Business of Tech: Daily MSP News & IT Services Analysis

The episode highlights a persistent governance gap in how MSPs extend trust and standing access to third-party vendors within client environments. Key mechanisms such as Microsoft’s partner consent process and delegated credentials mean clients rarely have visibility or control over which vendors or tools their MSPs connect to their systems. Incidents involving N-able, ConnectWise, and MSP Process demonstrate how these invisible dependencies increase client exposure without their explicit approval.

Recent breaches illustrate the risk: ConnectWise Cloud Backup affected over 2,300 MSP partners, with Huntress noting suspicious activity in nearly 1,000 accounts and 300 confirmed intrusions. Similarly, MSP Process lost ap...

MSPs are experiencing a structural transfer of accountability for AI agent governance from technology vendors to the service provider level. Microsoft’s assignment of Entra identities to Copilot Studio agents and the GTIA’s Managed Intelligence Alliance setting standards for AI-as-a-service represent a market shift—placing responsibility for risk, oversight, and control directly on MSPs and IT service providers, rather than solely on platform vendors.

The episode’s primary evidence centers on the operational requirements outlined by David Smith of Tekscape: agent identity management, restrictive permissions, thorough audit trails, and an off switch. Smith stated these elements are nece...

The episode highlights a structural shift where software instability and unpredictable metered AI pricing introduce direct margin and accountability risks for MSPs. This shift is driven by advances in AI tools that both accelerate the discovery of software vulnerabilities and enable vendors to meter AI usage, impacting platforms and services resold or managed by MSPs. Companies cited include N-able, Microsoft, ConnectWise, OpenAI, and Anthropic, whose evolving product practices and pricing models exemplify increased operational volatility for IT service providers.

According to episode analysis, N-able’s hosted N-central platform experienced an outage after public disclosure of over 30 alleged vu...

The key market dynamic is the decline of feature differentiation among MSP software platforms, driven by AI making new features inexpensive and quick to replicate. This has led incumbent vendors to focus on securing long-term customer commitments, while challengers enter with lower prices and more integrated offerings. Market power now increasingly concentrates at renewal, where MSPs can negotiate flexibility rather than feature sets.

Omdia reported the global RMM and PSA market reached $600 million in Q2, up 15.6% year-over-year. NinjaOne grew its market share to 20%—matching ConnectWise—after a 53% increase in RMM revenue, while Kaseya fell to 18.8%. Flamingo is offe...

The episode highlights a fundamental shift towards automation and agentic workflows in IT service delivery, as described by Slide and its leadership. This shift is exemplified by the move from traditional, manual “what” work in IT and software engineering to task automation at a machine or agentic level. Slide’s adoption of internally developed SaaS backup for Microsoft 365 and accelerated product roadmaps—enabled by recent AI advancements—reflects this industry-wide movement toward leveraging technology for operational speed and efficiency.

The most consequential development discussed centers on the patent litigation between Slide and Kaseya/Datto. According to public records an...

The core structural shift identified is the widening gap between increased AI spending by MSPs and measurable business value. According to TD SYNNEX’s global survey of over 1,500 technology resellers, two-thirds are accelerating AI investment, but only one in five derives meaningful revenue. The value of AI does not come from buying licenses but from rebuilding specific processes—something most MSPs have yet to achieve at scale.

A key development is consolidation-driven investment: Lyra Technology Group, backed by Evergreen, is embedding over 50 AI engineers within its MSP portfolio by 2027. This enables rapid in-house process redesign and service inno...

A structural gap persists between the promotion of AI solutions and their demonstrable, value-based adoption within the managed services sector, resulting in unclear accountability and risk of misaligned incentives. Vendors such as Microsoft and Anthropic push seat-based AI sales (e.g., Copilot, LLM services), but few MSP-led case studies exist to verify real client impact. Most reported usage centers on basic, assistive functions—despite a marked increase in AI discussion among MSP communities.

The most notable finding is the disparity between AI licenses sold and those actively used, with implementation typically limited to automation of simple tasks su...

The episode highlights a structural shift in which MSPs face increased contractual and operational risk as vendors embed AI agents in managed IT tools by default, often without explicit customer agreements or added cost. This practice blurs accountability for AI-driven actions and outcomes. Key examples include MSP360 and Omnissa, which have activated AI agents to automate support and administrative functions across their platforms without requiring provider or customer sign-off.

