Reference
·Supporting source
AI and ML-driven security tooling spend share
~12-14% (2024)
AI and ML-driven security tooling — covering user-and-entity behaviour analytics (UEBA), AI-augmented endpoint detection and response (EDR/XDR), security orchestration automation and response (SOAR), and emerging GenAI-assisted SOC tools — accounted for approximately 12-14% of Thailand's 2024 cybersecurity spend per IDC and Gartner segmentation, growing from ~5-6% in 2021. The largest absolute commitments sit in banking SOCs (KBTG, SCBX, Bangkok Bank) and telecom SOCs (AIS, True, NT). Microsoft Defender, CrowdStrike, SentinelOne, Palo Alto Networks Cortex XSIAM, and IBM QRadar (with watsonx augmentation) are the principal AI-augmented platforms in market.
Figure in context
AI and ML-driven security tooling — covering user-and-entity behaviour analytics (UEBA), AI-augmented endpoint detection and response (EDR/XDR), security orchestration automation and response (SOAR), and emerging GenAI-assisted SOC tools — accounted for approximately 12-14% of Thailand's 2024 cybersecurity spend per IDC and Gartner segmentation, growing from ~5-6% in 2021. The largest absolute commitments sit in banking SOCs (KBTG, SCBX, Bangkok Bank) and telecom SOCs (AIS, True, NT). Microsoft Defender, CrowdStrike, SentinelOne, Palo Alto Networks Cortex XSIAM, and IBM QRadar (with watsonx augmentation) are the principal AI-augmented platforms in market.
AI and ML-driven security tooling — covering user-and-entity behaviour analytics (UEBA), AI-augmented endpoint detection and response (EDR/XDR), security orchestration automation and response (SOAR), and emerging GenAI-assisted SOC tools — accounted for approximately 12-14% of Thailand's 2024 cybersecurity spend per IDC and Gartner segmentation, growing from ~5-6% in 2021. The largest absolute commitments sit in banking SOCs (KBTG, SCBX, Bangkok Bank) and telecom SOCs (AIS, True, NT). Microsoft Defender, CrowdStrike, SentinelOne, Palo Alto Networks Cortex XSIAM, and IBM QRadar (with watsonx augmentation) are the principal AI-augmented platforms in market.
Time scope
FY2024
Source basis
Supporting source
Interpretation notes
What this tells you
AI and ML-driven security tooling — covering user-and-entity behaviour analytics (UEBA), AI-augmented endpoint detection and response (EDR/XDR), security orchestration automation and response (SOAR), and emerging GenAI-assisted SOC tools — accounted for approximately 12-14% of Thailand's 2024 cybersecurity spend per IDC and Gartner segmentation, growing from ~5-6% in 2021. The largest absolute commitments sit in banking SOCs (KBTG, SCBX, Bangkok Bank) and telecom SOCs (AIS, True, NT). Microsoft Defender, CrowdStrike, SentinelOne, Palo Alto Networks Cortex XSIAM, and IBM QRadar (with watsonx augmentation) are the principal AI-augmented platforms in market.
What not to do with it
Use the linked report for interpretation and keep basis differences explicit.
Related figures
Adjacent numbers that add context without drowning the value.
Thailand cybersecurity end-user spending (2020-2025)
IDC Thailand Security Spending Guide, Gartner Asia-Pacific Information Security tracker, National Cyber Security Agency
Thailand cybersecurity spend by sector (2024)
IDC Thailand Security Spending Guide, NCSA sector outlook, Bank of Thailand IT-risk supervision data
PDPA enforcement actions by PDPC (2020-2024)
Office of the Personal Data Protection Committee, Baker McKenzie Thailand PDPA tracker, Tilleke and Gibbins data-protection bulletin
Publicly disclosed major Thai breaches (2024-2025)
ThaiCERT advisories, NCSA, Bangkok Post Tech, Group-IB Asia threat intelligence reports
Identity and access management platform adoption
IDC Thailand Identity and Access Management tracker, Okta, Microsoft Entra ID Thailand channel disclosures, Bank of Thailand IT-risk guidance
Post-quantum cryptography readiness investment
NCSA, NIST Post-Quantum Cryptography standardisation, Bank of Thailand IT-resilience guidance, IBM and Thales Thailand channel
Report context
Atlas actors in this figure's reports
Profiles covered in the report that cite this number.