Between January and August 2026, the volume of procurement for practical cybersecurity assessments, including pentests, Red Team operations, and bug bounty programs, increased by 85% compared to the same period in 2025. Data from the TenderPro electronic trading platform indicates a significant shift in corporate security spending.
Conversely, demand for traditional compliance and automated security tools has declined. Procurement for information security certification dropped by 24%, vulnerability scanners by 9%, and general security analysis services by 7%. Organizations are prioritizing methods that simulate real-world attacker behavior over standard compliance checks.
The metallurgical and mining sectors lead in these security investments, accounting for 32% of total procurement. The oil, gas, and energy industries, along with IT and telecommunications, each represent 20% of the market. Manufacturing follows with 15%, while financial organizations account for 13% of the total volume.
Beyond major hubs like Moscow and St. Petersburg, procurement activity is rising in the Belgorod, Kursk, Orenburg, Kemerovo, and Murmansk regions, as well as the Zabaykalsky Krai. Companies are increasingly adopting continuous internal pentesting systems and cyber-training solutions to evaluate infrastructure resilience against various attack scenarios.