MSP360’s MCP server connects its backup platform to Claude and ChatGPT, allowing agents to diagnose and remediate issues at no extra charge. Omnissa offers AI agents for ta...

A structural margin pressure is emerging as AI manufacturers bill MSPs for agent activity, while MSPs are paid by clients for resolved outcomes. Companies like ConnectWise and Super IT charge based on volumes of AI-driven attempts (agent activity, token usage), creating a financial disconnect—since MSP contracts tie revenue to tickets actually solved and kept closed, not the process steps taken.

ConnectWise introduced an RMM agent that automates diagnostics and ticket triage within its platform. Company-supplied data claims substantial efficiency gains: for one partner, 99% of over 7,000 tickets were evaluated in 30 days, but these metrics center on activity an...

The episode centers on a structural shift in technology risk management: liability for AI decisions is increasingly transferring downstream from technology vendors to MSPs and their clients. Insurers are moving to exclude generative AI from standard liability policies, while California regulators have mandated new automated decision-making rules with specific risk assessment and audit requirements for certain businesses operating above defined thresholds. Product licensing from major AI manufacturers such as OpenAI and Anthropic continues to disclaim liability, relying instead on "as is" terms that put post-deployment legal exposure on service providers and end users.

The most consequential development...

The episode identifies a structural shift: traditional patching is no longer sufficient protection as the act of releasing a patch now informs and accelerates attackers, particularly with the use of AI. When vendors publish fixes, attackers can promptly identify and exploit not-yet-patched systems at scale. Companies and data sources underlying this shift include OpenAI, Microsoft, CISA, and the Verizon 2026 Data Breach Investigations Report.

The most consequential development is Verizon’s finding that vulnerability exploitation now leads breach causes at 31%, overtaking credential theft and phishing. The percentage of fully remediated exploited flaws has declined to 26%, and the average ti...

The episode highlights the increasing shift of operational risk and accountability to MSPs as AI-powered agents become integrated into client environments through white-label and usage-based models. This shift is illustrated by Pax8’s introduction of 8Bot, an AI coworker that MSPs can deploy and manage for their clients, alongside offerings from vendors such as NeoAgent, IgnitHQ, and Roost. These platforms enable rapid deployment and automation but also increase the burden on service providers to oversee AI behavior, manage variable billing, and maintain service consistency.

Key evidence comes from Pax8’s strategy for 8Bot, which is designed for part...

The episode documents a structural shift in the managed IT services sector: automation and AI are displacing both entry-level and advanced technical work, eroding the traditional skills ladder within MSP operations. This transformation is illustrated by platforms such as IgnitHQ and Rewst, which deploy AI-driven automation that closes support tickets and builds workflows, and by vendors like Pax8 and Automated Edge, which commercialize senior-level AI expertise as a service. Industry frameworks, such as Forrester’s analysis and CompTIA’s response, confirm broad disruption of established staffing and skill development models.

IgnitHQ reports that one-quarter of its partners now...

The episode exposes a governance gap in risk management and asset responsibility for internet-facing systems—especially websites—within managed service agreements. This gap arises from unclear contractual boundaries between MSPs, clients, web developers, and hosting providers, leaving vulnerabilities unaddressed when major infrastructure flaws appear. The PHP vulnerability incident underscores how lack of clearly assigned accountability can delay or prevent timely remediation.

Two severe flaws in PHP, present since version 5 and with a severity of 9.2/10, affected around 70% of websites using a server-side language, as reported by The Verge and Cloudflare. Exploits began before official patches or public disclosure, and...

The integration of generative AI into small business environments is driving a shift toward localized infrastructure management. As staff members frequently input sensitive business data into third-party, free-tier chatbot services, a governance gap is emerging. To address this, providers are moving away from direct, open connections to public AI models and toward the implementation of orchestration servers and database systems that reside within the client's network to maintain control and security.

Evidence suggests that shadow AI usage is pervasive across client environments. Assessments performed using desktop agents indicate that employees are already utilizing AI tools for daily...

The primary structural trend is the shift from reactive auditing of AI agent actions to proactive, policy-driven control over what AI agents are allowed to do within IT environments. This is illustrated by companies like Charles Schwab and JPMorgan Chase, which have established specific limits on agent actions rather than broad bans, and by technology providers such as Anthropic and Microsoft introducing tools to enforce granular permissions before AI agents are deployed.

Evidence underscores this shift: Acronis found AI agent tools on 9.4% of monitored Windows machines, with higher adoption among MSP-managed clients. Financial institutions are restricting critical...

