Blumira CEO and co-founder Matt Warner says security vendors must take greater responsibility for MSP alert fatigue by delivering fewer, more accurate findings and automating clear response actions rather than leaving technicians to investigate another queue of alerts.
Warner told Channel Insider that MSPs increasingly expect security platforms to provide three things: speed, response, and pricing that reflects continued commoditization across the managed services market.
The demand reflects a broader alert fatigue problem across the channel. A 2025 survey covered by Channel Insider found that more than 75% of MSPs experienced alert fatigue at least monthly, with tool sprawl, false positives, and weak integrations contributing to delayed responses. MSPs experiencing daily fatigue used an average of 7.4 tools, compared with 4.5 among those that rarely encountered it.
MSPs need answers, not more security alerts
Warner said security products have historically treated alerts as the beginning of an analyst’s work. That model is becoming unsustainable for MSPs operating lean teams across increasingly complex customer environments.
The market is shifting from showing users as much activity as possible to presenting fewer, more accurate findings with clear response steps, he said.
“Everything needs to present less. We went from ‘show as much as possible’ to ‘show as little as possible, make it as accurate as possible, and then automate the pieces around that,’” Warner said.
“If you have to hop between multiple different things and remember the context in your brain, it’s always going to be difficult to trust what you’re looking at,” he continued. “At a glance, just looking at that page, you need to understand as an MSP if you need to care about this thing.”
Blumira, which spun out of an MSP approximately nine years ago, is applying that approach through Kindling, its agentic investigation engine.
The company says the technology correlates findings across cloud, network, endpoint, and identity data before surfacing actionable cases. Its MSP dashboard is designed to provide visibility across customer accounts and connect cases with existing RMM, PSA, and other workflows.
Security AI must deliver measurable time savings
Even with Blumira’s focus on agentic AI tooling, Warner remains skeptical of products that emphasize AI without clearly demonstrating what work they eliminate.
For MSPs, he said, the most useful applications bring investigative context forward and shorten tasks that previously required analysts to gather information manually.
“Most of the news coming out of the security market is, ‘Look at this fancy thing. Look at all these things it does.’ When you peel back the layers, it may just be a really expensive AI tool that may or may not actually do anything,” said Warner.
That distinction matters as vendors race to add agentic capabilities. Warner cautioned that some companies are primarily using AI to lower their own service-delivery costs, while MSPs need tools that produce measurable operational benefits within the systems they already use.
“We need to give MSPs the information because the information is important, but we also want them to do as little work as possible,” Warner added. “Any vendor selling to an MSP has to focus on how they can do the most in the least amount of time.”
Consolidation could reshape vendor priorities
Those operational pressures are also colliding with broader consolidation across the MSP market, which could influence which providers’ needs security vendors prioritize.
Warner also expects private equity-backed consolidation to influence how security vendors build and price their products. Large MSP platforms can command more development attention than smaller providers, potentially widening the gap between vendor roadmaps and the needs of independent or smaller MSPs.
“If you’re a vendor that makes $4 million from one private equity firm that owns MSPs, why would you do something for 20 MSPs that each give you $500 a month?” Warner posed.
“What we thought of as an MSP five or 10 years ago is no longer what the market looks like, and vendors will inevitably have to align with that.”
Better automation can strengthen managed services
As AI reshapes both security operations and customer expectations, MSPs need technology that creates capacity for higher-value work. Reducing time spent sorting alerts and navigating disconnected consoles can free technicians to improve customers’ security posture, guide AI adoption, and deliver more strategic advice.
For MSPs evaluating security platforms, the central question is what the technology removes from their workload. Effective AI should provide the necessary context, prioritize genuine threats, and support a clear response without adding another layer of review.
“I don’t think you’re going to see this AI takeover,” Warner said. “I think you’re going to see AI used in really structured and useful ways.”