Analysis of the Global SSL Certificate Market The Growing Need for Value-added Solutions March 2013
Contents Section Slide Numbers Executive Summary 8 Market Overview 14 Total SSL Certificate Market - External Challenges: Drivers and Restraints 23 Forecast and Trends 31 Market Share and Competitive Analysis 47 Domain Validated Certificate Segment Breakdown 54 Organization Validation Certificate Segment Breakdown 67 Extended Validation Certificate Segment Breakdown 80 The Last Word 93 Appendix 97 SSL Certificate Vendor Profiles 107 Other Participant Profiles 124 3
List of Exhibits Exhibits Slide Numbers Total SSL Certificate Market: Global, 2011 11 Percent Sales Breakdown by Certificate Type Total SSL Certificate Market: Global, 2011 20 Percent Breakdown by Certificate Issuance Total SSL Certificate Market: Global, 2011 21 Total SSL Certificate Market: Distribution Channel Analysis, Global, 2011 22 Total SSL Certificate Market: Key Market Drivers and Restraints, Global, 2012-2016 24 Total SSL Certificate Market: Unit Shipment and Revenue Forecast, Global, 2009-2016 33 Average Price for SSL Certificates Total SSL Certificate Market: Global, 2009-2016 37 Total SSL Certificate Market: Percent Revenue Forecast by Region, Global, 2009-2016 39 Total SSL Certificate Market: Revenue Forecast by Region, Global, 2009-2016 40 Total SSL Certificate Market: Revenue Forecast by Vertical Market, Global, 2009-2016 42 Total SSL Certificate Market: Unit Shipment Forecast by Vertical Market, Global, 2009-2016 Total SSL Certificate Market: Percent Revenue Forecast by Distribution Channel, Global, 2009-2016 Percent of Sales Total SSL Certificate Market: Global, 2011 48 43 45 4
List of Exhibits (continued) Exhibits Slide Numbers Percent of Certificates Issued Total SSL Certificate Market, Global, 2011 49 Total SSL Certificate Market: Company Market Share Analysis of Top 5 Participants, Global, 2011 Total SSL Certificate Market: Competitive Structure, Global, 2011 51 Competitor Growth Analysis Total SSL Certificate Market: Global, 2011 52 Competitor Breakdown by Tier Level Total SSL Certificate Market: Global, 2011 53 Domain Validated Certificate Segment: Market Engineering Measurements, Global, 2011 55 Domain Validated Certificate Segment: Unit Shipment and Revenue Forecast, Global, 2009-2016 Domain Validated Certificate Segment: Average Price, Global, 2009-2016 59 Domain Validated Certificate Segment: Revenue Forecast by Vertical Market, Global, 2009-2016 Domain Validated Certificate Segment: Unit Shipment Forecast by Vertical Market, Global, 2009-2016 Percent of Revenue Domain Validated Certificate Segment: Global, 2011 64 50 57 61 62 Domain Validated Certificate Segment: Competitive Structure Global, 2011 65 5
List of Exhibits (continued) Exhibits Competitor Breakdown Domain Validated Certificate Segment: Global, 2011 Organization Validation Certificate Segment: Market Engineering Measurements, Global, 2011 Organization Validation Certificate Segment: Unit Shipment and Revenue Forecast, Global, 2009-2016 Slide Numbers 66 68 70 Organization Validation Certificate Segment: Average Price, Global, 2009-2016 72 Organization Validation Certificate Segment: Revenue Forecast by Vertical Market, Global, 2009-2016 Organization Validation Certificate Segment: Unit Shipment Forecast by Vertical Market, Global, 2009-2016 74 75 Percent of Revenue Organization Validation Certificate Segment: Global, 2011 77 Organization Validation Certificate Segment: Competitive Structure Global, 2011 78 Competitor Breakdown Organization Validation Certificate Segment: Global, 2011 79 6
List of Exhibits (continued) Exhibits Extended Validation Certificate Segment: Market Engineering Measurements, Global, 2011 Extended Validation Certificate Segment: Unit Shipment and Revenue Forecast, Global, 2009-2016 Slide Numbers Extended Validation Certificate Segment: Average Price, Global, 2009-2016 85 Extended Validation Certificate Segment: Revenue Forecast by Vertical Market, Global, 2009-2016 Extended Validation Certificate Segment: Unit Shipment Forecast by Vertical Market, Global, 2009-2016 Percent of Revenue Extended Validation Certificate Segment: Global, 2011 90 Extended Validation Certificate Segment: Competitive Structure Global, 2011 91 81 83 87 88 Competitor Breakdown Extended Validation Certificate Segment: Global, 2011 92 Total SSL Certificate Market: Global, 2011 99 Competitive Analysis of Certificates and Services Offered Total SSL Certificate Market: Global, 2011 103 7
Executive Summary The total Secure Socket Layer (SSL) certificate market continues to grow rapidly, meeting the demands provided by the increasing trend of online transactions and the need for secure lines of transfer. Although SSL certificates are a commodity, Certificate Authorities are working to develop their value-added solutions to provide key differentiators in the market. This includes, certificate management/scanning capabilities and malware/vulnerability scanning. In respect to certificate management, in many instances, the administrator in charge of an organization s certificate never stays the same nor is an accurate database of certificates installed available. This can lead to a disturbance in business continuity. In addition, with the ever increasing sophisticated malware in the wild, Certificate Authorities are aiding their customers in ensuring their Web portals are not being used for fraudulent purposes. In 2011, SSL certificate revenue equaled $ million with million certificates issued. Revenue and certificates issued growth is expected to grow percent and percent, respectively. Source: Frost & Sullivan analysis. 9
Executive Summary (continued) The market s three certificate types create three different market segments with varying target markets. While domain validated certificates continue to be issued at a high rate, Organization Validation certificates are the most issued and lead the segments in sales due to their high-assurance, cost effectiveness. The breaches of certificate authorities in 2011 resulted in the establishment of baseline requirements by the CA/Browser forum. These requirements clarify processes for validation, issuance, and other activities. Certificate authorities have reported improved efficiency and effectiveness in their businesses, and many are investing in their infrastructure and training programs to deliver high-level results. Retail, financial, government, and tech/telecommunication verticals are the top adopters of SSL certificates in their businesses. This is driven by the need for trusted lines of communications, value-added solutions provided by CAs, and the improved efficiency created by the baseline standards. The top certificate authority in the SSL certificate market is Symantec. The company faces stiff competition from Entrust, Go Daddy, DigiCert, and GlobalSign. Source: Frost & Sullivan analysis. 10
