Gartner's Magic Quadrant 2019 for managed security services providers (MSSPs) has surfaced. Here's a look at each MSSP featured in the report, along with our perspectives on each cybersecurity business.
We've sorted the list alphabetically rather than by quadrant. Also, we've indicated if and where each Gartner Magic Quadrant company was ranked in our own Top 100 MSSPs report from 2018 (our 2019 report will arrive in September 2019):
1. Alert Logic: Newly added to Gartner's report, Alert Logic has also impressed MSSP Alert this past year. The company has invested heavily in its channel partner program -- hiring such veterans as Senior VP Christopher Rajiah and VP Rich Long. A formalized Alert Logic partner program arrived in October 2018. More recently, the company in November 2018 unveiled a SIEMLess Threat Management offering. Top 100 MSSP Rank 2018: No. 8.
2. AT&T Cybersecurity: This is a particularly interesting time for AT&T in the managed security services market. The company unveiled an AT&T Cybersecurity business unit in early 2019 after acquiring AlienVault in 2018. Admittedly, some partners worried that AT&T would take the entire AlienVault business direct. But poke around the halls of AT&T, and you'll hear some especially positive partner statements coming from the executive team. During multiple meetings, we're heard, AT&T executives were actually pounding on the table in support of AlienVault's partner ecosystem. True believers include Cygilant, a security-as-a-service (SECaaS) provider that joined the AT&T Cybersecurity Partner Program and embraced AlienVault Unified Security Management (USM). Top 100 MSSP Rank 2018: No 2.
3. Atos: The company has made some key moves in recent months -- including a cybersecurity services push for healthcare organizations that includes managed security, cloud security & identity management offerings. Also, Atos & Merlin International partnered to deliver services to government & healthcare organizations. And Atos won a $120 million agreement to deliver cybersecurity services to the Virginia Information Technology Agency (VITA). Top 100 MSSP Rank 2018: No. 13.
4. BAE Systems: The company has been mostly silent in the past year, but we've picked up at least two updates that are worth noting. First, BAE Systems & Dell EMC announce a federated, secure hybrid cloud solution for U.S. government agencies. And even amid some staff cuts in late 2017, the company further sharpened its focus on managed security. Top 100 MSSP Rank 2018: No. 48.
5. Capgemini: The company has been busy expanding its North American footprint in recent months. The effort includes acquiring the cybersecurity arm of Fortune 500 company Leidos. And then opening a new security operations center (SOC) in Columbia, South Carolina. Top 100 MSSP Rank 2018: No. 65.
6. CenturyLink: The telecom service provider remains plenty busy in the MSSP market. Recent moves include integrating Palo Alto Networks next-generation firewalls (NGFWs) into its Security Log Monitoring service to help orgs manage & track cyber threats. Earlier, the company made a move into the Asia Pacific region.
7. Fujitsu: The company has been partnering up with multiple next-generation endpoint protection specialists. Key recent partnerships include Cybereason and BlackBerry Cylance. Earlier, the company added forensic technology to its service offerings. Top 100 MSSP Rank 2018: No. 37.
8. IBM Security: The company has been plenty busy in the managed security services market. The firm's X-Force Red team recently deployed Onapsis cybersecurity technology to offer ERP penetration tests for SAP & Oracle applications. And IBM hit the road with the X-Force Command Cyber Tactical Operations Center, a mobile security operations center (SOC) that offers training in the U.S. & Europe. Customers and partners also noticed the new IBM Security Connect, a cloud-based community platform that leverages machine learning and artificial intelligence (AI) for cyber threat analysis. On the education front, IBM partnered with Marist College to offer the QRadar Security Intelligence Platform, IBM Security AppScan & other cybersecurity tech in the college's SOC. Top 100 MSSP Rank 2018: No. 1.
9. NTT Security: In one of the most strategic moves this past year, NTT Security acquired WhiteHat Security. The deal united a Top 100 MSSP & an application security provider for DevSecOps teams. NTT Security also added integrated network analytics technology into its Managed Security Services (MSS). The move detects and defends against cyberattacks launched on botnet infrastructure. Also of note, NTT DATA (a sister business) deployed Exabeam’s security information and event management (SIEM) software for internal cyber threat detection & response. Top 100 MSSP Rank 2018: No. 10.
