Assets under management (AUM) is the total value of capital a firm oversees for investors or clients. It describes the money under a manager’s control, not cash sitting in one account and not a guarantee that every dollar is already deployed.
In cyber security, AUM matters because it often signals scale, influence, and the ability to fund products, acquisitions, and internal controls. Large AUM can help a security vendor hire staff, improve testing, and build better monitoring, but it does not prove the company is secure. Attackers may also target firms with high AUM through phishing, account takeover, or business email compromise because the financial payoff can be large. Defenders use AUM as one business signal when judging a vendor’s maturity, but they still need technical evidence such as access control, logging, patching, and incident response readiness.