detection andresponse, endpoint protection
platforms, network protection(firewalls, IDPS), network
detection and response, identity
management, email security,
mobile threat detection, cloud
workload protection, and fraud
identification

4. The solution must provide

comprehensive and total
coverage and visibility of all
endpoints in a network

5.

The solution must demonstrateeffectiveness in blocking
sophisticated threats such asadvanced persistent threats,
as well as ransomware andmalware6.

The solution must utilize
threat intelligence, as well as
analyze and provide real-time
information about the dangers
emanating from the endpoints

7.

The solution should include
automated response capabilities

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

21

Extended Detection and Response (XDR)

Observations
XDR solutions employ advanced analytics toinvestigate alerts from multiple sources, fromweak individual signals to accurate threat
detection. These solutions are designed toprovide comprehensive security for spaces,
networks and workloads by integrating multiple
products into a single platform. The primary
goal of XDR solutions is to increase the visibilityof threats across an enterprise and provide
context to identified threats.
These solutions incorporate specificcapabilities, such as telemetry and contextual
data analysis, as well as detection and response
to enhance the custom capabilities of theaffected system. Contextual analysis is highly
automated and can prioritize alerts based on
severity relative to known baseline structures.
Most companies offer integrations with othersecurity tools and have built portfolios aroundendpoint detection and response capabilities.
Successful product offerings often take aplatform-based approach to be the leading
solution provider in the market.

There is a growing demand for XDR solutions
that can provide visibility across all assets
and promptly detect and respond to threats.
Metrics such as mean time to respond or
detect are now widely used in marketing efforts
for key players to differentiate themselvesfrom competitors.
From the 261 companies assessed for thisstudy, 19 have qualified for this quadrant, withseven being Leaders and one a Rising Star.

Broadcom
Broadcom introduces a solution that uses ML
and AI to offer a wide coverage of features,
including adaptive protection, threat defense,
firewall and intrusion prevention system andSymantec CloudSOC CASB.

CrowdStrike
CrowdStrike’s Falcon offers extensive
experience in endpoint detection and response,
cloud-native architecture for scalability andflexibility, real-time visibility and flexibility ofacquisition through different bundles, frombasic to the most advanced option.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

Trend Micro
Kaspersky’s Endpoint Security suite, withcentralized management capabilities, provides
advanced protection from cyberthreats,
including real-time behavioral analysis, ML andsignature-based scanning.

Trend Micro’s Vision One offers a converged
security approach, integrating multiple security
solutions into a single platform and unified
policy management.

Microsoft

VMware’s Carbon Black solution involves theuse of ML and AI for real-time threat detection
and response, as well as a native multicloudarchitecture that allows you to deploy andmanage multi-cloud environments.

Microsoft offers an integrated platform forthreat detection and response, which includes
Microsoft Sentinel and Microsoft Defender,
as well as Microsoft Defender for Cloud.
Microsoft’s constant innovation is a highlight inall the security solutions presented.

OpenText
OpenText acquired Micro Focus, bringing inimportant technologies such as AI categories,
application development and digital operations
management. The company’s ArcSight
Intelligence, with its XDR capabilities, offers
panel detection, integration and customization.

VMwareFortinet
Fortinet’s (Rising Star) FortiXDR platform offers
an integrated and extensible security approachwith AI and ML-driven threat detection. It
uses a Security Fabric concept that integrates
FortiGuard security services natively to provide
coordinated detection and enforcement acrossthe entire attack surface.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

22

Extended Detection and Response (XDR)
LeaderKaspersky“Kaspersky has a sophisticated XDR solution for IT/
TO protection and a portfolio of services ranging
from security education and threat intelligence tosolutions adhering to data sovereignty requirements
in on-premises or cloud environments.”
David de Paulo Pereira

Overview

Strengths

Kaspersky is an international privatecompany headquartered in Moscow,
Russia, with its holding company
registered in the U.K. and its dataprocessing infrastructure locatedin Switzerland. The company has
subsidiaries in 31 countries andhas some 4,000 highly qualified
specialists. Its solutions protect
about 240,000 corporate clients withperformance in advanced cloud native
endpoint protection EDR, XDR, MDR
and threat intelligence. Kaspersky
Latin America, headquartered in Brazil,
is a business entity registered in the
country since 2013 and a subsidiary of
the holding company Kaspersky Limited,which is headquartered in the U.K.