10. Secureworks: Let's start with the positive. The company is busy with its own R&D while also partnering up to support third-party endpoint protection tools. Smart. The moves include launching a Red Cloak Threat Detection & Response analytics app -- which channel partners can leverage. And a Security Maturity Model helps customers and partners to evaluate their cybersecurity maturity & risk levels. Also, Secureworks partnered with Carbon Black and CrowdStrike, while working more closely with parent Dell Technologies. Still, Secureworks has suffered from higher-than-normal churn, and there are rumors that Dell wants to sell the business. Top 100 MSSP Rank 2018: No. 4.
11. Symantec Managed Security Services: The company remains plenty busy across its MSSP, cloud software and additional business focus areas. Over the past year, several Symantec sources have proactively reached out to MSSP Alert, to point out the company's solid MSSP business practices. The result has softened our tone on Symantec. We're trying to be more conscious of the company's proven MSSP offerings -- even as the overall company strives to navigate multiple market shifts. The big picture can't be ignored: Multiple Symantec executives have exited in recent months -- including former CEO Greg Clark. As the Silicon Valley Business Journal noted in May 2019: In the last six months, Symantec’s chief financial officer, chief operating officer, chief marketing officer and and the head of its go-to-market teams also have exited. Still, the MSSP team remains quietly focused on safeguarding customer networks. Top 100 MSSP Rank 2018: No. 25.
12. Trustwave: Few MSSPs have been busier than Trustwave over the past year. The company recently launched an enterprise-focused Detection, Analytics and Response Consulting (DARC) practice for customers; threat hunting capabilities for government agencies; and GDPR services for European Union clientele and other customers that have EU dealings. Key partner announcements in recent months have involved Nitel and Uniserve Communications, among others. Top 100 MSSP Rank 2018: No. 5.
13. Verizon Managed Security Services: The telecom and cellular giant has a lot to brag about in the MSSP market. From partnerships to acquisitions, Verizon has quietly -- but aggressively -- rounded out its security offerings. Key moves include acquiring Niddel for cybersecurity machine learning technology; buying ProtectWise for cloud-based Network Detection and Response (NDR) services; and unveiling a security assessment framework. Key partners include BitSight, Cylance, Recorded Future and Tanium. Top 100 MSSP Rank 2018: No. 3.
14. Wipro: The company has made headlines over the past year or so -- but not all of them were positive. Things started off well in 2018, when WiPro partnered with ThreatModeler to deliver enterprise threat modeling capabilities. The next move also looked impressive, as Wipro invested in application security firm Denim Group. But by April 2019, reports were swirling that Wipro itself was a victim of a phishing incident -- with some issues allegedly stretching back multiple years. Top 100 MSSP Rank 2018: No. 9.
Gartner Magic Quadrant 2019: Four MSSPs Dropped From the List
Four MSSPs that appeared on the 2018 Gartner Magic Quadrant were dropped from the 2019 report. We don't have specific details from Gartner for that decision. But here's our look at those four companies and our perspectives.
1. BT: The only recent move we've seen this past year involved a new security operations center (SOC) in India to detect, address & resolve global cyberattacks. Top 100 MSSP Rank 2018: No. 11.
2. DXC Technology: The company in late 2018 hired former BT Security CEO Mark Hughes to run its global security function, The Register reported. Earlier, the firm launched Applications Security on Demand — a consumption-based applications security testing service powered by Micro Focus. Still, DXC has been a bit quiet on the managed security front. Top 100 MSSP Rank 2018: No. 12.
3. HCL Technology: The India-based outsourcing firm hasn't made much noise in managed security over the past year. The only move we tracked involved a new CyberSecurity Fusion Center (CSFC) in Frisco, Texas. The center provides customers with a single point of contact for the enterprise security lifecycle, from detection to remediation, the company says. Top 100 MSSP Rank 2018: No. 56.
4. Orange Business Services: Gartner's decision to drop Orange Business Services from the MSSP Magic Quadrant -- no matter what the reasoning -- appears shortsighted. Over the past few months, Orange has taken steps to be Europe's top MSSP. Example moves include acquiring SecureLink, acquiring SecureData, and partnering with Check Point Software Technologies. Top 100 MSSP Rank 2018: No. 66.
That's it for this year's Gartner Magic Quadrant report on MSSPs.
