Cybersecurity’s next winners – Specialist Service Partners and MSPs/VARS

Cyber security is notoriously high-growth and acyclical so it rightly attracts significant attention from investors. However, the space is increasingly complex and rapidly changing. Based on our recent work, two categories in particular stand out for the potential to generate significant returns: Specialist Service Partners and Managed Service Providers (MSPs)/Value Added Resellers (VARs).

Specialist Service Partners

As the sophistication of threats and size of attack surfaces have increased, cyber security tooling has proliferated, specialised, and fragmented. In-house teams are increasingly relying on specialist support across the design and build phases of core cybersecurity solutions, and to a lesser extent, for ongoing support. Specialist service providers are very well positioned given:

• Strong domain expertise with tangible track records at blue-chip clients is scarce – and this is critical in an industry where cyber risk minimization is the primary objective. Quality wins and Specialist Service Partners can often position themselves as leaders.
• As Enterprise and Large Corporate cyber teams mature, they increasingly seek best-of-breed and more specialist service provision for critical applications. Independent firms typically have the closeness and agility that broad-line or offshore providers lack.
• Software vendors, such as Microsoft, Crowdstrike and Okta are increasingly relying on channel and service providers for client success instead of in-house professional services. They particularly favour independents, especially those exclusive to their platform/s, which can drive high volume, high-value pipeline.

MSPs & VARs

These businesses target the highest growth segments – mid-market and large corporates – where adoption growth is rapid, and clients need the most support. Critically, due to their limited in-house capabilities, these customers tend to have greater dependence on their partners and willingness to adopt a recurring managed service model. MSPs & VARs are increasingly well-positioned to win here given:

1. They typically have the largest share of outsourced IT spend and have “the ear” of the CTO.
2. Supply-side technological improvements allow for “mass-market” adoption of technologies (e.g., Microsoft’s rapid rise in SIEM with Sentinel). These are standardised enough that MSPs can take on the propositions with scale.
3. Cyber remains closely tied to, and embedded within, wider IT services and transformations, such as Cloud and data strategy. As a result, being able to provide integrated solutions is critical.
4. They have well-honed high-scale and low-cost delivery models.

It is important to note that for both these groups, M&A is a very attractive means to accelerate growth. Service provision remains relatively fragmented, and M&A can drive new geographic and/or service line offerings with significant revenue and cost synergies.

If you are looking at any of these areas, or refreshing your views on the wider Cyber ecosystem, get in contact with our experts.