Market News

MSSP Market News: Security work is leaving the dashboard. MSSPs need to catch up on identity.

Security work is leaving the dashboard. It's moving into AI coding agents, CLIs, plug-ins, MCP services, and the service accounts and machine identities running underneath all of it. Sysdig's headless cloud security push is built around that shift. Instead of pulling developers and analysts back into a vendor console every time something needs investigation or remediation, CNAPP capabilities now show up where the work is already happening.

For MSSPs, the workflow gain is obvious: less context-switching, faster triage, fewer tickets that stall waiting for someone to log into yet another portal. The bigger issues are identity and control. Keeper's recent research found 89% of senior IT leaders are struggling to manage a growing identity footprint, and the share of non-human identities, including AI agents, service accounts, and automated tooling, is the part growing fastest. When an action gets taken inside a CLI or an agent, MSSPs need to know who or what triggered it, with the same fidelity they'd expect from a human analyst's session.

Gigamon’s survey adds another warning sign. It found that AI is now involved in 83% of reported breaches, while 65% of organizations were breached in the past year even as many continue to invest in more security tools. That points to a familiar problem for MSSPs: customers are spending, but visibility and control are still lagging. Headless security could help reduce dashboard fatigue and speed up remediation, but only if it comes with clear guardrails around what agents can access, what they can do, when a human has to approve an action and whether every step is logged. Otherwise, security gets faster without necessarily getting safer.

Market Pulse: Cybersecurity Deals, Funding, and Platform Shifts

Cisco plans to acquire Astrix: Cisco has announced its intent to acquire Astrix Security, a non-human identity security company focused on securing API keys, service accounts, OAuth tokens and other credentials that AI agents use to access enterprise systems. The deal fits into Cisco’s broader push to secure the “agentic workforce” by giving customers more visibility into AI agents, their permissions and their behavior across identity, network, application and infrastructure layers. Cisco plans to integrate Astrix’s capabilities into Cisco Identity Intelligence and extend them into Cisco Secure Access and Duo, with the goal of helping organizations discover, authenticate, authorize and monitor AI agents and other non-human identities.

ServiceNow targets AI Agent Risk with Autonomous Security & Risk: ServiceNow has launched Autonomous Security & Risk, a new offering that brings together Armis and Veza integrations to give enterprises more visibility into AI agents, identities, permissions, and connected assets. The move is aimed at a growing governance problem: as AI agents begin taking action across enterprise systems, organizations need to know what those agents can access, what they are allowed to do, and whether their activity can be audited. Veza adds visibility into human and non-human identities and access relationships, while Armis brings real-time asset intelligence across IT, OT, IoT, cloud workloads and connected devices. ServiceNow wants to make identity, asset visibility, risk, and response part of one operating layer, so AI-driven workflows can move faster without losing oversight or accountability.

MSPAlliance adds service lines to Cyber Verify for MSP compliance reporting: MSPAlliance has launched Service Lines within Cyber Verify, a new feature designed to help MSPs connect audited and verified controls directly to the managed services they deliver. The update lets MSPs map controls to specific service lines, align those mappings with MSAs and contractual obligations, and carry them into client-facing compliance reports. Customers want clearer proof of which controls are covered by the provider, which responsibilities remain with the client, and how managed services support regulatory or framework requirements. The feature gives MSPs a more structured way to explain audit results, improve transparency, and turn compliance reporting into a more practical part of service delivery.

XBOW raises Series C funding: XBOW has secured an additional $35 million in Series C financing from strategic investors including Accenture Ventures, DNX Ventures, Liberty Global Tech Ventures, NVentures, Samsung Ventures and SentinelOne S Ventures. The funding extends the company’s previously announced $120 million Series C round and comes as enterprises look for ways to keep pace with AI-driven attacks and faster software release cycles. XBOW’s platform uses AI to continuously find and exploit application vulnerabilities, giving security teams validated findings instead of relying only on point-in-time penetration tests. The company said the new funding will support go-to-market expansion, international growth and partner ecosystem development, including deeper distribution in Asia Pacific through DNX Ventures and Samsung, which is serving as a preferred reseller in South Korea.


Have news to share or just want to connect? Reach anytime at [email protected].

Suparna Chawla Bhasin

Suparna is the Senior Managing Editor for CyberRisk Alliance’s Channel Brands, including MSSP Alert and ChannelE2E. She manages content development, sharpens editorial workflows, and ensures storytelling is tightly aligned with audience needs. With a background in technology, media, and education, she combines strategic insight with creative execution.

You can skip this ad in 5 seconds