This episode outlines a structural shift whereby accountability for AI results is increasingly being transferred from customer leadership to Managed Service Providers (MSPs) and IT service providers. This transfer is being accelerated by internal pressure on client organizations to report AI success while reliable performance metrics remain elusive. Evidence from Futurum Group’s “The New AI Workforce” report and actions by vendors such as Dell and Accenture demonstrate how responsibility and reporting for AI are consolidating under technical teams, often with insufficient checks and unclear governance boundaries.

Concrete findings show a notable gap between reported and actual AI out...

The episode highlights a structural shift in vulnerability management, where accelerated discovery of software flaws—driven by AI—has outpaced the ability to remediate. Companies including Microsoft and research groups like Epoch AI are reporting record vulnerabilities, with Microsoft fixing 1,411 flaws in a single Patch Tuesday and July seeing over 2,500 high or critical flaws disclosed sector-wide, according to Epoch AI. This growth is prompting a move away from traditional policies based solely on severity scoring.

Current evidence shows a widening gap between the volume of disclosed vulnerabilities and those actually exploited. While Anthropic’s AI identified more than 1...

The episode details an ongoing shift toward upstream platform control and infrastructure dependence in the managed IT services sector. Centralized platforms, such as Pax8’s 8OS and governance initiatives from the Channel Trade Association (GTIA), increasingly control AI, access rights, consent, and management tooling, concentrating privileged identities and access points within vendor environments rather than those of MSPs or clients.

A key case highlighting the risk is the ConnectWise Cloud Backup incident, where one credential enabled access to 173 Microsoft 365 tenants in two hours. This credential, solely managed by the vendor, had broad, ongoing access, and MSPs lacked in...

A persistent governance gap is emerging in organizational AI implementations, especially among clients of MSPs. Despite the integration of AI in regulated sectors like wealth management and construction, most MSPs are neither engaged at project inception nor maintain oversight through formal policies or audit-ready documentation. Specific examples include deployments using technologies such as Claude, where neither roles for approving AI configurations nor processes for tracking data access are uniformly established.

A key development is the insufficiency of existing evidence and controls around AI use. Fewer than 20% of current client projects have written AI policies, and among 53 surveyed...

AI service pricing for managed IT services is increasingly unstable due to manufacturers’ ability to change subscription deliverables and costs unilaterally. OpenAI’s reduction of its $200 plan benefits and the shifting terms in leading AI offerings, noted by SemiAnalysis and Omdia’s analysts, exemplify how MSPs risk absorbing margin losses when vendor pricing changes are passed downstream with little notice or warning.

SemiAnalysis found that leading AI subscription services are often subsidized, using more infrastructure than they generate in direct revenue, with Gartner projecting a $5 trillion gap between required AI infrastructure investment and realistic revenue through 2030. The sustai...

The episode highlights a structural split within the managed services market, defined by how different segments are responding to rising economic uncertainty, AI experimentation, and shifting revenue expectations. Omdia’s recent partner sentiment polls reveal a divergence: approximately 44% of channel partners expect their revenue to fall, while 41% anticipate growth—signaling a bifurcation rather than a broad recession. The episode identifies this as a period of market stress with implications similar to the post-2008 transition from break-fix to recurring revenue, but now driven by new pressures and emerging technologies such as AI.

Key evidence centers on AI-related services, wher...

Rising component costs and shrinking PC shipments are driving a shift toward longer device lifecycles and complicating replacement planning for MSPs. According to Omdia and IDC, global shipments of desktops, notebooks, and workstations have dropped over 20% year over year, driven by higher average prices—especially for memory and storage, which now make up close to 40% of device component costs. Vendors like Gigabyte and AMD are reintroducing DDR4-era hardware to address cost pressures, while memory suppliers such as Micron report sharply increased revenues despite fewer units sold.

The evidence shows a clear disconnect: as overall hardware purchases de...

A central structural development is the shift of verification, remediation, and risk management responsibilities from AI vendors to downstream parties, notably MSPs and their clients. Companies like OpenAI and Anthropic are issuing large volumes of AI-generated outputs—ranging from research papers to vulnerability reports—without thorough internal vetting, pushing the burden of review and potential incident response onto service providers and end-users.

OpenAI released 722 AI-generated mathematics manuscripts, acknowledging that many lack formal verification and that only about 40% include machine-checkable proofs, according to The Verge. Researchers note the process of verifying these outputs could take years. Similarly, Anthropic’s OSS...