Advanced threat protection: Kaspersky XDR
collects data from multiple sources providing
a complete view with integration to existing
security tools providing unified visibility andcorrelation of security data through advanced
analytics and machine learning identifying
patterns and anomalies to improve threat
detection and incident response.
Centralized management and customizable
policies: The suite offers centralized
management capabilities, allowing one
to monitor and manage the security of
endpoints and devices with visibility into
security status and automated issue
remediation. It also allows for the creation ofcustomizable and tailored policies.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

Regional focus: With over 1,600 partners in
Brazil and 6,000 in Latin America, a regionalteam of over 130 employees, 64 of these in
Brazil, Kaspersky offers Incident Response,
SOC Management and Threat ResearchCenter services. These services provide
involve support in Portuguese and Spanish,ranging from user education to automatedawareness programs.

CautionKaspersky uses partners to serve thenational market and has a Loyalty programwith discount offers based on sales result
certifications. However, some partners offer
solutions from other manufacturers, which
may result in a sales process guided by thepartner’s criteria.

Kaspersky Transparency Centers:
The centers in Zurich, Madrid, Kuala Lumpur,
Rome, Singapore, Tokyo, Utrecht, Woburn(Boston Region) and São Paulo share
information about products, source code andperformance with partners and governments.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

23

Appendix

Methodology & TeamThe ISG Provider Lens™ 2023 – Cybersecurity
Solutions and Services report analyzes therelevant software vendors/service providers in
the Brazilian market, based on a multi-phased
research and analysis process, and positions
these providers based on the ISG Research™
methodology.

Information Services Group Inc. is solely
responsible for the content of this report.
Unless otherwise cited, all content, including
illustrations, research, conclusions, assertions
and positions contained in this report weredeveloped by, and are the sole property ofInformation Services Group Inc.

Lead Author:
David Pereira

The research and analysis presented in thisreport includes research from the ISG Provider
Lens™ program, ongoing ISG Research™
programs, interviews with ISG advisors,
briefings with services providers and analysis
of publicly available market information frommultiple sources. The data collected for thisreport represents information that ISG believes
to be current as of April 2023, for providers who
actively participated as well as for providers
who did not. ISG recognizes that many mergers
and acquisitions have taken place since thattime, but those changes are not reflected inthis report.

Research Analyst:
Gabriel Sobanski
Data Analysts:
Rajesh Chillappagari and Shilpashree N
Project Manager:
Donston Sharwin

The study was divided into thefollowing steps:

1. Definition of Cybersecurity –Solutions and Services market

2. Use of questionnaire-based

surveys of service providers/
vendor across all trend topics

3. Interactive discussions withservice providers/vendors on
capabilities & use cases

4. Leverage ISG’s internal databases& advisor knowledge & experience(wherever applicable)

5. Use of Star of Excellence
CX-Data

6. Detailed analysis & evaluation ofservices & service documentation
based on the facts & figures
received from providers & othersources.

7. Use of the following key
evaluation criteria:* Strategy & vision* Tech Innovation* Brand awareness andpresence in the market* Sales and partner landscape* Breadth and depth of
portfolio of services offered* CX and Recommendation

All revenue references are in U.S. dollars ($US)
unless noted.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

25

Author & Editor Biographies

AuthorAuthorDavid de Paulo Pereira

Gowtham Kumar Sampath

Lead Author

Assistant Director and Principal Analyst

David de Paulo Pereira is a seasoned
professional and lead author of several IPL
reports for the Brazilian market.
He has a track record of successful
executive experience in digitaltransformation, team management, andproject and service delivery. David has
excelled in complex environments suchas post-merger companies, establishinggovernance models, and standardizing
work methods and processes. He has
gained extensive experience in multiculturalenvironments, having worked in private,public, multinational, and family-owned
companies, both in Brazil and abroad.

David’s expertise includes a profoundunderstanding of Industry 4.0, such as
Cloud, Big Data, Analytics, and RPA. He isskilled in strategic planning, technologicalinnovation, portfolio management, andchange management. Before joining TGT/
ISG, David served as CIO and CTO for a
UK-based software company and held theposition of Executive Director responsible
for IT Transformation Practice at EY. He
also worked as CIO and CTO for global
companies like Solvay and Jakko Poyry.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

Gowtham Sampath is a Senior Manager
with ISG Research, responsible forauthoring ISG Provider Lens™ quadrant
reports for Banking Technology/Platforms,
Digital Banking Services, Cybersecurity
and Analytics Solutions & Services
market. With 15 years of market researchexperience, Gowtham works on analyzing
and bridging the gap between data analytics
providers and businesses, addressing
market opportunities and best practices.
In his role, he also works with advisors inaddressing enterprise clients’ requests
for ad-hoc research requirements within
the IT services sector, across industries.

