PERSPECTIVES

Thought leadership from industry experts

Coding background, Application development and code programming. Technology business computers concept

Citizen developers are becoming a security problem

Harold ByunAugust 15, 2026

AI is making it easier for employees across the business to build apps and agents, creating a new security challenge around visibility, access and governance.

Opportunity

Want to share insights with your fellow service providers? Have security tips that would benefit other MSSPs? Want to see your byline on MSSP Alert? We’re looking for regular columnists and guest contributors!

Check out the guidelines here.

Email Us

Top Perspectives

More Perspectives

Cloud Security

MSSPs should not inherit cloud migration debt

Siddharth VenkataramanAugust 5, 2026

MSSPs need clear visibility, response authority and defined security controls before they inherit a cloud environment and commit to an SLA.

Hacker attack computer hardware microchip while process data through internet network, 3d rendering insecure Cyber Security exploit database breach concept, virus malware unlock warning screen

Breach

The Hugging Face attack shows how fast one breach can spread

Benny LakunishokJuly 30, 2026

The Hugging Face incident shows how one compromised workload can become a wider breach when attackers can steal credentials and move freely across internal systems.

MSSP

How MSSPs prove security ROI when no breach happens

Kostas PapadimitriouJuly 29, 2026

Customers want more than “you didn’t get breached.” They want clear proof that their security investment is reducing risk and delivering value.

Cyber Insurance: Protects organizations against the costs of data breaches, cyberattacks, and related liabilities in an increasingly digital world, close-up

Patch/Configuration Management

The next MSSP breach may start with a “low” severity alert

David BarrosoJuly 27, 2026

Attackers are chaining smaller weaknesses into larger compromises, forcing MSSPs to rethink patching, prioritization and how they separate real threats from SOC noise.

MSSP

The FIPS 140-2 deadline is coming. MSSPs need to find the hidden crypto gaps

Brian CouzensJuly 27, 2026

The September 21 deadline moves FIPS 140-2 validations to historical status, creating new procurement and compliance questions for MSSPs and their clients.

Threat Management

A record credential leak just changed the threat model. Your vendor rating did not

Rob SmithJuly 25, 2026

When attackers operate by the hour, a security scorecard that updates once a year is a relic, not a guide

Managed Security Services

The next managed security service: Deciding which AI agents get in

Sammy KinlawJuly 22, 2026

Bot detection can identify automated traffic, but it cannot determine whether an AI agent belongs there. That access decision is becoming a new managed security service.

Governance, Risk and Compliance

The CMMC 60-day pause: A strategic reset or something much bigger?

Brian CouzensJuly 16, 2026

Contractors still need to meet existing security requirements, but the 60-day review could change how compliance is assessed, documented, and enforced across the defense supply chain.

AI/ML

Autonomous AI turns security risk into an MSP strategy issue

Arve KjoelenJuly 9, 2026

The rise of specialized, high-autonomy AI is shifting the MSP role from tool provider to risk architect.

Active Directory

The Active Directory questions MSSPs should ask before cleanup begins

Craig Birch July 8, 2026

MSSPs should treat Active Directory knowledge loss as part of client risk assessment.

PERSPECTIVES

Citizen developers are becoming a security problem

Opportunity

Top Perspectives

MSP, MSSP, MDR or MXDR: What are you really buying?

AI is compressing the attack lifecycle. MSSPs need to keep up

Approved software is creating a new shadow AI blind spot

More Perspectives

MSSPs should not inherit cloud migration debt

The Hugging Face attack shows how fast one breach can spread

How MSSPs prove security ROI when no breach happens

The next MSSP breach may start with a “low” severity alert

The FIPS 140-2 deadline is coming. MSSPs need to find the hidden crypto gaps

A record credential leak just changed the threat model. Your vendor rating did not

The next managed security service: Deciding which AI agents get in

The CMMC 60-day pause: A strategic reset or something much bigger?

Autonomous AI turns security risk into an MSP strategy issue

The Active Directory questions MSSPs should ask before cleanup begins

Upcoming Events

From threat intelligence to growth: Email security trends every MSP and MSSP needs to know

Why MSPs need AI-powered security to keep pace with agentic attacks

Could You Have Seen It Coming? Turning Pre-Attack Signals Into MSSP Opportunity

Fighting machine-speed bots with agentic AI: Real-world MSSP lessons from the front lines of the AI SOC

Latest News

Technology detects. People decide: Inside PAGO Networks’ hybrid MDR strategy

C3’s Bill Wootton: “Most MSPs don’t recognize what CMMC requires”

4 ways MSSPs can build stronger vendor partnerships

MSSP Market News: What is the real cost of running an MSSP in 2026?

ArmorPoint expands security operations platform for MSPs and MSSPs

MSSP – Perspectives

PERSPECTIVES

Citizen developers are becoming a security problem

Opportunity

Top Perspectives

MSP, MSSP, MDR or MXDR: What are you really buying?

AI is compressing the attack lifecycle. MSSPs need to keep up

Approved software is creating a new shadow AI blind spot

More Perspectives

MSSPs should not inherit cloud migration debt

The Hugging Face attack shows how fast one breach can spread

How MSSPs prove security ROI when no breach happens

The next MSSP breach may start with a “low” severity alert

The FIPS 140-2 deadline is coming. MSSPs need to find the hidden crypto gaps

A record credential leak just changed the threat model. Your vendor rating did not

The next managed security service: Deciding which AI agents get in

The CMMC 60-day pause: A strategic reset or something much bigger?

Autonomous AI turns security risk into an MSP strategy issue

The Active Directory questions MSSPs should ask before cleanup begins

Upcoming Events

From threat intelligence to growth: Email security trends every MSP and MSSP needs to know

Why MSPs need AI-powered security to keep pace with agentic attacks

Could You Have Seen It Coming? Turning Pre-Attack Signals Into MSSP Opportunity

Fighting machine-speed bots with agentic AI: Real-world MSSP lessons from the front lines of the AI SOC

Latest News

Technology detects. People decide: Inside PAGO Networks’ hybrid MDR strategy

C3’s Bill Wootton: “Most MSPs don’t recognize what CMMC requires”

4 ways MSSPs can build stronger vendor partnerships

MSSP Market News: What is the real cost of running an MSSP in 2026?

ArmorPoint expands security operations platform for MSPs and MSSPs