Russian information security market 2024. TAdviser Overview

The information security (IS) market in Russia has undergone significant changes after the departure of foreign vendors. Domestic companies began to actively develop, increase their market shares, and the main driver of industry growth was large corporations and government agencies that were interested in Russian solutions in the wake of import substitution of Western products.

What trends influenced the market in 2023 and 2024, what problems vendors face and what cyber threats customers have to reflect, whether AI will change the field of information security and how - in a new TAdviser review, which we prepared together with market participants.

The emergence of new solutions, the active study of regulatory legislation, the expansion of interaction in the professional community - all these are the basic milestones of 2023.

In 2023, the Russian information security market continued to grow steadily and remains one of the most dynamically developing segments of the IT sector in Russia. According to TAdviser, the volume of the Russian information security market increased by 25% and reached 265 billion rubles.

The growth of the market was stimulated by an increase in the number of cyber attacks and tightening responsibility for sensitive information leaks, import substitution after the departure of foreign vendors, support for the IT industry and the information security segment as a whole. Business relied on security and increased budgets for information security.

In 2024, the process of market transformation continues. Among the trends, it is possible to distinguish the formation by vendors of full-fledged ecosystems to provide information security, which are "turnkey" introduced into the customer's circuit in order to "cover" his requirements as much as possible. Ecosystems allow you to increase the effectiveness of protection and work in the same window with the vendor, and the demand for this option to ensure the protection of the organization began to grow.

Domestic business has become more demanding to obtain a practical result in the field of its cyber security and is increasingly focused on the use of technologies that provide it. Market participants record a steady increase in demand for products and technologies that allow them to effectively identify the actions of hackers in the infrastructure and counter their attacks. And also on autopilot products in the field of cybersecurity: over the past year, this interest has moved to the practical plane - the first experiments using such technologies demonstrated their success in identifying professional ART groups in automatic mode.

According to preliminary estimates by TAdviser, the dynamics of the Russian information security market in 2024 will be comparable to the results of 2023. Analysts expect growth of 20-25%. As a result, the market volume may reach 318-331 billion rubles.

TAdviser has prepared a new rating of the 100 largest Russian companies operating in the field of information security. He included vendors and integrators of information security solutions, as well as distributors of such products. The rating is built on the basis of questionnaires and official reporting of companies.

Kaspersky Lab again became the leader in the rating. At the end of 2023, the revenue of the Russian legal entity of the company reached 47.7 billion rubles, an increase of 31%. The second place was taken by Gazinformservice, the third - Softline.

The total revenue of all participants in the rating exceeded 376 billion rubles. The total dynamics compared to 2022 was 45.9%.

Over the past two years, companies have increased their information security budgets, according to some estimates, by 15-20%. This is due to the rise in price of vendors' products, and the need for customers to purchase innovative technologies.

Customers today pay special attention to security. In particular, for the introduction of a secure development pipeline into the life cycle of products, the presence of the product in the register of domestic software and the availability of certificates from FSTEC and the FSB of Russia. The level of internal competence of customers has also grown. Increasingly, vendors are receiving requests for specific products and works that cover certain needs of the company. In addition, customers are ready to outsource more and more tasks, as far as legislation allows, which seriously increases the requirements for contractors in terms of information security.

Companies began to pay more attention to the availability of guarantees that the manufacturer will not disappear from the market, will continue to systematically develop the product and support the proposed solutions. Vendors that can provide such guarantees have an advantage in the market. It is also important for customers to integrate with other large Russian solutions, the presence of secure cloud storage located in Russia, an integrated system for protecting physical and virtual desktops, a powerful system for protecting against DDos attacks, as well as trainings for training information security specialists. These factors can become key when choosing a solution. In a more advantageous position are manufacturers who can offer the widest set of functions - it is more likely that the customer will find what he needs.

According to the InfoWatch Group of Companies expert analytical center, hacker attacks remain the main cause of information leaks - their share in the total volume of leaks in Russia in 2023 amounted to 82.7%. The main threat to industrial infrastructure (APCS) is malware, namely ransomware Trojans and spy Trojans, which account for 80% of all known hacker attacks. Moreover, more and more often these attacks are ordered by a third party.

The SearchInform company conducted a study of the information security level in companies and found out that the most urgent threat for many is information leaks due to the fault of an internal violator. 66% of companies from various fields face such incidents: IT, industry, transport, retail, healthcare, as well as the oil and gas and public sector. Companies are forced to consider such a threat as one of the priorities.

Positive Technologies notes that ransomware (57%) and spyware (23%) stand out among malware, the share of which has increased compared to 2022. Social engineering was used in 2023 in 45% of successful attacks on organizations, while there is an increase in its use as an attack method - in the first quarter of 2024, the figure was 52%.

Among the current threats, experts name unprecedented DDOS attacks that break or slow down business processes, theft of databases and significant commercial documents, deepfakes of various levels. In the future, the threats of using quantum computing to hack systems are visible.

Analytical center TAdviser has prepared a new Map of the Russian information security market (IS). It marks over 250 domestic companies-developers of products and services in the field of information security, as well as suppliers of such services. During the preparation of the map, the company's solutions were segmented into 43 categories in 4 main groups: "Infrastructure Protection," "Monitoring, Research and Analysis," "Data Protection" and "Services and Services."