Summary
Robotic process automation (RPA) uses software bots to run rule-based digital tasks across applications and user interfaces. Published market estimates diverge widely, with starting values from USD 4.7 billion 3 to USD 28.31 billion 1, so no single market size is reliable. The strongest verified signal is vendor growth: UiPath reported revenue of USD 1.611 billion, up 13 percent 5, and annual recurring revenue (ARR) of USD 1.853 billion, up 11 percent 56. Enterprise priority is high. Gartner reports that 90 percent of large enterprises treat hyperautomation as a priority, yet fewer than 20 percent have mastered measuring results 10. The main risks are security, delivery failure and the shift toward AI-based alternatives to deterministic bots 812. Independent performance benchmarks, cost data and competitor financials were not found. Our outlook is continued growth with stronger governance requirements, and buyers will need to test vendor AI claims against measured results.
Key findings
-
1
Market size estimates are not consistent enough to rely on a single figure
Starting estimates for the global market range from USD 4.7 billion 3 to USD 28.31 billion 1, and forecast CAGRs differ, at 24.20 percent 1 and 29.0 percent 3. The gap reflects differing market scope rather than a verified range.
Confidence: High -
2
Leading vendor shows double-digit growth in revenue and recurring revenue
UiPath reported fiscal revenue of USD 1.611 billion, up 13 percent, and ARR of USD 1.853 billion, up 11 percent, with an 83 percent GAAP gross margin 5. The 10-K confirms ARR of USD 1,852.6 million against USD 1,666.1 million a year earlier 6. These are single-company results, not market share.
Confidence: High -
3
Enterprises prioritize hyperautomation but struggle to measure it
Gartner reports that hyperautomation is a priority for 90 percent of large enterprises, but fewer than 20 percent have mastered measuring their initiatives 10. This is a secondary report of a Gartner study and covers hyperautomation more broadly than RPA alone.
Confidence: Medium -
4
Credential handling is a recognized security weakness in bot deployments
Researchers describe poorly configured bots, weak credential management and inadequate governance as cyber risks 12. Hard-coded credentials in bot scripts are described as one of the most common lapses 1214. US federal guidance requires that credentials stored in attended bots cannot be exposed 13.
Confidence: Medium -
5
Delivery failure figures are secondhand and unconfirmed
A consultancy article cites a Deloitte survey in which 63 percent of 400 enterprises experienced delays on RPA projects, and an EY estimate that 30 to 50 percent of initial implementations fail 15. The original reports were not retrieved and their dates are unconfirmed.
Confidence: Qualitative -
6
Vendor claims about AI adoption are not independently verified
UiPath management says 90 percent of customers above USD 1 million ARR use its AI products and that AI product ARR is nearly USD 200 million 7. These are company-reported figures, presented here as vendor claims.
Confidence: Qualitative
11. Industry definition and scope
This report covers robotic process automation, meaning software that configures bots to carry out rule-based tasks in business applications. The source set does not give one formal definition, so this description is the writer's interpretation of how the market is discussed in the sources. Bots are grouped as attended bots, which work alongside a user, and unattended bots, which run without direct supervision 13. This distinction matters for security because the two types carry different credential and approval controls 13.
The market is described in overlapping terms. Some publishers size RPA on its own 1234, while Gartner discusses hyperautomation, a broader category that includes RPA 10. Figures in this report refer to RPA unless the source states otherwise. Gartner also distinguishes deterministic RPA from AI-based approaches that may replace it 8, and this report treats that shift as a key boundary issue.
Geographic scope is global, with North America data where a source provides it 24. Financial data covers UiPath only, the one vendor with verified results in the source set. Market figures are for the latest available data, and forecasts are labeled as forecasts throughout.
22. Market size, structure and value chain
Published estimates of the global RPA market differ by a factor of about six for the starting year. Precedence Research values the market at USD 28.31 billion 1, Fortune Business Insights at USD 22.58 billion 2, Mordor Intelligence at USD 5.67 billion 4, and Grand View Research at USD 4.7 billion 3. Forecast values are also inconsistent, with Precedence projecting USD 247.34 billion at a 24.20 percent CAGR 1 and Grand View projecting USD 35.8 billion at 29.0 percent 3. The sources do not explain these differences in full, so we do not average them or present a single market size.
