The email security market has seen renewed revenue growth in 2017 and further growth in 2018. This has been driven by continued growth and innovation cyber threats, increasing use of mobile devices and Bring Your Own Device (BYOD, customers migrating rapidly to the cloud, shortage of skilled security professionals, and multiple compliance requirements for data privacy regulations.
In the last few years the complexity and volume of threats have increased significantly. Email-based threats have become big business targeting specific verticals as well as individuals within organizations. In particular, there has been an increase in sophisticated and highly targeted email borne attacks. These include Business Email Compromise (BEC) and Email Account Compromise (EAC). Many attacks use social engineering techniques. Perpetrating malwareless attacks, hackers in the last year have innovated in identity deception, impersonation, including external customers and brand names with phony URLs and header domain in the email. The continued growth and innovations in cyber attacks has been costly for organizations.
There is an increasing number and diversity of endpoint devices. Endpoint devices include desktop PCs, notebook PCs, tablets, smartphones, and virtual desktops. Endpoint device growth is driven by mobile devices, in particular, smartphones. More mobile users accessing email outside of their organization’s network increases risks and requires more security.
The most significant trend in the email security market is the acceleration of organizations migrating to the cloud. Customers are adopting cloud-based mailbox services and migrating and augmenting their email security to the cloud from on-premises appliances. This adds new levels of complexity to the security. Migration to cloud-based services moves the service outside of an organization’s security perimeter and potentially opens the organization up to more frequent and easier cyber-attacks. Microsoft Office 365 is the dominant cloud email service. Many vendors offer robust email solutions which augment Office 365.
Email security vendors are offering more automation to support the shortage in skilled security professionals. Data privacy regulations, such as General Data Protection Regulation (GDPR) in the EU, drive the need for tools to meet compliance requirements and local data centers. Organizations are looking for integrated solutions that enable them to consolidate vendors and increase operational efficiencies while gaining stronger, comprehensive security. In such a competitive environment, email security vendors need to differentiate.