The cybersecurity sector has experienced a historic wave of consolidation over the past 12 months, driven largely by the AI race and enterprise demand for broader security platforms.

But consolidation isn't happening only through mergers and acquisitions. IT leaders are also moving more security functions onto broader platforms from fewer vendors.

Cybersecurity companies see an opportunity in that shift. Alongside multibillion-dollar deals and acquisitions of specialized startups, companies including Check Point Software, Fortinet, Zscaler and Tenable are expanding the capabilities they can offer through broader platforms.

Meanwhile, the economics surrounding that expansion are getting more complicated. In October, the Nasdaq Composite fell 5.3%, its worst month since March 2025, as investors grew more concerned about massive AI spending and how quickly those investments will generate returns. The Nasdaq-100 lost more than $2 trillion in market value.

That doesn’t mean IT leaders should watch stock prices every day. But it does mean paying attention to how changing economics could affect cybersecurity vendors. Pressure to show returns on AI investments could influence how cybersecurity vendors spend, price and acquire — and increase their incentive to sell customers more products through a single platform.

The result is a shift showing the cybersecurity market consolidating in two ways: Vendors are buying and building broader platforms, while enterprises are concentrating more of their security spending with fewer providers.

Tenable earnings point to growing platform consolidation

One of the clearest signals of this new consolidation came from Tenable’s latest results. The company's Q3 2026 earnings showed revenue rose 9.5% Y-o-Y to $276.4 million. Its stock also gained about 40% in October, illustrating that the broader tech selloff didn't hit cybersecurity vendors uniformly.

More revealing is what the earnings call showed customers were buying.

Tenable One, the company's exposure-management platform, accounted for a record 59% of new business, up from 50% the previous quarter and 39% a year earlier. More than 5,000 customers now use the platform, and Tenable added 413 enterprise platform customers during the quarter.

Fortinet earnings show standalone tools moving onto broader platforms

Fortinet is seeing a similar pattern from a different corner of cybersecurity.

Its Q3 revenue increased 20% to $2.08 billion, while the value of deals exceeding $1 million jumped 51%, driven largely by U.S. enterprises.

But a particularly telling number appeared in Fortinet's prepared earnings remarks: Billings from its AI-driven Security Operations business grew 15% as existing customers increasingly consolidated standalone security tools onto Fortinet's broader platform.

Despite the strong quarterly results, Fortinet shares fell about 20% on Oct. 29 as investors focused on weaker-than-expected guidance. It was another reminder that strong demand right now doesn't eliminate questions about cybersecurity vendors' future growth and economics.

Check Point earnings show security spending moving beyond firewalls

Check Point Software’s Q3 results show how the product mix itself is changing.

Although overall revenue declined 1% to $670 million, security subscription revenue grew 11% to $339 million and now accounts for 51% of total revenue. Annual recurring revenue from email security, exposure management and AI security grew more than 38%, executives said during the Q3 earnings call.

The firm is bringing network, exposure management, AI and workforce security into a broader portfolio. CEO Nadav Zafrir summed up the strategy: “We’re no longer a firewall company, and we’re no longer a network security company.” 

Why is AI accelerating cybersecurity platform consolidation?

AI is adding urgency to consolidation by expanding what enterprises need to protect: models, agents, prompts, training data, AI-generated code and non-human identities.

BCG's August cybersecurity survey found 83% of IT cybersecurity leaders are increasing security spending as AI introduces new vulnerabilities and attack methods. But adding another vendor for every new risk can make an already complicated security environment harder to manage.

And vendors see this opportunity. At its October Investor Day, Zscaler outlined a broader platform spanning Zero Trust, data security, AI security and agentic security operations. It’s also using acquisitions, including SPLX, Symmetry Systems and SquareX, to add AI and data-security capabilities.

What does cybersecurity platform consolidation mean for IT leaders?

For enterprise leaders, moving more security functions onto fewer platforms can simplify contracts, integrations, dashboards and training, while shared data across products can improve visibility and threat response. But less complexity can mean more dependence.

The more of the security stack one provider controls, the greater the potential impact of its pricing and product decisions, as well as an outage, security failure or other disruption. In fact, Black Kite's 2026 Third-Party Breach Report identified risk concentration as a major contributor to cascading failures across organizations.

Vendor economics matter, too. And Check Point offers a timely example: The company is expanding into faster-growing security businesses while also raising firewall prices 12% to 20%, primarily in response to higher memory costs.

For IT leaders, the goal shouldn't necessarily be the fewest vendors possible. It's finding the point where the benefits of consolidation still outweigh the risks of dependence — while preserving enough negotiating and switching power if a vendor's pricing, strategy or performance changes.

How can IT leaders find the right vendor balance?

Treat cybersecurity consolidation as a portfolio decision, not simply a cost-cutting exercise. Identify overlapping products and capabilities that consume disproportionate time to integrate or maintain, then determine where consolidation can reduce complexity without creating too much dependence on one provider.

Make vendors prove the economics. Compare a platform's total cost with the products it would replace, including licensing, integration, administration and training. A bundle isn't a bargain if much of it goes unused.

And plan an exit before consolidating. Know what data can be exported, which integrations would have to be rebuilt and how operations would continue if a critical platform became unavailable, too expensive or technologically outdated.

Finally, watch where vendors are investing. Acquisitions, R&D priorities and new product launches can signal which capabilities vendors intend to bring onto their platforms — and where they'll try to capture more of your security spending.

Cybersecurity consolidation isn't just an M&A story anymore. It's happening inside the enterprise security stack.