The episode reveals a governance gap between mounting cybersecurity requirements and the operational realities facing MSPs serving charter schools and nonprofits. Charter Technology Solutions (CTS) exemplifies how regulatory mandates, cyber insurance controls, and evolving client demands confront fixed budgets and unique seasonal workloads in mission-driven verticals. Addressing these pressures necessitates major adaptations to vendor licensing models and new service design approaches to maintain basic security.

CTS reports managing over 100 school clients, deploying a lean security stack focused on MDR (addressing endpoint and cloud threats), email security, security awareness training, and cloud backup. This shortlist stems from the...

The episode highlights the risk of documentation mismatches and liability transfer within MSP mergers and acquisitions, using the example of MSP+—a consultancy formed by the 2023 merger of five advisory firms. Unclear responsibility for a $700,000 SBA loan and conflicting financial representations during the merger process led to litigation, underscoring how misaligned documents can result in legal and financial exposure.

The central development is MSP+ suing its former CEO Adam Bielanski, his wife, and related companies, alleging misrepresented financials and inappropriate transfer of debt. Court documents reveal that while the merger agreement designated the loan as company debt, th...

Vendor incentive structures are undergoing a significant realignment, shifting both margin pressure and financial risk toward MSPs and IT service providers. Microsoft’s recent policy change—eliminating flat CSP renewal rebates as of October 1 in favor of rewarding seat growth and AI workload adoption—directly illustrates this trend. Techaisle’s survey of 5,450 partners highlights the disconnect: 72% of incentive payouts occur at deal close, but 41% of MSP revenue is linked to renewals, pushing long-term margin risk downstream to the provider.

Evidence from Techaisle shows traditional partner categories (VAR, MSP, SI) no longer predict operational models. Instead, providers are moving t...

Organizations are moving from purchasing commercial software to building their own applications with AI tools, shifting the ongoing maintenance and accountability from vendors to internal teams and MSPs. This creates governance gaps and operational risk that go unpriced, particularly as automation and custom app development become easier for enterprises, small businesses, and IT providers. Evidence comes from McKinsey’s State of AI survey, GoDaddy’s self-built app hosting, and direct MSP case studies.

McKinsey found that 32% of organizations—and nearly half of AI “high performers”—built functionality in-house using AI instead of buying it. GoDaddy now enables deployment a...

Vendors are shifting to usage-based billing for enterprise AI tools, creating information and contract risk as consumption and related costs become less predictable for buyers. Microsoft’s change to Microsoft 365 Copilot Business licenses—sold through the Cloud Solution Provider program—illustrates this, as billing now includes a metered component tied directly to user activity instead of just fixed seat pricing.

From November 2nd, each new Copilot license carries a $10 per-user monthly spending default, adjustable by the customer. This applies to both standalone and bundled licenses, with usage covering features like Copilot Cowork and related APIs. Microsoft frames this d...

The episode highlights a structural shift toward MSPs considering custom-built operational core systems on enterprise platforms, rather than relying purely on traditional packaged PSA (Professional Services Automation) vendors. This approach is illustrated by ITECH Solutions’ decision to migrate from a legacy PSA system—augmented by multiple third-party tools—to a platform built on Microsoft Dynamics, leveraging TechStack as a custom layer for MSP functionality.

A key development discussed is ITECH Solutions’ experience with the limitations of existing PSAs. According to Brian J. Weiss, the lack of mature APIs and aging software architectures led to workflow inefficiencies and cumberso...

The episode highlights a structural gap between projected AI-driven revenue in the channel and the concrete operational changes needed to capture measurable ROI. Industry surveys from Informa MSP 501, McKinsey, and PwC consistently show that while AI adoption rates among managed service providers (MSPs) are high, few organizations have restructured workflows or business models around AI. The focus remains on superficial activity tracking rather than genuine business transformation.

The MSP 501 survey found 57% of providers expect significant AI revenue growth, with 91% reporting some level of adoption. However, McKinsey’s analysis, as presented by IHL Group, shows only 11% of companies ha...

The primary structural shift examined is the move from vendor emphasis on quantity of partner recruitment toward a more nuanced focus on partner program health, accountability, and mutual business growth. This mechanism is highlighted by Dr. Backup’s acquisition by Hosvara, with the new owner, a former MSP operator, prioritizing the effectiveness and sustainability of the partner base rather than purely expanding headcount. The episode examines how explicit disclosure and management of active versus inactive partner numbers—rarely published in the sector—reflects a deeper push toward measurable outcomes and operational performance within indirect sales channels.

