Gartner Top 10 Security Consulting Services Companies Ranked By Revenues

Thousands of IT consulting firms offer security products and services. But which ones are the largest providers of security consulting services?

To answer that question, Gartner built a top 10 list of security consulting firms for 2016 based on annual revenues. But before we share the list, it’s important not to confuse it with managed security services revenues and associated capabilities. After all, Gartner’s Magic Quadrant for MSSPs in 2017 is strikingly different than the IT consulting list. The same goes for the Forrester Wave report for Top North America MSSPs. (Still, a handful of companies appear on multiple lists.)

Gartner Ranks Top Security Consulting Firms

Now, onto Gartner’s Top 10 Security Consulting Services Firms list based on 2016 revenues in the sector. The ‘recent moves’ commentary after each company is from MSSP Alert rather than Gartner.

1. Deloitte

  • Security Consulting Revenues: $2.857 billion in security revenues for 2016, up 14 percent from 2015)
  • Recent moves: Deloitte’s Canada wing in June announced a partnership to use LogRhythm’s Threat Lifecycle Management (TLM) technology in the MSSP practice.

2. EY

  • Security Consulting Revenues: $2.036 billion, up 8.2%
  • Recent moves: EY in June 2017 acquired Open Windows Identity, a cybersecurity services consulting division of Australia-based contract management software company Open Windows, for an undisclosed sum. The acquired firm became EY’s new APAC region Identity Management Centre of Excellence led by former Open Windows Identity CEO Simon Adler.

3. PwC


5. IBM

  • Security Consulting Revenues: $731 million, up 0.6%
  • Recent moves: In addition to security consulting, IBM plugs many customers into its X-Force Command Centers worldwide for ongoing cybersecurity monitoring. But X-Force recurring revenues are not to be confused with traditional IT project revenues.

6. Accenture

7. Booz Allen Hamilton

  • Security Consulting Revenues: $482 million, up 2.1%
  • Recent moves: Booz Allen Hamilton and Splunk in July 2017 unveiled a cyber threat intelligence service that Booz Allen offers to its end-customers.

8. HP Enterprise

9. Optiv Security

  • Security Consulting Revenues: $373 million, up 15.5%
  • Recent Moves: KKR, the big private equity firm, acquired Optiv Security in late 2016. The purchase price was never publicly disclosed — but we hear the figure was $1.9 billion, according to our ChannelE2E sister site.

10. BAE Systems

  • Security Consulting Revenues: $290 million, up 14.2%
  • Recent Moves: BAE also appears on the Forrester Wave list for top MSSPs in North America.

That’s the overall list. We’ll be sure to update this blog when the 2017 list surfaces sometime in mid-2018.


Return Home



    Steve Tedaon:

    Hey, great and appreciable list but i think you just skipped Clavax Technologies in this list. It is one among the leading IT firms in Sydney offering dominant security against cyber attackers and hackers.

      Joe Panettieri:

      Hey Steve: Thanks for your note and readership. Gartner created the listed based on annual cyber revenues. Let me know if you think Clavax outpaces the top 10 companies on the security revenue front. Also, are you associated with Clavax?


    Prem Iyer:

    Joe, the blog mentions it will be updated in mid-2018 with 2017 #s. Now that we are in Feb 2019, what is the most recent update you have to these numbers?



    Joe Panettieri:

    Prem: I’m guilty as charged. I’ll strive to pull together a follow-up in the next few days, and update this comment with a link to the new coverage when it’s ready.


    Hi Joe, Any update on this?


    Chloe Harris:

    Thanks for the list, John. My company Digital Maelstrom ( is a small business that provides security as well, and we like to keep up with other the successes of other security firms as well.
    Will there be an updated list soon for 2019 (or 2018)? It would be interesting to see which companies are in the Top Ten in recent years.

    Joe Panettieri:

    All: Thanks for nudging me. Got tied up at IT conferences. I will try to pull together numbers in days ahead, and update this comment trail with a 2019 link so that I don’t look like such a slacker. PS – UPDATE: Still have not seen the 2019 numbers.

    Anthony Nguyen:

    Joe…Do you have an updated list with 2018 Revenue numbers?


    Joe Panettieri:

    Sorry I don’t have it on hand. But I’ll poke around post-Black Hat conference for you.

    Anthony Nguyen:

    Joe…If you can give me updated revenue (2018 numbers) for Deloitte, E&Y, PwC, KPMG, IBM, that would be great (I’m looking for top 5 based on 2018 Revenue).


    New York Consultants:

    Hey very cool site!! Man .. Excellent .. Amazing .. Ill bookmark your web site and take the feeds alsoI am happy to find so many useful info here in the post, we need work out more strategies in this regard, thanks for sharing. .

    IT Consulting Services in USA

    Frank Haroldnen:

    Joe, can we assume we will not get any more updates on these numbers?

    Joe Panettieri:

    Hi Frank: Thanks for the note. Sorry we haven’t had a chance to revisit this. I will poke around for 2020 numbers but can’t guarantee I’ll find updated data.

    Jeffery Walker:

    Joe, is there another link where I can take a look at 2021 top security consulting firms

    Parker Mathew:

    Thanks for sharing top consulting firms with us. Can you share the latest firms list of 2022-23?

Leave a Reply

Your email address will not be published.