Data Security Posture Management — What Does 'Best in Class' Look Like?

TechTarget and Informa Tech’s Digital Business Combine.TechTarget and InformaTogether, we power an unparalleled network of 220+ online properties covering 10,000+ granular topics, serving an audience of 50+ million professionals with original, objective content from trusted sources. We help you gain critical insights and make more informed decisions across your business priorities.Enterprise cybersecurity technology research that connects the dots.The emergence of Data Security Posture Management (DSPM) in early 2023, followed by major acquisitions by companies like IBM, Thales, and Palo Alto Networks, demonstrates industry recognition of the need for a more holistic approach to data protection.October 29, 2025COMMENTARYOmdia recently published a comprehensive Omdia Universe report on the Data Security Posture Management (DSPM) market. The report grouped 11 DSPM vendors under the rankings of Leader, Challenger, and Prospect, achieved through rankings against functionality, solution breadth, strategy, and execution, go-to-market approach and so on.In Omdia's assessment, there are four Leaders within the DSPM market: BigID, IBM, OpenText, and Thales.BigID delivers the broadest portfolio of capabilities overall, and Omdia rated it as best in class for market momentum. The vendor has grown from among the DSPM pioneers to become a significant player and can compete very effectively with other larger vendors. IBM was the first major brand to acquire DSPM capabilities when it purchased Polar Security in May of 2023. Fully integrated into IBM's Guardium suite and now in its second iteration, Guardium offers a very strong platform, augmented by IBM's wide and comprehensive cybersecurity portfolio. OpenText attained best in class scores for strategy and solution breadth, indicating a comprehensive, well-constructed set of technologies for a compelling proposition overall. After a degree of restructuring, the vendor now offers a well-integrated cybersecurity cloud platform.Thales achieved best in class ratings in core technology, market momentum, and vendor execution for an excellent overall result. Having bought Imperva in 2024, Thales integrates its DSPM capabilities into its CipherTrust data security platform, bringing data discovery, classification, data protection, and centralized management for keys and secrets into a single platform. Able to further leverage its existing identity and access management and hardware security module (HSMs) capabilities, Thales has grown strongly over recent years and now offers an industry-leading data security platform.The Challengers category in the Omdia Universe report includes five vendors: Concentric AI, Rubrik, Securiti, Sentra, and Varonis.Concentric AI, Securiti, and Sentra all originate from the original pioneering DSPM stable, and although they are not the largest of providers, all are achieving a good pace of growth in a competitive market. Concentric AI, for a smaller organization, delivers a comprehensive set of advanced posture management tools and services, for a top-tier solution breadth ranking overall. It has the flexibility and responsiveness to meet customer needs quickly and efficiently, and its momentum score provides a good barometer for this. Coupled with a strong focus on innovation and patent registration, Concentric AI has a competitive proposition that has enabled the vendor to achieve wins against bigger competition to build a growing reputation in the DSPM market. Securiti rated very commendably in this analysis, with an expansive DSPM proposition and a best in class ranking for its advanced capabilities. Across the other categories, it achieves some highly commendable results, given its smaller relative size against some of its competition, and Omdia expects the vendor will climb into the Leader category for future reports. Rubrik's DSPM largely stems from its acquisition of Laminar, which it has successfully integrated with its pre-existing backup and recovery portfolio. This enables the vendor to offer the proactivity of DSPM and the reactivity of remediation in the event of a breach. Rubrik rated very well for its advanced capabilities and achieved strong scores for strategy and innovation and market momentum. Some additions to its core technology portfolio would further increase its overall ratings.Sentra is another perhaps less well-known brand — although it is making moves to change that. Its size presents limitations in the overall breadth and scope of its solution, but the vendor compensates by adhering to a well-defined strategy with good innovation. Its scores across all categories indicate a well-balanced and efficient organization. Following more than 300% year-on-year growth and rapid Fortune 500 adoption, Sentra has surpassed $100 million in total funding, illustrating how well positioned it is to meet growing end-user demand for its data security solutions.Varonis is an experienced vendor in the data security space and has crafted its DSPM proposition from a data-centric point of view, with care and attention to map precisely against customer needs. In Omdia's assessment, it achieved top-tier status for strategy and innovation and scored well for its advanced features and solution breadth. Within the market prospects category are Proofpoint and Skyhigh Security. Proofpoint is the latest vendor to enter the DSPM market through its acquisition of Normalyze in October 2024. This acquisition was shrewd and carried through some brand equity from industry commentators. It is a good first step and positions the organization well for the next phase of development. The vendor has some areas to address across its overall portfolio, but it registered a top-tier status for advanced capabilities with some good overall ratings in other categories.Skyhigh Security recently increased its profile as a DSPM vendor. The organization scored well across the assessed areas and achieved best in class for its advanced capabilities and three top-tier ratings elsewhere. Omdia expects the vendor to become highly competitive if its current trajectory and momentum are maintained. For current purposes, although its portfolio looks admirable, its size and longevity result in a Prospect status — nevertheless, it is an organization to watch closely moving forward.The importance of protecting data cannot be overestimated, ignored, or neglected: there is no sign of the threat landscape reducing. Organizations of all sizes need to maintain maximum levels of vigilance to stop future attacks and data exfiltration. DSPM can help by offering a holistic view, but perpetrators are often skilled and determined. Insider threats should also be actively considered, with rigorous enforcement of least privilege access applied to restrict users to appropriate data only. Even then, measures to block unauthorized access or anomalous behavior must be constantly employed.  As a key driver, regulatory compliance has forced organizations to consider data security with much more scrutiny. DPSM provides tools such as data discovery, data classification, encryption, and access controls to ensure that the standards of protection around data defined by regulators can be adhered to. Ultimately, DSPM functionality offers visibility and control across diverse environments, enabling organizations to manage data sprawl, identify data exposure risks, and enforce consistent security policies.For the full report: Omdia Universe: Data Security Posture Management (DSPM) 2025.Read more about:Adam StrangePrincipal Analyst, Data Security, OmdiaAdam Strange is responsible for delivering a comprehensive analysis and insight program focused on data security within the Omdia cybersecurity research function, supporting vendor, service provider and enterprise clients.Adam brings comprehensive experience of the cybersecurity industry, having worked for a series of UK-based channel and global vendor organizations.2025 DigiCert DDoS Biannual ReportDigiCert RADAR - Risk Analysis, Detection & Attack ReconnaissanceThe Total Economic Impact of DigiCert ONEIDC MarketScape: Worldwide Exposure Management 2025 Vendor AssessmentThe Forrester Wave™: Unified Vulnerability Management Solutions, Q3 2025How AI & Autonomous Patching Eliminate Exposure RisksThe Cloud is No Longer Enough: Securing the Modern Digital PerimeterSecuring the Hybrid Workforce: Challenges and SolutionsCybersecurity Outlook 2026Threat Hunting Tools & Techniques for Staying Ahead of Cyber AdversariesYou May Also LikeCopyright © 2025 TechTarget, Inc. d/b/a Informa TechTarget. This website is owned and operated by Informa TechTarget, part of a global network that informs, influences and connects the world’s technology buyers and sellers. All copyright resides with them. Informa PLC’s registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. TechTarget, Inc.’s registered office is 275 Grove St. Newton, MA 02466.