The stando...

Correction: In this episode, the name of Arkose Labs was mispronounced. Arkose Labs (arkoselabs.com) is the source of the commentary from founder and CEO Kevin Gosschalk.

A key structural shift identified is the growing governance gap created by AI agents that evade traditional detection and accountability measures. This challenge is exemplified by Meta’s Muse and OpenAI agents, which do not self-identify during interactions. As a result, determining agent activity and risk now depends on disclosures by the developer rather than the asset owner or operator, limiting the visibility and control of MSPs and IT...

The episode highlights a structural shift toward operational reliance on AI agents as service staff rather than support tools, raising new questions about skill degradation, checking mechanisms, and accountability in managed service environments. Shield Technology Partners and Microsoft exemplify this trend by deploying AI operating systems—Shield's Forge and Microsoft's Autopilot—that independently handle substantial parts of the IT support process, in some cases from intake to ticket closure, often without direct human approval or intervention.

According to Shield, its Forge platform is currently resolving approximately half of all actionable help desk tickets across its network of MSPs...

The primary structural mechanism examined concerns the shift in cybersecurity operations for MSPs driven by increased automation and AI-powered platforms, specifically as evidenced by Cynomi’s virtual CISO (vCISO) solutions. This transition signals a migration of both operational workload and expertise from traditional, manual processes toward digitally augmented roles, with significant implications for how accountability and liability are managed within managed security services.

According to the facts presented by Cynomi’s CEO, the company’s recent integration-focused releases enable MSPs to accelerate assessment and compliance processes, claiming reductions from multi-day efforts to under 60 minutes in some cases. The pl...

The structural mechanism highlighted in this episode is the gap between optimism for artificial intelligence (AI) in IT operations and the actual integration of AI as a core operational tool among MSPs. The conversation centers on Auvik’s market activity, including data from its 2026 IT Trends Report and the launch of its Aurora AI agent suite, which aims to operationalize AI in network management. This shift surfaces a reliance on vendor-developed automation tools to address efficiency constraints, while simultaneously raising questions about operational accountability, documentation quality, and risk management as automation expands.

Auvik’s report found that 67% of I...

The ongoing adoption of AI in managed services is exerting downward pressure on service margins and changing how value is delivered and retained. According to discussion with Dr. Gleb Tsipursky and analysis of case studies such as ImageQuest, even MSPs serving small organizations (as few as 8-50 staff) must address this shift. AI-based automation and process optimization reduce the operational cost of service delivery but also risk eroding the provider's pricing power, forcing firms to reevaluate their growth and retention strategies.

The episode details that AI projects frequently fail not due to technology gaps but because of...

Vendor channel programs are structurally organized around metrics and incentives that prioritize initial partner acquisition over long-term partner viability or growth. Analysis of policies and practices at firms like Dr. Backup, Microsoft, and Arctic Wolf highlights that most vendors track and publish partner sign-ups (“joined”) but seldom disclose the ongoing, active partner count or revenue growth among partners. This structural approach creates a visibility gap and misaligns vendor and partner incentives, presenting ongoing governance risk for MSPs and IT providers.

The purchase of Dr. Backup by Hosvara, led by Nancy Henriquez, highlights this disconnect. Public figures claim over...

A growing shift is materializing in the IT services market as software vendors move away from traditional fixed software pricing and towards models based on AI token consumption, effectively redefining the sources of margin and exposing providers to variable cost structures. This transition is embodied by companies such as Flamingo, which has constructed an MSP software suite and prices access at $1 per device per month, including a token allotment, but whose actual profits—and partner costs—are derived from overage on AI token consumption. The fundamental mechanism is that margin is increasingly being earned from metered AI usage rather than...

The core structural shift discussed is the transition from fixed, seat-based licensing models to metered, consumption-based pricing for artificial intelligence tools. Driving forces behind this change are vendor margin pressures and increasing alignment between costs and actual resource utilization, which is resulting in a measurable difference on invoices rather than announced policy changes. Gartner’s projections indicate that by 2028, over 35% of new corporate legal technology spending will operate on usage-based models, and this trend is evident in technology procurement and vendor billing practices.

Key evidence is provided by data from Accenture and Gartner. Accenture’s survey of 750 exec...