Analysts sometimes refer to the enterprise networking market as "Cisco and the Seven Dwarves". Nobody has ever said that about Symantec (prior to the Broadcom acquisition) or Palo Alto Networks.

It is often the case that in a new security product category, the products are so different, it is hard to collect them together in a single category with a straight face. Example: next generation AV circa 2015-2016. AV was a well-worn product category. All of the legacy products did basically the same thing. More or less at the same time, a bunch of new products came to market that all claimed the mantle of "next generation AV:"

* Bit9 did process whitelisting, later adding Carbon Black for endpoint forensics

* Fire Eye had a proto-EDR solution

* Cylance did ML-based malware detection

* Palo Alto Networks had an exploit-mitigation focused agent that they bolted ML-based malware detection onto.

The industry slowly converged on EDR as the sort-of successor to endpoint AV budgets.

A few years later, the cloud security space was the same fragmented mess. Some were what we now know as CSPM, some were glorified DLP solutions, some container security solutions, etc.