Research by WatchGuard Technologies reveals that while most organizations believe they have appropriately sized teams, the complexity, speed and scale of today’s cyberattacks, especially those driven by artificial intelligence, have surpassed what internal teams can realistically manage.
The result is a fundamental shift from internally managed security to external, always-on, as-a-service protection models.
According to the study, carried out on nearly 1,000 IT and cybersecurity managers from 20 countries including Spain, 91% of organizations are concerned about cyberattacks driven by AI, while 75% suffered at least one cyberattack during the last year. At the same time, 54% say they do not have the capacity to provide 24/7 continuous monitoring and response, and 67% need additional support to respond to increasing compliance demands.
Together, these pressures are forcing organizations to rethink how cybersecurity is delivered and who should shoulder that responsibility.
Half of companies turn to managed service providers
Despite investments in people and tools, internal IT teams are reaching their limits. Research shows that cybersecurity challenges are no longer due to a lack of awareness, but rather an unsustainable operational burden.
Nearly half of organizations (48%) already use managed service providers (MSPs) to complement their internal teams, highlighting a broader shift toward MSPs as primary cybersecurity partners, rather than merely secondary support.
“This is not a skills gap; it is an operational capability gap,” says Joe Smolarski, CEO of WatchGuard Technologies. “Organizations understand the risks. What they lack is the ability to monitor, detect and respond with the speed and scale that today’s environment demands. Cybersecurity is outpacing what internal teams can manage alone, creating a huge opportunity for MSPs to step up as true security partners.”
AI transforms cyberattacks and purchasing behavior
Artificial intelligence is accelerating both sides of the cybersecurity equation by making attacks more sophisticated while driving demand for smarter defenses.
The report reveals that 44% of organizations are willing to pay more for AI-powered detection and response, highlighting the growing expectation that security vendors not only deliver protection, but measurable results.
At the same time, organizations are changing the way they evaluate their cybersecurity partners. Traditional metrics such as availability or service delivery are giving way to results-based expectations, such as:
- Faster incident detection and response
- Proactive threat prevention
- Reduction of operational complexity
- Improved overall resilience
Nearly half of respondents now view their provider as a strategic advisor or proactive partner, underscoring the evolving role of MSPs.
Global markets vary, but demand converges
Cybersecurity adoption models differ by region, but the underlying challenges are increasingly universal. Mature markets such as the United States and France show greater reliance on managed services, while regions such as Mexico continue to rely on value-added resellers, and Canada shows greater adoption of consulting-led approaches. Despite these differences, organizations across regions are converging around a common set of priorities: 24/7 monitoring, faster response times, AI-powered capabilities, and regulatory compliance support.
Cybersecurity adoption models differ by region, but underlying challenges are increasingly universal
Even in a context of economic uncertainty, investment in cybersecurity is increasing. 75% of organizations expect their cybersecurity budgets to grow over the next two years, with spending focused on services that offer continuous protection and clear, measurable results.
From IT support providers to integral partners
According to WatchGuard, this change reflects a broader market reality. Cybersecurity is no longer a one-time investment, but is becoming an ongoing operational requirement to address cyberattacks.
The results point to a fundamental change in the way cybersecurity is delivered. As threats become more complex and continuous, organizations are moving away from fragmented tools and reactive approaches toward integrated, always-on security services.
For MSPs, this represents a significant opportunity to evolve from IT support providers to comprehensive cybersecurity partners, capable of delivering the speed, intelligence and operational scale that modern organizations require.
