Big Five is a shorthand for the largest U.S. tech platforms, often used when comparing their scale, spending, and market influence. In cyber security, the term matters because these companies run some of the world’s most important cloud, identity, email, mobile, and advertising systems, making them high-value targets and powerful defenders at the same time.
Attacks against Big Five platforms can have outsized impact: credential theft, phishing, cloud abuse, API exploitation, supply-chain compromise, and account takeover can spread quickly across their ecosystems. Defenders track the Big Five closely because their security controls, patching decisions, and product changes affect millions of users and many downstream organizations. In practice, the term is less about a fixed technical category and more about a concentration of risk, infrastructure, and trust.


