Are Symantec and Broadcom the Same? The Merger Explained

Let's cut straight to it. If you're searching for this, you're probably staring at an old Symantec Endpoint Protection console, trying to renew a license, or your CFO just asked why the bill says "Broadcom" now. The confusion is real, and honestly, the messaging hasn't always been crystal clear.

No, Symantec and Broadcom are not the same. Not in the way you might think. Broadcom, the semiconductor and infrastructure software giant, bought Symantec's enterprise security business. It wasn't a merger of equals; it was an acquisition. The consumer part of Symantec (Norton LifeLock) went its own way. What remains of the legendary "Symantec" brand in the enterprise world is now a product line under Broadcom's massive umbrella. Think of it like a car company buying a famous tire brand. The tire brand's identity gets absorbed, its technology integrated, but the parent company calls the shots.

I've talked to dozens of IT managers since the deal closed. The most common pain point? The feeling of dealing with a completely different beast. The support channels changed, the licensing models got a brutal overhaul (subscription-only, no more perpetual), and the roadmap felt... different. If you're managing a legacy Symantec stack, understanding this transition isn't just academic—it's critical for your budget and security posture.

What You'll Find in This Guide

The Straight Story: What Broadcom Actually Bought
What Happened to Your Favorite Symantec Products?
Why Did Broadcom Want Symantec's Security Business?
The Real-World Impact on Customers and Strategy
Answers to the Tough Questions IT Teams Are Asking

The Straight Story: What Broadcom Actually Bought

This wasn't a simple name change. It was a multi-billion dollar surgical extraction. To understand where we are, you need to see what got carved up.

In late 2019, Broadcom finalized its purchase of Symantec's enterprise security assets for $10.7 billion. This included the crown jewels:

The entire endpoint security suite (Symantec Endpoint Protection, SEP)
The web and cloud security services (Web Security Service, WSS)
The data loss prevention (DLP) technology
The secure web gateway and cloud access security broker (CASB) portfolio.

Meanwhile, the consumer-facing side—the Norton antivirus you might have on your home PC, the LifeLock identity theft stuff—was spun off and later merged with another company. That entity is now called Gen Digital. This split is the root of most brand confusion. You have Gen Digital selling Norton, and Broadcom selling the enterprise tools that used to carry the Symantec name.

The Core Takeaway: Broadcom owns the "enterprise Symantec" technology and intellectual property. The Symantec brand for big business security is effectively retired, replaced by "Broadcom" and specific product names. The consumer Symantec (Norton) is a totally separate company.

What Happened to Your Favorite Symantec Products?

This is where the rubber meets the road. Broadcom didn't just slap its logo on the box and call it a day. Their playbook, seen with previous acquisitions like CA Technologies, involves focusing on large, stable enterprise customers and streamlining product portfolios. Here’s the fate of the major product families:

Legacy Symantec Product	Current Status under Broadcom	Key Changes to Note
Symantec Endpoint Protection (SEP)	Now part of Broadcom Endpoint Security. It's still a flagship product.	Heavy push toward integrated suites (Endpoint Security + DLP). Perpetual licensing is gone—subscription only. Renewals are often bundled.
Symantec Web Security Service (WSS)	Now Broadcom Secure Web Gateway.	Integrated more tightly with the CASB offerings. Roadmap emphasizes cloud-scale performance.
Symantec Data Loss Prevention (DLP)	Now Broadcom Data Loss Prevention.	Positioned as a core, standalone data security pillar, often sold integrated with endpoint or email security.
Symantec Email Security	Divested. Sold to a company called Accenture in 2020.	Not part of Broadcom's portfolio at all. A common point of confusion for customers looking for a full suite.
Symantec PKI / Certificate Services	Also divested. Sold to DigiCert.	Another piece that went elsewhere, breaking up the old "one-stop-shop" Symantec ecosystem.

From my conversations with security architects, the most jarring shift has been the licensing and support model. Broadcom is known for favoring large, multi-year enterprise agreements. If you were a small or mid-sized business happily renewing your SEP licenses year-by-year, you likely encountered significant friction. The model now incentivizes you to buy more, for longer. It's a classic Broadcom move: focus on the most profitable segment of the customer base.

Why Did Broadcom Want Symantec's Security Business?

On the surface, a chipmaker buying a security software firm seems odd. But look at Broadcom's strategy over the last decade: they've been aggressively building a high-margin infrastructure software empire. Think mainframe software (CA), DevOps tools, and now, cybersecurity. Security isn't a side project; it's a core, recurring-revenue pillar.

