Knowledge Hub

India’s cybersecurity market is on a sustained growth trajectory with no signs of plateauing. According to IDC’s Worldwide Security Spending Guide (v1,2026), total security spending in India across hardware, software, and services is projected to grow from $3.2 billion in 2024 to $6.2 billion by 2029 at a strong 14.4% CAGR over five years. Software and hardware are the fastest-growing segments, while services, already the largest piece of the pie, continues to expand at a steady clip. This isn’t budget inflation. It reflects a fundamental shift in how Indian enterprises are treating security: less as a cost center, more as a strategic capability. The scale of investment signals that CISOs are finally getting the boardroom backing to move beyond reactive posturing.

As organizations continue to adopt encrypted applications and cloud-based services, SSL/TLS interception has become an important security control. It enables security teams to inspect encrypted traffic for malware, data exfiltration, and policy violations that would otherwise remain hidden. However, implementing SSL interception across an enterprise is often more challenging than it appears.

One of the biggest concerns is the impact on users. Improperly planned deployments can result in certificate warnings, application failures, and degraded user experience. The challenge becomes even greater when dealing with non-domain-managed devices and browsers that may not trust enterprise-issued certificates.

For two decades, Cyber Threat Intelligence (CTI) meant one thing: collect indicators of
compromise (IOCs) malicious IPs, file hashes, phishing domains feed them into a SIEM, and
hope the list was updated before the next attack used them. It was intelligence built on
autopsy. A breach happened somewhere, researchers reverse-engineered it, and the
resulting signatures were shipped to everyone else as a warning of what had already
occurred. That model worked reasonably well when attackers were slow, human-paced, and
reused infrastructure long enough for defenders to catch up.

When organisations talk about cybersecurity, the conversation often starts with endpoint protection, identity, firewalls, SIEM platforms and increasingly, AI. Yet sitting underneath all of these technologies is a security asset that is frequently overlooked: the network itself.

Why mobile policy has become a CISO’s decision — and why DPDP makes deferring it expensive

For most Indian enterprises, the majority of daily work now happens on a phone: approvals, customer records, messaging, increasingly AI assistants. Adoption ran ahead of governance. Mobile was onboarded as a convenience channel and never reclassified as primary infrastructure, so it inherited neither the control rigour of the laptop estate nor the scrutiny of the data centre.

The cybersecurity landscape is changing: the attacker behind the screen is often not a human anymore; it’s an AI agent. Businesses are noticing this shift and are pouring money into cybersecurity, with India’s cybersecurity spending projected to reach US$4.4 billion by 2026. Cybersecurity is evolving and growing, but not necessarily at the speed of AI. Security strategies must now be built for a new reality where non-human adversaries are becoming pervasive.

Cybersecurity is entering a new chapter, one where identity is no longer simply a layer of access control, but the foundation for securing people, applications, data and increasingly, machines and AI agents.