DSPM vendors
We list 22 companies active in data security posture management, and 5 of them have it as their main focus. 6 are public, 6 are owned by another company and 10 are private. Most are based in the United States (18). The oldest, Microsoft, was founded in 1975. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).
By countryUnited States 18
Companies focused on data security posture management
5 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
 Varonis Varonis provides data security software that protects data across cloud, SaaS and on-premises environments. | Miami, United States | 2005 | Public, VRNS | $623.5m (FY2025) | |
 BigID BigID provides a data intelligence platform for discovering, classifying, and governing enterprise data and AI. | New York City, Israel | 2016 | Private | ||
 Cyera Cyera provides a data security platform that discovers and protects sensitive data across cloud environments. | New York, United States | 2021 | Private | ||
 Securiti Securiti provides a platform for data security, privacy, governance and compliance across hybrid multicloud environments. | San Jose, United States | 2018 | Part of Veeam | ||
 Sentra Sentra provides data security solutions to discover and protect sensitive data from AI applications. | New York, United States | Private |
Also active in data security posture management
17 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
 Microsoft Microsoft sells software, cloud services, hardware, and gaming products. | Redmond, United States | 1975 | 228,000 staff | Public, MSFT | $331.8bn (FY2026) |
 Palo Alto Networks Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats. | Santa Clara, United States | 2005 | 13,900 staff | Public, PANW | $11.5bn (FY2026) |
 Zscaler Zscaler provides a cloud-native zero trust cybersecurity platform that securely connects users, devices, and applications. | San Jose, United States | 2007 | Public, ZS | $3.4bn (FY2026) | |
 Commvault Commvault provides a cloud-native platform for data security, identity resilience, and cyber recovery. | Tinton Falls, United States | 1996 | Public, CVLT | $1.2bn (FY2026) | |
 Netskope, Inc Netskope provides cloud security and networking services for organisations. | Santa Clara, United States | 2012 | Public, NTSK | $709.0m (FY2026) | |
 Cyberhaven Cyberhaven provides a data security platform that traces data lineage to protect information across human and AI workflows. | Austin, United States | Private | |||
D Data & More Data & More is a Danish software company founded in 2016. | Copenhagen, Denmark | 2016 | Private | ||
 Forcepoint Forcepoint provides data security software that controls how AI applications and agents access sensitive information. | Austin, United States | 1994 | Owned by Francisco Partners | ||
 Imperva Imperva is a cybersecurity company that provides application security and data security. | San Mateo, United States | 2002 | Owned by Thales | ||
 Opaque Systems Provides a trust layer that lets organisations run AI on sensitive data with hardware-enforced governance and verifiable proof. | San Francisco, United States | Owned by Anthropic | |||
 Orca Security Orca Security provides an agentless cloud security platform that scans workloads from the cloud control plane rather than by installing agents. | Israel | 2019 | Private | ||
 PII Crawler PII Crawler scans files, network shares and email for personal data on your own hardware. | Vancouver, Washington, United States | 2023 | Private | ||
 Siberson Siberson provides data security software for discovering, classifying, preventing loss of and monitoring sensitive data. | Amsterdam, Netherlands | Private | |||
 Veeam Veeam provides data resilience, security, and AI trust solutions for hybrid cloud environments. | Seattle, United States | Private | |||
 Wiz Wiz provides a cloud and AI security platform that connects code, cloud, and runtime for risk reduction and threat response. | New York City, United States | 2020 | Part of Google | ||
 Cohesity Data security and backup platform with immutable backups, threat detection and ransomware recovery, protecting more than 1,000 workload types. | Santa Clara, United States | Private | |||
 Proofpoint Proofpoint provides cybersecurity solutions to protect people, data, and AI across email, cloud, and collaboration tools. | Sunnyvale, United States | 2002 | Owned by Thoma Bravo |
Recent deals in data security posture management
All data security posture management dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.