Regional and segment data are more limited. Fortune Business Insights states that North America accounted for 56 percent of the global market 2. Mordor Intelligence describes North America as the largest market, Asia Pacific as the fastest growing, and cloud subscriptions as the fastest-growing segment 4. The cloud subscription claim is an estimate from one publisher and has not been corroborated.
The value chain includes software platform vendors, implementation partners and consultancies, customers that buy licenses or subscriptions, and security and identity functions that now govern bot credentials 14. Revenue is largely recurring. UiPath reports ARR of USD 1.853 billion and an 83 percent GAAP gross margin 5, which is consistent with a subscription model, though the source does not split revenue by license type. Our interpretation is that implementation services form a significant but unmeasured share of total spend, because no source quantifies services revenue.
- Global RPA market, starting estimate 28.31USD billion Observed Global, Latest available data [1]
- North America share of global RPA market 56percent Observed Global, Latest available data [2]
| Publisher | Starting estimate (USD billion) | Later estimate or forecast (USD billion) | Stated CAGR | Value type |
|---|---|---|---|---|
| Precedence Research [S1] | 28.31 | 247.34 (forecast) | 24.20% (forecast) | Starting value observed; later value forecast |
| Fortune Business Insights [S2] | 22.58 | 110.06 (forecast) | Not stated in source | Starting value observed; later value forecast |
| Grand View Research [S3] | 4.7 | 35.8 (forecast) | 29.0% (forecast) | Starting value observed; later value forecast |
| Mordor Intelligence [S4] | 5.67 (estimated) | 8.12 (estimated) | Not stated in source | Both values estimated |
Figures are shown side by side only to illustrate divergence. No blended estimate is offered.
Assumptions behind these figures
- Each publisher's scope and base year are taken as stated; they have not been reconciled.
33. Customers, demand and adoption
Demand is concentrated among large organizations. UiPath reports that customers with ARR of USD 100 thousand or more represented 89 percent of its fiscal revenue 6. This is one vendor's customer base, so it shows the profile of its buyers rather than the whole market. Gartner reports that hyperautomation is a priority for 90 percent of large enterprises 10, which supports the view that enterprise intent is high.
Gartner also finds that fewer than 20 percent of enterprises have mastered measuring their automation initiatives 10. In our reading, this gap between priority and measured results is the central adoption issue, because buyers struggle to prove value and to justify expansion. Gartner expects 30 percent of enterprises to have automated more than half of their network activities by a future date, up from under 10 percent in an earlier period 10. This is a forecast and should be treated as an expectation rather than a measured trend.
Barriers are documented but dated. In a survey cited in a systematic review, 40 percent of respondents cited the inability to analyze process priorities as an organizational barrier, and 37 percent cited higher implementation costs as a financial barrier 11. The survey is older than the latest data, and the review does not provide its sample. Buying criteria that the sources support include measurable outcomes, security of bot credentials 13 and the ability to govern AI-enabled automation 78. Vendor reporting that 90 percent of customers above USD 1 million ARR use AI products 7 is a vendor claim and suggests that AI features are shaping purchases, but it does not show how buyers evaluate them.
44. Competitive landscape and key players
Gartner's latest Magic Quadrant for RPA evaluated 13 enterprise vendors, as reported by a trade outlet 8, and its Critical Capabilities research assessed 13 products against four common use cases 9. Gartner positions Critical Capabilities as a complement to the Magic Quadrant that focuses on detailed functional requirements 9. The source set reports vendor counts only. Vendor positions and the named leader list were not retrieved, so this report cannot rank providers.
Provider types differ in business model. Standalone RPA specialists sell bot platforms and orchestration. Broader automation and productivity suites bundle RPA with other tools, and this is reflected in the pack's named comparison set of Automation Anywhere, Microsoft Power Automate and Pega . No financial data for these companies was retrieved, so we cannot compare market share, margins or growth. Concentration cannot be measured from the sources.
