Communications Platform as a Service

The 2026 Magic Quadrant for Communications Platform as a Service, published May 18, 2026, is the edition where the field moved. Two of the five Leaders rose from the Visionary quadrant in 2025, one returned after a year off the rung, and Gartner's headline projection is about security: by 2029, 85 percent of global enterprises will require AI-based security features in their CPaaS toolset, up from 40 percent in 2025.

The trusted conversation layer

CPaaS used to be defined by one verb: send. Send the SMS, place the call, route the number. The market grew on that verb, and the quadrant rewarded whoever sent the most reliably.

The 2026 definition is heavier. Communications now carries authentication, fraud controls, and identity verification, and the projection says where the market is heading: the toolset is being judged on embedded trust. Messages became conversations, and conversations became the attack surface, and the quadrant is scoring who defends it.

Trust is the feature the quadrant now scores first.

The May 2026 Magic Quadrant for Communications Platform as a Service, quadrant by quadrant

The edition published May 18, 2026, authored by Lisa Unden-Farboud, Pankil Sheth, and Ajit Patankar.

Five Leaders hold the rung. Twilio, for the fourth consecutive year, with the highest placement on Ability to Execute, cited for its data strategy connecting its customer data platform with Snowflake and Databricks, plus global RCS support, new authentication tools, and Conversational Relay for natural voice interactions. Infobip, for the third consecutive year, edging ahead on Completeness of Vision, cited for its early move into agentic AI with its AgentOS platform, Model Context Protocol server support, and a carrier ecosystem of more than 800 global connections. Sinch, for the fourth consecutive year, with its developer API platform and voice network, more than a thousand partners, and close to one trillion customer interactions annually across 190 countries. Vonage, returning to the Leader rung after a Visionary placement in 2025, with its AI-ready API suite, MCP server tooling, and video capabilities. And Proximus Global, entering the Leader quadrant in only its second year of inclusion.

The Challengers are Cisco, Bandwidth, and Tencent Cloud. The Visionaries are Tanla, Tata Communications, and Alibaba Cloud. The Niche Players are GMS, Mitto, and Telnyx.

The two risers

Proximus Global is the edition's fastest mover: formed in December 2024 from the merger of BICS, Telesign, and Route Mobile, it entered the quadrant as a Visionary in 2025 and the Leader rung in 2026. Its basis is the broadest channel portfolio on the rung, direct RCS connectivity with orchestrated fallback, and owned network infrastructure reaching more than five billion subscribers.

Vonage is the return story: a Leader, then a Visionary in 2025, now a Leader again under Ericsson ownership, on AI-ready APIs and video capabilities Gartner calls among the most extensive and scalable in the industry.

A merger of three companies became a Leader in its second year of inclusion, and a vendor returned to the rung after one edition away. The field moved while the market was watching the technology, and the movement is the market's own answer about what matters now.

The 85 percent problem

The projection is the edition's sharpest line: by 2029, 85 percent of global enterprises will require AI-based security features in their CPaaS toolset, up from 40 percent in 2025.

Read what that means. Within four years, a CPaaS purchase without embedded security becomes non-compliant with the buyer's own requirements. The fraud vector is real and specific: CPaaS traffic carries the authentication messages, the verification codes, the payment confirmations, and AI-based attacks on that traffic scale faster than the manual defenses the industry inherited.

The projection is also a product roadmap written in public. The vendors that built fraud controls and identity verification natively, Sinch is cited for exactly this, are pre-positioned for the criteria shift.

What the incumbents defend

The three longest-tenured Leaders defend different moats. Twilio defends the benchmark position: highest execution, the default choice, now layering its data strategy on top, because the data connection is what turns a message platform into a customer engagement platform. Infobip defends the enterprise narrative: selling outcomes rather than APIs, agentic AI arriving through MCP servers. Sinch defends scale and the network: direct carrier connections in the hundreds, interactions in the trillions, and the voice infrastructure underneath.

The defense strategies say where the market is going. Execution alone is no longer the argument; the incumbents are all moving toward data, agents, and trust, and the quadrant is scoring the speed of the move.

The honest limit of a moving field

The placements describe a market in motion, and the motion is the caveat. Two Leaders are one-year risers, one is a returnee, and the security criteria that will reshape the next editions have only begun to be scored.

The record beneath the rung is also partial. The quadrant's full write-ups have not been widely republished, and the vendor announcements quote strengths, not cautions. A buyer reading the placements without the cautions is reading the map without the terrain, and in a market where trust is becoming the product, the terrain is the point.

Four questions for the CPaaS buyer

What does the security stack actually include? The 85 percent projection makes this the first question. Ask which fraud controls and identity features are native, and which are partner bolt-ons.

Who carries the traffic to the destination? Direct carrier connections versus resale change reliability and price. Ask for the direct-connection count to your key markets, and the fallback path.

Is the platform agent-ready in a way that survives audit? MCP support is now a placement factor. Ask how the vendor's agentic tooling is governed and logged, not just demoed.

What happens to the data? The Leaders are building data strategies precisely because message data is the new asset. Ask where your traffic metadata lives, who learns from it, and what the exit looks like.

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

See also Desktop as a Service. By 2030, Gartner expects a fifth of virtual desktop workspaces to be occupied by AI agents instead of humans, up from almost none today, and Alibaba Cloud already built a Cloud PC for exactly that.

This market sits next to Unified-Communications-As-A-Service Platforms, covered separately on this site. Neither of the two Leaders in the current evaluation was considered a UCaaS provider six years ago. One sold video meetings, the other sold productivity software, which tells you the question this category answers has changed.