The 2024 Gartner Hype Cycle for Data Security was recently released and provides an insightful look into the ongoing evolution of the exciting Data Security Posture Management (DSPM) category in the eyes of industry analysts.
#TLDR – More to come for DSPM. According to Gartner, DSPM is seen as a transformational innovation. However it remains in its embryonic stage, with broad adoption near, demonstrating how big the market can be given the growth in the vendors in this space. The definition for DSPM has also been tweaked further, moving away from the shadow data fascination of last year to refocus on the intersection of data and identity. It’s also noteworthy that despite significant industry shifts and acquisitions, some prominent cloud security platform players have yet to make a significant impact in this space. At the same time, consistent recognition of the pioneers in this space underscores their sustained innovation and leadership.
The Maturation of DSPM: What’s Changed?
A Tight Focus on Identity Access
The 2024 Hype Cycle definition of DSPM focuses on DSPM’s role in alerting organizations to inappropriate access or flow of data to destinations, a cornerstone of data security posture. Symmetry has led the way in this respect by providing advanced monitoring and alerting mechanisms that ensure data remains secure as it moves across platforms by identities. By developing robust systems to visualize data flow and contrast to access permissions, Symmetry Systems has been ahead of the curve in offering this critical capability.
A Broadened Scope – more than just Cloud.
The definition in this year’s Hype Cycle broadens the scope of DSPM to emphasize comprehensive (note 1) data discovery, classification and protection, not just across cloud platforms but across all storage platforms and services —not just the cloud. This broadening highlights DSPM’s growing importance in hybrid environments. Symmetry has been a pioneer in this area from the start, offering data-centric security solutions that go beyond cloud boundaries to protect all types of data, regardless of location.
Highlighted Importance of Data Lineage
The increased emphasis on tracking data lineage—referred to at Symmetry as data flow—is another vital aspect in 2024. This capability is crucial for maintaining consistent data categorization and classification as data flows through complex architectures. We have long recognized the significance of data flow, offering real-time visibility into data movement across both structured and unstructured formats. Their early adoption of advanced data flow mapping sets us apart from competitors, ensuring consistent data protection through every stage of its lifecycle.
The Role of Regulation
The rise of international regulations is called out for the first time as a driver behind the need for DSPM. The 2024 analysis emphasizes DSPM’s role in providing for real-time visibility and data flow analysis, allowing organizations to respond more swiftly to potential regulatory concerns. Symmetry Systems was quick to align its technology with regulatory requirements, providing organizations with the ability to respond swiftly to compliance needs. Their innovation in real-time data flow analysis ensures businesses can mitigate potential regulatory issues before they become critical.
The impact of AI Adoption
The 2024 analysis acknowledges the role of AI and machine learning in creating potential ad hoc data repositories, highlighting the need for DSPM to address risks associated with these advanced technologies. As AI and machine learning introduce new complexities through ad hoc data repositories, DSPM must evolve to address these risks. Symmetry Systems has been proactive in anticipating these challenges, integrating AI-driven capabilities to discover and protect data, even within rapidly evolving and dynamic environments. This forward-looking approach positions Symmetry Systems as a leader in securing data in AI-influenced infrastructures.
Integration into the Broader Ecosystem
One of the ongoing challenges of DSPM in 2024 is integration with existing security stacks. Symmetry Systems has long understood the importance of seamless integration, focusing on creating solutions that easily interface with an organization’s existing tools. This has enabled faster deployment and enhanced the overall security posture for their clients, solidifying their leadership position in DSPM.
Time to Value is important
The 2024 analysis emphasizes time to value as a critical factor, with many DSPM solutions taking days to scan infrastructure. Symmetry Systems has addressed this issue with more efficient scanning methods that allow for quicker insights and actionable updates. This efficiency has made Symmetry a trusted choice for organizations needing rapid data security evaluations without compromising thoroughness.
The Elephant in the Room: Where Are the Big Platforms?
Despite their recent strategic moves, some of the biggest names in cybersecurity—namely Wiz, CrowdStrike, and Palo Alto Networks—remain absent from the DSPM section of the Gartner Hype Cycle. This is particularly surprising given their recent acquisitions aimed at bolstering their positions in this space:
- Palo Alto Networks’ Acquisition of Dig Security: Dig Security, was acquired by Palo Alto Networks in a move to strengthen their DSPM offerings. However, despite this acquisition, Palo Alto Networks has yet to make a notable appearance in the DSPM section of the Gartner Hype Cycle, suggesting that the integration of these capabilities is still a work in progress.
- Rubrik’s Acquisition of Laminar: Rubrik’s early acquisition of Laminar aligns with its broader strategy to enhance its cloud security offerings. Yet, Rubrik’s absence from the DSPM category in the Hype Cycle indicates that their DSPM capabilities may still be in the early stages of development.
- CrowdStrike’s Acquisition of Flow Security: CrowdStrike’s acquisition of Flow Security, a company specializing in data flow analysis, was a significant move into the DSPM arena. However, like the others, CrowdStrike has yet to be prominently featured in the Gartner Hype Cycle for DSPM, reflecting the time needed to integrate and mature these capabilities.
Symmetry Systems: A Consistent Pioneer in DSPM
One of the most consistent names mentioned in the DSPM space by Gartner has obviously been Symmetry Systems. Recognized first in the 2022 Cool Vendor report for its innovative approach to DSPM, Symmetry Systems has continued to feature prominently in each DSPM iteration of the Gartner Hype Cycle, and other Gartner research like Invest Implications: Innovation Insight: Data Security Posture Management, Transformational Innovations in Security, Innovation Insight: Data Security Posture Management, and most recently the 2024 Gartner® Peer Insights™ Voice of the Customer for Data Security Posture Management report.
This consistent recognition highlights Symmetry Systems’ sustained leadership and innovation in the DSPM space.
Looking Ahead: The Future of DSPM
The Gartner Hype Cycle for 2024 illustrates that while DSPM remains in its early stages, the technology is rapidly evolving. The DSPM market remains fragmented, with many early-stage vendors leading the charge, rather than the larger platforms. This fragmentation poses challenges for organizations seeking a comprehensive and unified approach to DSPM. The absence of some major players could be temporary as they continue to integrate their newly acquired technologies and refine their DSPM offerings. Meanwhile, vendors like Symmetry Systems, who have consistently innovated and maintained a strong presence in the DSPM space, are leading the way and driving adoption.
As the market matures, we may see further consolidation, but for now, businesses must navigate a landscape of diverse capabilities and approaches.
As DSPM continues to mature, organizations must stay informed about the latest developments and carefully evaluate their options. The next few years will likely see significant shifts in the market, with early movers potentially solidifying their lead, and established giants finally making their mark.
For organizations, the key takeaway that Gartner recommends is to remain agile—invest in DSPM solutions that not only address current needs but also offer the flexibility to adapt as the market and technology landscape continue to evolve. As DSPM becomes increasingly integral to managing data security and compliance in complex, hybrid- and multi- cloud environments, staying ahead of the curve will be essential for maintaining a strong data security posture
- Gartner, Hype Cycle for Data Security, 2024, Andrew Bales, 29 July 2024
GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and HYPE CYCLE is a registered trademark of Gartner, Inc. and/or its affiliates and are used herein with permission. All rights reserved.
Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
Notes:
Note 1: Interestingly, the 2024 Hype Cycle no longer explicitly mentions semi-structured data as a distinct data category. While the 2023 analysis emphasized the importance of classifying data across “structured, semistructured and unstructured formats,” the 2024 version simplifies this to just structured and unstructured data. This shift is indicative of how modern data processing technologies blur the lines between these categories.
