Cynomi’s annual report on the adoption and development of virtual chief information security officer (vCISO) services highlights a surge in demand for partners to integrate these next-generation security offerings into their managed services. Plus, why AI is driving better outcomes for partners in security.
The bottom line: report shows more demand for virtual CISO services amongst channel partners
The survey was conducted by a third-party organization and based on responses from 200 anonymous respondents. Overwhelmingly, MSPs and MSSPs have reported a surge in demand for in-depth security offerings than ever before.
The percentage of managed service providers offering vCISO services has more than tripled year-over-year, rising from 21% to 67%.
“When we launched the State of the vCISO survey three years ago, it was clear that service providers were just beginning to recognize the potential of strategic cybersecurity offerings. Today, that shift is in full swing,” said David Primor, Ph.D., Co-founder and CEO of Cynomi, in a statement. “The sharp rise in vCISO adoption along with the growing role of AI confirms what we’ve long believed, cybersecurity is no longer just about protection, it’s a business growth driver. With the backing of our funding round, at Cynomi we’re committed to helping our partners stay ahead of the curve, and this research helps us all see what’s coming next.”
Cynomi’s VP of Marketing, Rotem Shemesh, worked closely on the report and told Channel Insider that, although she had seen demand increase over the past year, the sheer amount of growth across vCISO offerings took her by surprise.
The high demand for vCISO services increased from 75% in 2024 to 79% in 2025, with combined high and moderate demand now reaching 96% of those surveyed. Larger providers are especially likely to report strong demand, with 86% of companies with 1,000 or more employees indicating high client interest.
Why even the partners who don’t offer vCISO services are preparing to do so in the future
The survey also asked whether partners who do not currently offer vCISO services plan to do so in the future. Again, a vast majority of those partners said they would, with most expecting to do so within the next two years.
Specifically, 50% of those respondents said they plan to do so by the end of 2025, and another 27% are targeting 2026 as the year for entry into the vCISO market.
This comes as the influx in demand for advanced security solutions and services continues to reshape how channel partners support their customers. The report also shows increases in the number of partners offering penetration testing, compliance readiness, cyber insurance readiness, and other offerings that extend beyond the traditional sale and maintenance of security tools.
How AI-enabled automation will crack the code for those still on the fence about ROI and operational efficiency
A new addition to this year’s report is an increased focus on understanding how AI and other automation tools are enabling partners to achieve more with less. Perhaps not surprisingly, respondents reported significant time savings and efficiency gains when leveraging AI-enabled solutions throughout the vCISO practices.
Highlights from the survey data include:
- AI is already delivering significant time savings in vCISO workloads, with a 68% average reduction in workflow time.
- 81% of vCISO service providers already use AI and automation in their vCISO practices. An additional 15% say they plan to implement such tools in the next 12 months.
- Providers estimate AI can reduce labor time by 58% across cybersecurity and compliance service delivery.
- 95% of respondents believe AI can enhance the services they deliver, with 50% strongly agreeing.
These results are interesting on their own, but perhaps even more relevant, given that the report also suggests most partners who do not have vCISO practices are concerned primarily with resourcing the offering. The top reasons include concerns about profitability (35%), high initial investment (33%), and a lack of skilled cybersecurity staff (32%).
Shemesh said the goal with the report, and many of the enablement programs Cynomi offers, is to educate the channel market on the solutions end customers are demanding and how to stay ahead in a crowded industry.
“MSPs and MSSPs, like all of us right now, have to reinvent themselves and make sure they can do things more efficiently,” Shemesh said. “With AI, these services are becoming much more feasible, and it’s a win-win-win: SMBs are demanding these services more, and MSPs and MSSPs can take the opportunity to grow in security and compliance areas, with AI enabling them to do so.”
Cynomi was founded in 2020 to enable partners to manage vCISO services efficiently. The company recently announced a new suite of business continuity planning features.