Toby Weiss, senior vice president and general manager of CA's security business, told ZDNet Australia on Tuesday that there are far too many security vendors and consolidation is inevitable over the next three to five years.
"The market is incredibly fragmented. I was told we are up to 700 different security solutions, which is daunting for customers to keep up with. Even if they meet with two different vendors a day it would take them an entire year including weekends," said Weiss.
That view is echoed by Michael Warrilow, Director of Sydney-based security consultancy Hydrasight, who said CA and Symantec seem to be emerging as the front runners in providing a "security software suite".
"There is no doubt that there are far too many security vendors out there. Every man, dog and venture capitalist has been investing in them over the past few years. In a recent US security conference there were literally 700 vendors but many of those are going to disappear or get gobbled up," Warrilow told ZDNet Australia .
According to CA's Weiss, the consolidation will be positive for enterprises because they will not have to deal with a large number of point solutions and will have less trouble integrating their products together.
"In the last few years customers have not been able to keep up with that number of point solutions and there are not enough standards for [the point solutions] to work with each other very well.
"In three to five years customers will probably be looking at one or two vendors to help them manage their security product suite. Similar to the networking systems management today where you would look at maybe IBM or BMC -- but you wouldn't look at 700 different vendors," said Weiss.
But this view is slammed by Hydrasight's Warrilow, who argues that consolidation does not make integration issues disappear.
"Just because [smaller companies] get gobbled up it doesn't mean the situation is any better. Instead of buying from 20 vendors you are buying 20 products from one vendor," said Warrilow, who pointed the finger at Symantec for being guilty of such practices.
"Symantec has bought 25 companies over the past few years... it has done a pretty poor job of integrating the products it has bought. Consolidation in terms of the number of vendors does not mean the products are any better integrated and customers have any less of an issue in terms of making them work," added Warrilow.








I agree with the view expressed that the likes of CA and Symantec have done a lousy job as well as a dis-service to the users of products they buy up in order to destroy competition.
Take VET for example. VET has protected our servers from viruses for many years with no problems.
Since CA bought them out they have acted to progressively exploit VET's good technical work and rip off their customers.
Their latest ploy has been to de-commit the support of servers for the VET product that we've been using for years.
Instead they're introducing a much more expensive version that does the same job at a far more expensive price.
They seem to think (wrongly) that business are the only people who run server software and busineses can afford to be ripped off.
I for one will be looking for another good technical product that is not owned by either CA or Symantec, whose products I will avoid in future.
As far as I'm concerned both are simply greedy corporations who live of the good work of technical people.
Fortunately, since the Internet arrived, we don't need the likes of them to find and subscribe to good anti virus services.
In my view large corporations like CA add no value whatsoever to the products they buy.
I think it's more likely that they will be the ones that go out of business in the future. I certainly hope so.