Thales presented its 2025 full-year results on March 3, 2026, offering a window into how its cybersecurity division is tracking against a market forecast to grow at an 11.6% CAGR through 2029 [2]. The company's core verticals, including IAM and defense, align with the fastest-growing cybersecurity segments [2][2]. With EMEA projected to reach $70.45 billion by 2029 [2], Thales' home-region concentration is an asset, though competitive density remains a real constraint.
What is Covered in this Article
- Thales 2025 full-year results and cybersecurity segment context [1][1]
- Global cybersecurity market growth forecast at 11.6% CAGR to ~$287.6B by 2029 [2]
- IAM segment expansion from $16.63B to $35.66B by 2029 [2]
- EMEA market opportunity growing to $70.45B by 2029 [2]
- Defense & Government vertical reaching $37.87B by 2029 [2]
The News: Thales held a conference call on March 3, 2026 at 8:30 am CET to present its 2025 full-year results, with a replay and press release made available to investors and analysts shortly after [1][1]. The results arrived at a moment of sustained momentum across the broader cybersecurity industry. Futurum estimates the global cybersecurity market to grow at a CAGR of 11.6% from 2024 to 2029, reaching approximately $287.6 billion [2]. Thales operates across several of the market's highest-growth segments, including identity and access management, data protection, and defense-oriented security, making its full-year performance a meaningful indicator of how established vendors are capturing structural demand.
Thales Cybersecurity Sits Inside a $287.6B Structural Growth Wave
Analyst Take: Thales' 2025 results land inside one of the more favorable demand environments the cybersecurity sector has seen in years. The structural drivers, including cloud migration, AI-powered threat escalation, and tightening regulatory requirements, are compressing enterprise security budgets upward rather than constraining them. For a vendor with Thales' portfolio breadth, the question is less about whether the market is growing and more about whether its product mix is aligned to the segments growing fastest [2][2].
IAM and Risk Operations: The High-Growth Segments Thales Cannot Afford to Underweight
The two fastest-growing cybersecurity segments are precisely where Thales has established product lines. The identity and access management market was valued at $16.63 billion in 2024 and is projected to grow to $35.66 billion in 2029, at a CAGR of 16.5% [2]. Separately, the Risk Management and Security Operations market was valued at $15.30 billion in 2024 and is projected to reach $33.64 billion in 2029 at a CAGR of 17.1% [2]. Thales' hardware security modules and IAM solutions are positioned in the first segment, while its managed security and SOC-adjacent services touch the second. Execution in both areas will determine whether Thales captures above-market growth or simply tracks the industry average. Vendors that fail to invest aggressively in these two segments risk ceding ground to more narrowly focused competitors with faster product cycles.
EMEA Concentration Is a Feature, Not a Liability, for Now
Thales derives significant revenue from EMEA, a region that represents a substantial and expanding addressable market. EMEA is the second-largest cybersecurity market globally, with revenue of $46.26 billion in 2025, projected to grow at a CAGR of 10.9% and reach $70.45 billion by 2029 [2]. That trajectory gives Thales a durable home-region tailwind, particularly as European regulatory frameworks such as NIS2 and DORA continue to drive mandatory security investment across financial services, critical infrastructure, and public sector organizations. The risk is that EMEA concentration limits upside in faster-growing geographies, particularly Asia-Pacific, where cloud adoption and digital infrastructure buildout are accelerating security spending at a higher rate.
Defense and Government: A Steady, Predictable Growth Engine
Defense and government cybersecurity is a core Thales vertical, and the segment's outlook supports continued investment. The Defense and Government sector is forecasted to experience steady growth at a 10.4% CAGR, reaching $37.87 billion by 2029 [2]. While this growth rate trails IAM and Risk Operations, the segment offers Thales something equally valuable: contract predictability and long-cycle revenue visibility. Government procurement cycles are slow but sticky. Thales' established relationships with defense ministries and national security agencies across Europe and allied nations provide a durable revenue floor that pure-play commercial cybersecurity vendors cannot replicate. The challenge is ensuring that defense-grade product development does not lag behind the commercial innovation pace that enterprise buyers increasingly expect.
Competitive Market: Opportunity and Displacement Risk Coexist
The cybersecurity vendor market remains fragmented, with enterprise buyers frequently carrying open vendor slots across security categories. This fragmentation creates genuine expansion opportunities for Thales, particularly in accounts where it already holds a trusted position in one product category and can extend into adjacent ones. However, the same fragmentation enables displacement. Specialized vendors with deeper capabilities in IAM, cloud-native security, or AI-driven threat detection can win individual category decisions even when a larger incumbent holds the broader account relationship. Thales must balance its portfolio breadth advantage against the execution risk of spreading investment across too many product lines simultaneously.
What to Watch
- IAM revenue growth rate: whether Thales' identity portfolio is expanding at or above the 16.5% segment CAGR through Q4 2026 [2]
- Risk Operations investment signals: how Thales allocates R&D and M&A capital toward the 17.1% CAGR security operations segment in the next two quarters [2]
- EMEA regulatory tailwinds: how NIS2 and DORA enforcement timelines translate into measurable pipeline acceleration for Thales' European enterprise and public sector business [2]
- Defense contract cadence: whether Thales secures new multi-year government cybersecurity awards that extend revenue visibility into 2027 and beyond [2]
- Competitive displacement signals: which vendor categories show accelerating customer churn toward specialized point-solution providers over the next two quarters
Sources
1. 2025 Full-Year Results, Thalesgroup, August 2026
2. 1H 2025 Cybersecurity Market Sizing & Five-Year Forecast, Futurum Research, April 2025
Declaration of generative AI and AI-assisted technologies in the writing process: This content has been generated with the support of artificial intelligence technologies. Due to the fast pace of content creation and the continuous evolution of data and information, The Futurum Group and its analysts strive to ensure the accuracy and factual integrity of the information presented. However, the opinions and interpretations expressed in this content reflect those of the individual author/analyst. The Futurum Group makes no guarantees regarding the completeness, accuracy, or reliability of any information contained herein. Readers are encouraged to verify facts independently and consult relevant sources for further clarification.
Disclosure: Futurum is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.
Analysis and opinions expressed herein are specific to the analyst individually and data and other information that might have been provided for validation, not those of Futurum as a whole.
Read the full Futurum Group Disclosure.
Other Insights from Futurum:
Thales's NATO Partnership Signals a New Era in Defense Technology
Deployable TACAN: Thales NATO Win
Infrastructure Security: Thales Germany Deal
Author Information
This content is written by a commercial general-purpose language model (LLM) along with the Futurum Intelligence Platform, and has not been curated or reviewed by editors. Due to the inherent limitations in using AI tools, please consider the probability of error. The accuracy, completeness, or timeliness of this content cannot be guaranteed. It is generated on the date indicated at the top of the page, based on the content available, and it may be automatically updated as new content becomes available. The content does not consider any other information or perform any independent analysis.