Executive Summary Market Engineering Measurements Market Overview Total SSL Certificate Market: Global, 2011 Market Stage Market Revenue Market Units/Volume Average Price Per Unit Market Size for Last Year of Study Period Growth $ M M $ $ B (2011) (2011) (2011) (2016) Base Year Market Growth Rate Compound Annual Growth Rate Customer Price Sensitivity Degree of Technical Change Market Concentration % % % (2011) (CAGR, 2011 2016) (scale:1 [Low] to 10 [High]) (scale:1 [Low] to 10 [High]) (% of market share held by top 3 companies) Decreasing Stable Increasing For a tabular version, click here. Note: All figures are rounded. The base year is 2011. Source: Frost & Sullivan analysis. 11
Executive Summary Market Engineering Measurements (continued) Competitor Overview Number of Competitors Number of Companies that Exited* Number of Companies that Entered* Total Addressable Market Replacement Rate Attachment Rate (active market competitors in 2011) (2011) (2011) Years (average period of unit replacement) ** (current number of units per user 2011) Total Addressable Market Maximum Attachment Rate ** (maximum potential number of units per user) Industry Advancement Average Product Development Time Months Average R&D Spend by Product as a Percent of Market Revenue % Marketing Spend as a Percent of Market Revenue % Decreasing Stable Increasing *Companies with revenue of more than $20 M revenue. **Wildcard - Subject Alternative Name certificates can secure unlimited sub domains Note: All figures are rounded. The base year is 2011. Source: Frost & Sullivan analysis. 12
Executive Summary CEO s Perspective 1 Certificate discovery and management are crucial to business continuity. 2 3 4 5 Certificate authorities are developing value-added solutions to combat emerging threats. The CA/Browser Forum baseline requirements will enable efficient validation and issuance practices. Customer education on the importance of high-assurance certificates is still lacking. SSL certificate sales are growing at a CAGR of % with unit shipments equaling % growth. Source: Frost & Sullivan analysis. 13
Market Overview Definitions An SSL certificate is an encryption technology installed on Web servers that allows transmission of sensitive data through an encrypted connection. SSL certificates ensure any transmission of data will not be compromised or captured by hackers and criminals. The SSL certificate market consists of vendors and certificate authorities (CAs), who issue SSL certificates to secure an organization s or individual s Web site and Web server. These vendors are part of the CA/Browser forum. The forum consists of certificate authorities and browser industry leaders. This forum creates the baseline for the issuance of digital certificates. WebTrust recognizes certificate authorities who address principles in regards to security, availability, processing integrity, confidentiality, and privacy. CAs that meet these principles receive a WebTrust seal on their SSL Web page, identifying them as trusted vendors. Source: Frost & Sullivan analysis. 15
Market Overview Definitions (continued) The North America, Latin America, Europe, Middle East, and Africa (EMEA) as well as the Asia-Pacific (APAC) SSL markets will be analyzed in this research service. Revenue figures are based on vendor SSL certificate sales, in the base year 2011. One SSL certificate equals one unit shipped. Revenue earned by distributors or reselling agreements have been excluded in order to avoid a double count or value of the technology. Revenue and unit shipments based off distribution channels are broken out and forecast. The following are the types of SSL certificates that are available for purchase and implementation in the marketplace: Source: Frost & Sullivan analysis. 16
Market Overview Definitions (continued) Doman Validated (DV) certificate o This certificate validates an organization s domain name and domain control and applies a 256 bit encryption to data. Extended Validation (EV) certificate o This certificate requires extensive validation by a certificate authority (CA) and turns the browser address bar green to ensure users the Web site is secure. Organization Validation (OV) certificate o This certificate validates the organizational data, the domain, and the administrator. Wildcard certificate o This certificate secures an unlimited number of first level sub domains on a single domain name. Subject Alternative Name (SAN) certificates o This certificate secures multiple sub-domains whether it be in a Wildcard or UCC Unified Communications (UCC) certificate o This certificate secures Unified Communications products and servers, such as Microsoft Exchange Server. Source: Frost & Sullivan analysis. 17
Market Overview Definitions (continued) High-assurance certificates: o This includes both OV and EV certificate types. DV, OV, and EV certificate figures are used to calculate certificate figures, total market revenue, and market share. Free certificates and certificates created by organizations for internal use are not counted in the total market analysis nor the competitive analysis. Prices are averaged for the total market, using DV, OV, and EV vendor prices. Each type of certificate is broken out with a market forecast and price analysis. Source: Frost & Sullivan analysis. 18
Market Overview Key Questions This Study Will Answer What stage is the market in during the product life cycle? At what rate are the three different segments growing? What are the top drivers and restraints in this market? How will the structure of the market change with time? Who are the top competitors in this market? How concentrated is the market? How will SSL certificates adapt to criminal and security-threatening activities? Source: Frost & Sullivan analysis. 19