Cybersecurity's next winners

Specialist Service Partners and MSPs/VARS

Wednesday 20 March 2024


Cyber security is notoriously high-growth and acyclical so it rightly attracts significant attention from investors. However, the space is increasingly complex and rapidly changing. Based on our recent work, two categories in particular stand out for the potential to generate significant returns: Specialist Service Partners and Managed Service Providers (MSPs)/Value Added Resellers (VARs).

Specialist Service Partners

As the sophistication of threats and size of attack surfaces have increased, cyber security tooling has proliferated, specialised, and fragmented. In-house teams are increasingly relying on specialist support across the design and build phases of core cybersecurity solutions, and to a lesser extent, for ongoing support. Specialist service providers are very well positioned given:

Strong domain expertise with tangible track records at blue-chip clients is scarce – and this is critical in an industry where cyber risk minimization is the primary objective. Quality wins and Specialist Service Partners can often position themselves as leaders.
As Enterprise and Large Corporate cyber teams mature, they increasingly seek best-of-breed and more specialist service provision for critical applications. Independent firms typically have the closeness and agility that broad-line or offshore providers lack.
Software vendors, such as Microsoft, Crowdstrike and Okta are increasingly relying on channel and service providers for client success instead of in-house professional services. They particularly favour independents, especially those exclusive to their platform/s, which can drive high volume, high-value pipeline. 


These businesses target the highest growth segments - mid-market and large corporates - where adoption growth is rapid, and clients need the most support. Critically, due to their limited in-house capabilities, these customers tend to have greater dependence on their partners and willingness to adopt a recurring managed service model. MSPs & VARs are increasingly well-positioned to win here given:

  1. They typically have the largest share of outsourced IT spend and have “the ear” of the CTO.
  2. Supply-side technological improvements allow for “mass-market” adoption of technologies (e.g., Microsoft’s rapid rise in SIEM with Sentinel). These are standardised enough that MSPs can take on the propositions with scale.
  3. Cyber remains closely tied to, and embedded within, wider IT services and transformations, such as Cloud and data strategy. As a result, being able to provide integrated solutions is critical.
  4. They have well-honed high-scale and low-cost delivery models.

It is important to note that for both these groups, M&A is a very attractive means to accelerate growth. Service provision remains relatively fragmented, and M&A can drive new geographic and/or service line offerings with significant revenue and cost synergies.


If you are looking at any of these areas, or refreshing your views on the wider Cyber ecosystem, get in contact with our experts:

Chris Woodland, Partner

Ewan Parry, Partner

Mark Blackwell, Partner

Oleg Tschernizki, Partner

Steve Cantin, Partner

Phil Craig, Associate Partner

Read Publication

OC&C Contacts:

Suggested Reading

Monday 25 June 2018

Putting analytics to work

Big Data and Advanced Analytics have been 'hot' topics for some time now. It has become clear that the most successful companies spend more on advanced analytics and, as a result, outperform their peers

Subscribe to our Insights

Find out more with our newsletters and insights 


We use cookies to give you the best possible experience on our website. By continuing to browse this site, you give consent for cookies to be used. For more details please read our Cookie policy.