Todd Moore | Global VP of Data Security Products at Thales
More About This Author >
Todd Moore | Global VP of Data Security Products at Thales
More About This Author >
Most breaches begin with the same blind spot: organizations don’t know precisely what data they hold, or how exposed it is. Value and risk sit side by side.
Data security matters, and it matters even more in the AI era.
The latest Data Security Posture Management 2025 report from Omdia analyzes how DSPM has evolved from a niche concept into a cornerstone of cybersecurity strategy.
In its assessment of the global vendor landscape, Thales is recognized as a DSPM market leader. Omdia rated Thales and our CipherTrust Data Security Platform for DSPM, among the top providers, awarding three Best in Class ratings for core technology, market momentum, and vendor execution. Two additional Top Tier scores complete a picture of a company that has matured quickly to stand alongside the largest and most established names in security.
This recognition is not only about tools or features. It affirms the vision Thales set 18 months ago when it acquired Imperva, and the choice to unify complementary Data Security Platforms into one market-leading solution. The result is unrivaled visibility, continuous monitoring, detection, and control that protects sensitive data, whether structured or unstructured.
Why DSPM Matters
DSPM addresses a question most organizations still struggle with: what data do we hold, where is it, and how do we monitor and protect it continuously?
Omdia’s research identifies three critical forces driving adoption:
- An escalating threat landscape: Attackers are faster, more automated, and more determined than ever. According to Omdia, “Automated intelligence, which includes AI, particularly GenAI and agentic AI, accesses vast amounts of unknown or unsanctioned data, exposing organizations to significant risk. On the other hand, used wisely, AI has considerable potential to reduce data security workloads substantially and enhance data protection.”
- Regulation with real teeth: Privacy laws like GDPR and CPRA impose heavy financial and reputational penalties for mismanaging data. Regulators have imposed more than €6.2 billion in fines under GDPR alone.
- Cloud complexity: Hybrid and multi-cloud adoption create sprawling data estates, where visibility and control are difficult to maintain.
For boards and executives, the case for DSPM extends beyond compliance checklists. Omdia’s report makes clear: DSPM is a rational evolution of data security in a world where data is everywhere.
DSPM offers a systematic answer. Organizations gain both compliance and resilience by discovering and classifying data wherever it resides, assessing posture, enforcing controls, and monitoring continuously. Omdia notes that more than 80% of IT decision makers are already adopting or planning DSPM initiatives. It is no longer optional.
Budgets are expanding. The question is not whether to invest, but with whom.
What Sets Thales Apart
Many vendors offer parts of the DSPM puzzle. Thales offers nearly the whole picture.
The DSPM space has grown quickly, shaped by mergers and acquisitions, and is now settling into stronger platforms. Consolidation brings clarity, but it also raises the bar. Leadership here isn’t about noise, but about showing how pieces can be brought together and made to work as one.
Through its acquisition of Imperva in 2023, Thales expanded its capabilities dramatically, integrating Imperva’s Data Security Fabric with its own CipherTrust Data Security Platform. The result is a suite that spans discovery, classification, encryption, tokenization, masking, identity management, and posture evaluation. Few providers can claim such breadth, or provide the same levels of continuous monitoring, detection, protection, and control.
Omdia points to several areas where Thales stands out:
Core Technology Strength
Discovery covers a broad array of file types, databases, and operating systems. Encryption, tokenization, and masking are robust and enterprise-ready. Identity and access management ties seamlessly into the platform. Thales also leverages its existing identity and access management and hardware security module (HSM) capabilities. It has shown strong growth over recent years, and, according to Omnia, now provides an industry-leading data security platform.
Defense-grade perspective
Few technology vendors bring a heritage of defending nations as well as enterprises. For Thales, cybersecurity is not an add-on but an extension of a long history in protecting sensitive environments. That context shapes its approach, embedding resilience and vigilance into product design.
Execution and Momentum
With operations in 140 countries, 196 offices and support centers, 11 security operations centers, and a network of more than 6,500 partners, Thales delivers at scale. Its partnerships with Google, Microsoft, and Amazon extend reach into the cloud ecosystems where enterprises increasingly live.
This is not only breadth and reach. Thales has taken steps to unify its DSPM portfolio with the rest of CipherTrust, enabling centralized key management, granular entitlements, and advanced remediation strategies. As the report puts it, some competitors may be equal in their technology, but few can match the combination of capability, strategy, and market execution.
Why Thales Deserves a Place on Your DSPM Shortlist
Omdia’s evaluation is rigorous.
Thales earns particular credit for unifying multiple layers of data protection on a single platform. Beyond basic discovery and blocking, it tracks and analyzes every interaction with critical data, offering real-time alerts and precise remediation options. Thales provides a vigilant guard inside the system where other solutions stop at a closed door.
Thales DSPM is always watching. Continuous monitoring, intelligent detection, and precise control are at its core. It doesn’t wait for problems; it anticipates them. Threats are addressed early, before they grow, giving teams the insight to act rapidly. The result is forward motion - not catch-up - with safeguards that shift in real time as the environment changes.
For these reasons, Omdia is explicit in its recommendation: Thales should appear on the shortlist of any enterprise seeking a comprehensive DSPM solution.
The reasons are clear:
- Integration and scope: A near-complete DSPM portfolio reinforced by CipherTrust’s proven data security platform.
- Defense DNA: A unique perspective that treats cybersecurity as a mission, not a marketing slogan.
- Execution at scale: Global presence, trusted by Fortune 100 enterprises, backed by thousands of partners and SOCs worldwide.
Standing Shoulder to Shoulder
Thales being named a Leader in Omdia’s 2025 DSPM report is not a certificate to hang on the wall. It is a marker of something rarer: the ability to stand shoulder to shoulder with the biggest names in IT, while carrying the perspective of decades spent guarding critical assets.
For businesses facing relentless regulation and attack, DSPM is the foundation for resilience. Choosing the right partner matters. Omdia’s verdict is clear: Thales brings the breadth of capability, global scale, and hard-earned instincts of a company shaped by real defense.
For organizations seeking to understand, protect, and govern their data today and in the future, Thales offers not just a product but a platform on which to build.
Thales gives huge thanks to Omdia for the acknowledgment, and congratulations to the Thales team, particularly its product and engineering colleagues: you have built something extraordinary!
Download the Omdia report on Data Security Posture Management and discover Thales strengths.