Independent research Market structure and acquisition activity
How markets consolidate, and what that leaves for the companies inside them.
Longfield Intel researches ownership change across enterprise technology and the markets next to it. Who is acquiring, on what terms, and what the pattern leaves for whoever is still independent. Every figure carries its source. Where sources disagree, the report shows the disagreement rather than picking the more convenient number.
01 Position
Monitoring tells you what changed. This tells you what it did to you.
Most competitive intelligence available to buy is monitoring. It watches announcements and routes them to you quickly. That is genuinely useful, and it is a different thing from knowing what an announcement does to your position, which is the part that takes work.
A market map is worth something because you can check it. Every claim in a Longfield report is cited inline. Where a figure comes from a deal tracker, the report names the tracker. Where two trackers disagree, and in most markets they disagree constantly, the report carries both numbers and records why they differ.
That habit is the whole method. It is also the reason these reports take longer to produce than the alternative, and the reason they survive being checked.
02 Method
The research protocol
Six stages, run in the same order on every engagement. The sequence is fixed so that two reports written a year apart stay comparable, and so any figure can be traced back to the document it came from without anyone having to ask.
-
01
Perimeter
The boundary is written down before collection starts.Markets get counted badly when vendor category labels are allowed to do the work. The perimeter is drawn on architecture and on what a product actually displaces, then recorded as an explicit inclusion rule. Companies sitting across two categories are assigned once, and the assignment is written into the report, so the same revenue never lands in two totals.
-
02
Acquisition
Primary documents first. Trackers second.Collection opens with filings, registry entries, merger control notices, offer documents and transcripts. Deal trackers and press coverage come in afterwards as corroboration rather than as the base layer. Each item is logged with its publisher, its publication date and the date it was pulled, because a figure that was current in March is not the same figure in November.
-
03
Reconciliation
Disagreement gets recorded, not averaged away.Every numeric claim goes into an evidence ledger against the sources that support it. Where two sources give different values for the same transaction, both are held in a variance register alongside the reason for the gap, whether that is an earn-out counted differently, a currency conversion date, or a category boundary somebody else drew elsewhere. Nothing is quietly split down the middle.
-
04
Structure
The shape of the market, not the headline total.Analysis runs on concentration and cadence. Deal count set against disclosed value. Where the value pools sit and how few transactions hold them. Which acquirers are buying capability and which are buying revenue. Valuation bands by category and by point in the cycle, with the undisclosed share stated openly instead of being dropped out of the denominator.
-
05
Verification
Nothing ships without a live source tag.Before release, each claim is checked back against its ledger entry and each citation is opened again. A claim that has lost its source is cut rather than softened into something vaguer. The report is then version stamped, so a reader knows precisely which state of the market it describes and can tell later work apart from earlier work.
-
06
Refresh
Re-run against the same perimeter, on a fixed cadence.Reports kept on refresh are re-run against the perimeter they were built with, so movement is real movement rather than a change of definition. Figures that moved are marked, and the previous value stays visible next to the new one. A map that quietly rewrites itself is not a map anyone can audit.
What travels with every report
The working material ships with the document. A report that cannot be interrogated after delivery is a slide deck with footnotes.
- Evidence ledger
- Each numeric claim, the sources behind it, and the date every source was retrieved.
- Variance register
- Competing figures for the same event, held side by side with the reason they differ.
- Perimeter note
- The inclusion rules used, written out, including the calls that could reasonably have gone the other way.
- Version stamp
- The date the market state was fixed, carried on every page and on every chart.
03 Coverage
Two practices, one method
The method does not change between them. Public records read carefully, every figure carried with the source it came from, and competing figures shown side by side rather than settled by preference. Only the subject changes.
Practice one
Corporate and sector research
Coverage follows consolidation rather than sector fashion. Most of the work sits in enterprise technology and the infrastructure underneath it, with a second line in the built environment, where the same roll-up mechanics run over far more fragmented ground.
