Many of the threats that lead to account takeover and payment fraud begin outside a financial institution's traditional security perimeter. A fraudulent banking website, compromised credentials or a fake social media account can expose customers to attacks long before suspicious activity appears within the institution's own systems. Digital Risk Protection (DRP) developed to give security teams visibility into that external landscape, and the market is now increasingly measured by what providers do after a threat is found.
That shift runs through the 2026 SPARK Matrix™ for Digital Risk Protection from QKS Group, an independent technology research and advisory firm that named AppGate a Leader for the second consecutive year. QKS Group evaluates vendors on Technology Excellence and Customer Impact, and 360 Fraud Protection by AppGate earned strong ratings across both for its integrated, fraud-centric approach, with 360 Brand Guardian playing a central role in detecting and disrupting threats that target financial institutions, their brands and their customers.
Market Shifts in the 2026 SPARK Matrix™
Phishing campaigns, fraudulent websites, impersonation attacks and compromised credentials are often handled as separate security challenges, yet they frequently serve as entry points for broader fraud schemes designed to exploit customer trust and compromise financial accounts. Attackers who capture credentials through one channel can use them to take over accounts through another, which is why financial institutions increasingly view these threats as stages of the same fraud lifecycle.
The 2026 SPARK Matrix™ report identifies several developments shaping the market, including greater emphasis on identity protection, the convergence of digital risk monitoring with broader security capabilities and the growing importance of effective remediation. Each of these developments moves DRP closer to fraud prevention. Identity protection carries particular weight for banks because stolen credentials give attackers a direct path from an external threat to a compromised account, while convergence with broader security capabilities reflects the need to connect what is found outside the perimeter with the controls that protect customer sessions and transactions.
The emphasis on remediation acknowledges that an alert about a fraudulent domain has limited value if the site stays live long enough to collect customer data. For financial institutions, detecting a fraudulent website or impersonation attempt is only the beginning, and the more useful measure of a DRP provider is how quickly threats can be investigated, validated and disrupted before they cause further harm.
Closing the Gap Between Detection and Takedown
Phishing remains a persistent threat to financial institutions, particularly as attackers reuse infrastructure, impersonate trusted brands and develop increasingly convincing credential-harvesting campaigns. 360 Brand Guardian monitors suspicious domains, phishing infrastructure and other indicators of malicious activity to help organizations identify threats early. In its assessment, QKS Group cited AppGate's ability to detect and respond to phishing, impersonation, credential theft, malicious applications and other forms of digital fraud, supported by machine learning and a combination of proprietary and third-party intelligence sources.
Identifying a threat does not automatically eliminate it, because security teams must still validate findings, investigate malicious activity and coordinate the appropriate response. AppGate addresses this challenge through its Guardian Fusion Center, which combines threat intelligence and AI-driven detection with specialized fraud analysts. Operating 24/7 with multilingual coverage, the team supports threat validation, investigation and remediation activities, helping financial institutions respond to emerging threats without relying exclusively on internal security resources.
360 Brand Guardian also supports automated takedown workflows, evidence collection and coordination with registrars, hosting providers and other relevant parties to disrupt malicious activity. This combination of technology and managed services helps organizations move from identifying digital threats to taking action against them. QKS Group Principal Analyst Sahil Dhamgaye noted that AppGate's ability to detect and respond to these threats, “combined with takedown and remediation capabilities, enables organizations to improve visibility into external threats and accelerate risk mitigation.”
A Fraud-Focused Approach to Digital Risk Protection
360 Brand Guardian addresses threats that originate outside the institution's perimeter as part of AppGate's broader 360 Fraud Protection platform, which also includes 360 Risk Control and 360 Adaptive Authentication. By connecting external threat disruption with real-time risk intelligence and adaptive authentication, AppGate supports a broader approach to protecting digital financial interactions. Credentials collected by a phishing site before it is taken down can still be used in attempts against customer accounts, so visibility across the fraud lifecycle gives an institution more opportunities to recognize and stop that activity.
QKS Group noted that the portfolio brings these capabilities together, “enabling organizations to address a broad range of external digital risks through a connected framework.” For financial institutions, that connected approach helps reduce exposure to threats that can lead to financial fraud and damage customer trust while minimizing unnecessary friction for legitimate customers.
A Second Year as a Leader
Being named a Leader in the SPARK Matrix™ for Digital Risk Protection for the second consecutive year reflects AppGate's continued focus on helping financial institutions address digital threats through proactive detection, specialized expertise and coordinated response. As fraud techniques continue to evolve, organizations need the ability to identify threats across digital channels and act quickly to limit their impact. With 360 Brand Guardian and the broader 360 Fraud Protection platform, AppGate remains focused on helping financial institutions protect their brands, safeguard customers and respond to digital threats before they escalate.
Explore the 2026 SPARK Matrix™ for Digital Risk Protection
The full QKS Group assessment offers a detailed view of the evolving Digital Risk Protection market and AppGate's positioning as a Leader.
Source: QKS Group, SPARK Matrix™: Digital Risk Protection, Q3 2026, by Sahil Dhamgaye and Sofia Ali.