UiPath is the only vendor with verified financials in the set. It reported fiscal revenue of USD 1.611 billion, up 13 percent 5, and ARR of USD 1.853 billion, up 11 percent 56. Its reported growth in AI product ARR, nearly USD 200 million, is management's claim 7. Gartner's view that AI offers alternatives to deterministic RPA 8 indicates competitive pressure on bot-based models, though the source does not quantify its effect on any vendor.
Competitive comparison is limited to vendor counts and one vendor's financials.
Assumptions behind these figures
- Named comparison vendors other than UiPath are identified in the source set only as gap items, so they are not evaluated.
55. Technology, operations and workforce
Architecture separates attended and unattended bots, which need different controls 13. Bots operate as non-human identities that need authentication, access controls and privileged session monitoring 14. Vendors are extending bots with AI components. UiPath lists agentic, intelligent document processing and Maestro products within its AI portfolio 7. Whether these capabilities perform as claimed is not verified in the source set.
No independently verified uptime, latency, throughput or defect-rate benchmarks for RPA bots were found. Cloud and compute cost claims are also unsourced. Operating cost and total cost of ownership therefore cannot be compared across deployment models. Our interpretation is that buyers should request their own measurements of bot reliability and run costs before committing to scale.
Workforce data is also missing. No current primary survey on RPA skills demand, talent supply or total cost of ownership was retrieved. The sources imply that governance, identity management and process measurement are growing needs 1014, but they do not quantify the skills supply. Business-model change is visible in vendor reporting of AI products 7, while the operational effect on staffing is not documented.
Performance and workforce claims are treated as unverified unless an independent source is cited.
66. Regulation, standards, risk and sustainability
The most specific rule set in the source set is United States federal security guidance. The General Services Administration's RPA security guidance, Revision 3, states that credentials stored in attended bots cannot be exposed and sets controls for secure credential storage 13. It also distinguishes attended and unattended bots and requires approval from an information system security officer for simple bots 13. The source describes this as federal government guidance. The source set does not establish whether these controls are binding outside federal systems, so we treat them as binding for federal use only and as a reference standard elsewhere.
Security risk is the most consistent theme. Researchers state that poorly configured bots, weak credential management and inadequate governance make RPA systems vulnerable to cyber threats 12. Hard-coded credentials are described as one of the most common lapses 12, and commentary notes bots embedding hardcoded passwords or API keys in scripts or configuration files 14. Breach statistics from some blogs could not be traced to primary publications and were excluded.
Privacy, ethics and sustainability are not covered by sourced data. No environmental impact figures for RPA were found. Delivery risk is also reported. A consultancy article cites a Deloitte survey in which 63 percent of 400 enterprises experienced delays on RPA projects, and an EY estimate that 30 to 50 percent of initial implementations fail 15. These figures are secondary, undated and unconfirmed, so they should be used as indicative only. Non-US regulatory regimes, including privacy laws, were not reviewed in the source set.
- RPA projects reporting delays and missed deadlines 63percent of 400 enterprises surveyed Observed Global, Undated survey as cited [15]
Jurisdiction for binding rules is the United States federal government. Other requirements are not established by the sources.
Assumptions behind these figures
- The Deloitte figure is taken as reported by a vendor article and is not verified against the original survey.
77. Challenges, opportunities and case examples
The main constraints are delivery reliability, measurement, security and the cost of changing processes. Gartner's finding that few enterprises measure automation results 10 and the reported delay and failure rates 15 point to weak planning rather than weak technology. Security controls for credentials and non-human identities 1314 add cost and governance work that some buyers may underestimate.
Opportunities follow the demand signals. Enterprise priority is high 10, and vendors report growth and AI attach rates 57. Gartner's view that AI offers alternatives to deterministic RPA 8 suggests that providers able to combine bots with AI and governance may gain position, though this is an interpretation rather than a measured result.
Case examples are limited. The most concrete example is UiPath, whose revenue, ARR and AI product results are reported in company filings and earnings remarks 567. The source set contains no independently verified deployment case with outcome metrics, so comparable examples were limited. Named comparison vendors Automation Anywhere, Microsoft Power Automate and Pega are identified only in gap notes, so they are not used as evidence of performance.