He is also authoring thought leadershipresearch, whitepapers, articles on emerging
technologies within the banking sector
in the areas of automation, DX and UX
experience as well as the impact of data
analytics across different industry verticals.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

26

Author & Editor Biographies

Research Analyst

IPL Product Owner

Gabriel Sobanski

Jan Erik Aase

Research Analyst

Partner and Global Head – ISG Provider Lens™

Gabriel Sobanski is a research analyst at
ISG and is responsible for supporting andco-authoring Provider Lens™ studies on
ServiceNow Ecosystem, Oracle Ecosystem,
Salesforce Ecosystem, Microsoft Ecosystem,
MarTech Services, Cybersecurity Solutions
and Services, and SAP HANA Ecosystem
Services. He supports the lead analysts in
the research process and co-authors theglobal summary report with market trends
and insights. Gabriel also develops content
from a business perspective. He has been in
charge of his current role since 2021.

Before that, Gabriel worked as an IT
consultant, where he gained experienceand technical skills in quantitative andqualitative data collection, analysis, andpresentation. His areas of expertise include
industry, logistics, and market research.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

Mr. Aase brings extensive experiencein the implementation and research ofservice integration and management ofboth IT and business processes. With over
35 years of experience, he is highly skilled
at analyzing vendor governance trends andmethodologies, identifying inefficiencies incurrent processes, and advising the industry.
Jan Erik has experience on all four sidesof the sourcing and vendor governancelifecycle - as a client, an industry analyst,
a service provider and an advisor.

Now as a research director, principal analyst
and global head of ISG Provider Lens™,
he is very well positioned to assess andreport on the state of the industry and makerecommendations for both enterprises andservice provider clients.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

27

AboutOur Company
Methodology& Team& Research

The ISG Provider Lens™ Quadrant researchseries is the only service provider evaluationof its kind to combine empirical, data-driven
research and market analysis with thereal-world experience and observationsof ISG’s global advisory team. Enterprises
will find a wealth of detailed data andmarket analysis to help guide their selectionof appropriate sourcing partners, while
ISG advisors use the reports to validate
their own market knowledge and makerecommendations to ISG’s enterpriseclients. The research currently covers
providers offering their services acrossmultiple geographies globally.
For more information about
ISG Provider Lens™ research,please visit this webpage.

ISG Research™ provides subscription
research, advisory consulting andexecutive event services focusedon market trends and disruptive
technologies driving change in businesscomputing. ISG Research™ delivers
guidance that helps businesses
accelerate growth and create
more value.
ISG offers research specifically
about providers to state and local
governments (including counties, cities)
as well as higher education institutions.
Visit: Public Sector.
For more information about ISG
Research™ subscriptions, pleaseemail contact@isg-one.com,
call +1.203.454.3900, or visit
research.isg-one.com.

© 2023 INFORMATION SERVICES GROUP, INC. ALL RIGHTS RESERVED.

ISG (Information Services Group)(Nasdaq: III) is a leading global technology
research and advisory firm. A trusted
business partner to more than 900 clients,
including more than 75 of the world’s
top 100 enterprises, ISG is committed
to helping corporations, public sector
organizations, and service and technology
providers achieve operational excellence
and faster growth. The firm specializes indigital transformation services, including
automation, cloud and data analytics;
sourcing advisory; managed governanceand risk services; network carrier services;
strategy and operations design; change
management; market intelligence andtechnology research and analysis.

Founded in 2006, and based in Stamford,
Conn., ISG employs more than 1,600 digitalready professionals operating in more than
20 countries—a global team known for
its innovative thinking, market influence,
deep industry and technology expertise,
and world-class research and analyticalcapabilities based on the industry’s mostcomprehensive marketplace data.
For more information, visit isg-one.com.

CYBERSECURITY – SOLUTIONS AND SERVICES QUADRANT REPORTAUGUST 2023

28

AUGUST, 2023
REPORT: CYBERSECURITY – SOLUTIONS AND SERVICES© 2023 Information Services Group, Inc.
All Rights Reserved