Analyst firm Frost & Sullivan released its first Frost Radar™ for the Enterprise Risk Mitigation and Management (ERMM) category in July 2026 – platforms that combine threat intelligence, attack surface management (ASM), and digital risk protection (DRP) into a single solution. More than 30 vendors that identified themselves as ERMM providers were considered for evaluation, but after Frost & Sullivan’s strict methodology, only 15 companies made it into the final ranking, including Check Point and Rapid7.
Why the New ERMM Category Emerged
According to Frost & Sullivan, today’s risks can no longer be addressed in isolation. Physical, digital, operational, financial, and geopolitical threats are increasingly converging, making point solutions insufficient.
The report also highlights the growing importance of geopolitical risk and third-party supply chain risk intelligence, as well as the pressure of regulations on how organizations prioritize security operations. A dedicated section addresses AI – security teams are facing AI-powered threats, while also deploying AI within their own platforms as a force multiplier, ideally through a “human-in-the-loop” model that preserves human control over automated response.
Check Point: Visionary Leader with a Focus on Automated Remediation
Check Point earned the highest score of all 15 vendors in this Frost Radar – an Innovation Score of 4.30 and a Growth Score of 4.05.
Frost & Sullivan credits Check Point for not building ERMM solely on visibility and alerting, but on measurable risk reduction. The platform combines threat intelligence from ThreatCloud, large-scale telemetry, and evidence-driven analytics, enabling it to correlate external threats, organizational exposures, security control weaknesses, and real-world adversary behavior into contextualized insights.
Acquisitions played a key role in this growth – Cyberint and Veriti expanded the company’s threat intelligence, exposure management, and automated remediation capabilities, while the more recent acquisition of Cyclops strengthened cyber asset ASM and asset visibility. As a result, Check Point can automate mitigation across enterprise security environments without disrupting operations, with integrations into SIEM, SOAR, and ticketing tools.
Frost & Sullivan also offers recommendations for where Check Point should go next: streamline workflow management across its growing portfolio (particularly for non-technical teams), expand governance reporting for boards, regulators, and insurance stakeholders, and continue investing in AI explainability and transparency around automated decisions – trust in AI remains a key concern for enterprise customers.
Rapid7: An Innovator Pushing GRC Toward Continuous Risk Management
Rapid7 is among the five vendors that, according to Frost & Sullivan, keep pace with market leaders in solution development, platform scalability, and leveraging megatrends such as AI integration and cross-domain threat visibility. The report notably points out that translating this vision into tangible growth could move Rapid7 into the Visionary Leaders category in the future.
Rapid7’s current activities support this trajectory – during 2026 the company expanded its Exposure Command portfolio and launched a Cyber Governance, Risk & Compliance (GRC) program, shifting governance from one-off audits to continuous risk management in enterprise environments.
According to Frost & Sullivan, the ERMM market is currently taking shape in response to the fact that traditional, siloed security tools are no longer sufficient to address the complexity of today’s risks. Of the 15 vendors that made it through this study’s rigorous screening, SecTec’s portfolio includes two – Check Point, which earned the highest rating in the entire ranking, and Rapid7, which is actively moving toward category leadership.
If you’re interested in how these platforms can help manage risk within your organization, take a look at our vendor portfolio at Vendors – SECTEC or get in touch with us.
Source: Frost Radar – Enterprise Risk Mitigation and Management Platforms, 2026Stiahnuť