Symantec's enterprise business, despite its struggles, had two things Broadcom craves:

Sticky, Recurring Revenue: Large enterprises don't rip and replace endpoint security overnight. The switching costs are enormous. That means predictable, subscription-based income.
Established Enterprise Footprint: Symantec had relationships with nearly every Fortune 500 company. Broadcom bought that customer list and the trust (however strained) that came with it.

Hock Tan, Broadcom's CEO, is famous for acquiring "mature" tech businesses and making them wildly profitable through aggressive cost-cutting and focusing on the core, high-value products. The playbook isn't about innovation sprints; it's about financial engineering and maximizing returns from stable assets. For security teams, this means the product evolution you see might feel more incremental than revolutionary.

A Subtle but Critical Mistake Many Make

Here's a nuance most articles miss. People assume Broadcom is running the old Symantec business as a standalone unit. It's not. They've integrated it into their broader software group. This means decisions about R&D, pricing, and support are made with a portfolio-wide lens. Your endpoint security product's future is partly tied to the performance of Broadcom's mainframe software division. This integrated P&L approach is why support feels different and why product bundles are so heavily pushed.

The Real-World Impact on Customers and Strategy

So, what does this mean for you, the person responsible for keeping the lights on and the hackers out?

First, vendor management just got more complex. Your Symantec account rep is gone. You're now dealing with Broadcom's sales machine. Be prepared for conversations that start with your entire software spend, not just your security needs. Negotiating a simple renewal is a thing of the past.

Second, the technology roadmap is more predictable, but less agile. You'll see steady improvements in core detection engines and cloud management, but don't expect flashy, niche features aimed at small businesses. The development is geared toward the needs of global, complex enterprises.

Finally, this acquisition was a trigger event for many organizations to re-evaluate their entire security vendor strategy. For some, sticking with the (now) Broadcom stack made sense due to deep integration and sunk costs. For others, it was the final push needed to migrate to a newer platform like CrowdStrike, Microsoft Defender, or a suite from Palo Alto Networks. I've seen both outcomes.

The migration projects are where the pain lives. I consulted for a mid-sized manufacturing firm that had been on SEP for 15 years. Their migration to a new platform took 18 months and uncovered dozens of legacy servers and applications that only worked because of some obscure Symantec policy setting. The Broadcom acquisition was the budget catalyst they needed to finally modernize, but the process was brutal.

Answers to the Tough Questions IT Teams Are Asking

My company still uses "Symantec" software. Who do I call for support?

You need to contact Broadcom support. All enterprise product support channels migrated. If you're using an endpoint, web gateway, or DLP product, start at the Broadcom support portal. The old Symantec enterprise support portals are defunct. Keep your legacy contract numbers handy—they'll help the new support team locate your account.

We have perpetual licenses for Symantec Endpoint Protection. Can we still renew them?

Almost certainly not. Broadcom eliminated perpetual licensing for these products. Your renewal will be a conversation about converting to a subscription model, likely as part of a broader bundle (e.g., Endpoint Security + DLP). This shift often comes with a cost increase. Start this dialogue with your Broadcom representative well before your license expires to avoid disruption.

Is the technology behind Broadcom Endpoint Security still the same as old Symantec?

At its core, yes. The engine, the threat intelligence (SONAR, Insight), and the basic architecture are the inherited Symantec technology. However, under Broadcom, development has continued. You'll see updates focused on cloud management consoles, better integration between the acquired products, and performance enhancements. It's the same foundational house, but Broadcom is doing renovations and insisting you pay a monthly HOA fee instead of owning it outright.

Should we consider moving away from the Broadcom (ex-Symantec) stack now?

It's not a yes/no question. Build a business case. List your pain points: is it cost, support experience, lack of specific modern features (like extended detection and response), or simply a desire to consolidate vendors? Then, run a proof-of-concept with one or two alternatives. The acquisition itself isn't a reason to flee, but the associated changes (licensing, support model, strategic direction) might be. For large, entrenched deployments, the cost and risk of migration may outweigh the benefits of moving. For smaller deployments, it's often the perfect time to switch.

What happened to all the Symantec security researchers and engineers?

This is a sensitive point. Following the acquisition, Broadcom, true to its form, undertook significant restructuring. Many roles, particularly in non-R&D functions like marketing and general administration, were made redundant. However, key engineering and threat research teams were retained to maintain and develop the core products. The "brain trust" for the technology is still there, but operating within a much leaner, financially-driven corporate structure. The public-facing threat research output diminished noticeably in the years immediately following the deal.

The bottom line is this: Symantec, as an independent enterprise security vendor, no longer exists. Its spirit lives on in the code and customers of Broadcom's cybersecurity division. Whether you stay or go depends on how that new reality aligns with your company's budget, risk tolerance, and strategic direction. The one mistake you can't afford is to do nothing and assume it's business as usual. It's not.