Case examples are restricted to sourced company reports. Vendor-reported outcomes are labeled as claims.
88. Outlook and strategic implications
In the near term, the market is likely to keep growing, though the scale of growth is uncertain because published estimates differ widely 13. Vendor results show that revenue and recurring revenue are rising 56. Gartner's forecast that 30 percent of enterprises will automate more than half of network activities by a future date 10 points to wider adoption, but it is a forecast and does not establish the rate.
In the medium term, the main shift is likely to be from deterministic bots toward AI-enabled automation 78. This is an evidence-based interpretation: Gartner describes an inflection point 8, but the source set does not show how quickly existing bot estates will change. Security and governance requirements are likely to tighten as bots become non-human identities 1314.
Implications for stakeholders are direct. Buyers should require measured results, reliability data and a credential-security design before scaling, and should not rely on vendor AI claims without evidence 710. Vendors should publish independently testable performance and security information. Regulators and standards bodies have an opportunity to clarify whether federal credential rules apply more widely 13. Consultancies and researchers should publish original delivery and cost studies, since the current failure and delay figures are secondhand 15.
Assumptions behind these figures
- Scenarios are the writer's interpretation of the cited evidence, not forecasts from the sources.
99. Conclusion
The RPA market is growing, but its size is uncertain and its performance is poorly measured. The most defensible takeaways are that enterprise priority is high, credential security is a recognized weakness, and independently verified cost and reliability data is still missing.
How this was built
This report relies on the cited sources. Market figures are shown with their publisher and value type, and vendor claims are labeled. Several sources are secondary or undated, and the report does not offer a single market size or any performance benchmark that the sources do not support.
Limits to keep in mind
- Market size estimates diverge widely because scope differs. The Precedence Research headline cites a larger starting figure than its own fact value, so the source is internally inconsistent [S1]. No single verified market size is available.
- No independently verified uptime, latency, throughput or defect-rate benchmarks for RPA bots were found.
- No independently audited cloud or compute cost data for RPA deployments was found, and cloud cost claims are unsourced.
- The 30 to 50 percent failure rate and 63 percent delay figure come from secondary citations of EY and Deloitte studies. Original reports were not retrieved and dates are unconfirmed [S15].
- Breach and incident statistics from some blogs could not be traced to primary publications and were excluded.
- No primary, current survey on total cost of ownership, operating cost or skills demand for RPA was retrieved.
Sources
-
1
Robotic Process Automation (RPA) Market Size Expands from USD 35.27 Bn in the latest period to USD 247.34 Bn by the forecast horizon
globenewswire.com -
2
Robotic Process Automation Market Size, Share, Industry Report, latest edition
fortunebusinessinsights.com -
3
Robotic Process Automation Market Size & Share, Forecast Report, latest edition / Robotic Process Automation Market Size, Growth Report, forecast period
grandviewresearch.com -
4
Robotic Process Automation Market Size & Outlook, latest edition
mordorintelligence.com -
5
UiPath Reports Fourth Quarter and Full Year Fiscal Results, latest fiscal year
businesswire.com -
6
UiPath 10-K Annual Report, fiscal year ended January 31, latest filing
ir.uipath.com -
7
UiPath Reports Fourth Quarter and Full Year Fiscal Results (earnings prepared remarks)
d1io3yog0oux5.cloudfront.net -
8
Gartner Magic Quadrant for RPA coverage (Process Excellence Network), latest edition
processexcellencenetwork.com -
9
Gartner Critical Capabilities for Robotic Process Automation
gartner.com -
10
Hyperautomation a Priority for 90% of Large Enterprises: Gartner
aibusiness.com -
11
A systematic literature review on Robotic Process Automation security
arxiv.org -
12
Towards a Secure Robotic Process Automation Ecosystem: Threats and Countermeasures
ijgis.pubpub.org -
13
Robotic Process Automation (RPA) Security, GSA CIO-IT Security 19-97 Revision 3
gsa.gov -
14
The Impact of Robotic Process Automation (RPA) on Identity and Access Management
thehackernews.com -
15
Deloitte and EY RPA project failure and delay findings (as reported by Allata)
allata.com