-
Cybersecurity Published
The most heavily consolidated market under coverage, and the one with the deepest published work behind it. Cloud security, identity, security operations, governance and compliance, and the commercial market that has grown around vulnerability research. Read the cybersecurity coverage -
Enterprise software and infrastructure
Platform consolidation and the absorption of point products into suites. What happens to pricing power, roadmap independence and renewal terms once a category is down to three credible buyers. -
Data and AI infrastructure
Compute, tooling, orchestration and model operations. A market where acquisition is often about teams and access rather than revenue, which makes disclosed multiples close to meaningless unless the structure of the deal is unpicked first. -
Payments and financial technology
Rails, processing, risk tooling and embedded finance. Regulatory gating is heavy here, which has the useful side effect of putting unusually good primary documents on the public record. -
Industrial and operational technology
Automation, monitoring, and the slow merger of plant systems with enterprise IT. Long procurement cycles and long installed-base tails, both of which change what an acquirer is actually buying. -
Homebuilding and renovation
Residential development, renovation and repair contractors, and the building products supplying both. The most fragmented ground under coverage, which is precisely why private capital has spent the last few years rolling it up, and why owners tend to field an approach without knowing what the buyer is assembling around them. -
Health technology
Records, clinical workflow and diagnostics tooling, where procurement cycles and reimbursement policy set the pace of consolidation far more than product merit does.
Practice two
Local and regional market intelligence
For construction, trades and contracting businesses. The same records work, applied at county and village level. Which programmes pay for the work, which of them a business is not enrolled in yet, who else is registered to do it locally, and where the demand actually sits.
-
Funding channel mapping
State, federal and utility programmes that pay contractors directly. Each one named, with the enrollment route, the certificates and insurance minimums it asks for, and what it pays per job. -
Customer-side grant and rebate research
The money a homeowner brings to the job. Award limits, who qualifies, what the money covers, and which addresses fall inside or outside a programme boundary, since most of these are drawn geographically and the line rarely follows the town name. -
Local competitor mapping
Built from county registration lists and permit records rather than from advertising. Who is registered, who is still pulling permits, who has gone quiet, and which funded channels none of them have entered. -
Permit volume and demand analysis
Approvals at village and county level, job by job. What is being built, at what declared value, and by whom, which is a far better read on demand than anything a trade association publishes. -
Regulatory and tax position
Enterprise zone boundaries and the material exemptions inside them, disaster assessment relief and the rules that quietly void it, and expired credits that are still being quoted to customers.
04 Publications
What gets produced
Four formats. Each is built on the same protocol and ships with the same working material behind it.
-
Sector landscapes
How a category is consolidating. The transactions, the acquirers, the valuation bands and who is left standing. Category wide, with no subject company, so it can be circulated internally without signalling anything. -
Competitive briefings
A named company set against its closest architectural peers, with comparable transactions where they exist and an explicit note where they do not. Comparability is argued rather than assumed. -
Target profiles
Company level analysis for a board or a buyer weighing one specific acquisition. Ownership history, integration record, customer concentration, and the parts of the business that would not survive a transfer. -
Local market reports
For the second practice. One county or trading area, the funded channels operating inside it, the competitors registered to work there, and the permit record. Written for an owner-operator to act on in a week, not for a boardroom. -
Position reviews
Where a company stands once a market has moved, and which of its options are still open. Written for the people who have to choose, and short enough that they will read it.
05 Current report
Read the current report
Sector landscape · Free to read
Cybersecurity's Consolidation Wave
Acquisition activity and market structure across enterprise security, 2025 to 2026. Nineteen pages, sourced throughout, with competing figures shown side by side wherever the trackers do not agree.
06 Engagements
How engagements work
Scoped in writing before anything starts, then delivered against that scope.
Reports are commissioned individually or kept on a quarterly refresh. The refresh is where most of the value sits. A market map is worth considerably more when it is still accurate six months later, and most of these markets move fast enough that most maps are not.
Scoping is written down first: the perimeter, which sources will be treated as primary, the questions the report has to answer, and the date the market state gets fixed. Changes to scope are re-quoted rather than absorbed quietly, because a perimeter that drifts halfway through produces a report nobody can compare to anything.
Longfield Intel is independent. It takes no fees from the companies it writes about, and it does not act as a broker or an intermediary in any transaction it covers.
07 Contact
Get in touch
Nick Gveluka, analyst
The market, and the decision sitting behind the question, is enough to start. Scoping conversations carry no charge and no obligation.