
Vendors are rewriting the rules on MSPs faster than anyone can track — pricing, partner programs, liability, and now AI. Business of Tech is the daily MSP news briefing that tells you what changed and what it means for your business. Every weekday, channel veteran Dave Sobel picks the MSP and IT services news that actually moves your margins, contracts, and risk, and answers the one question that matters: Why do we care? No vendor cheerleading and no press-release rewrites — independent analysis for managed service providers, IT services leaders, and the vendors who sell to them. Short daily episodes keep you curr...
10

<p>A structural gap persists between the promotion of AI solutions and their demonstrable, value-based adoption within the managed services sector, resulting in unclear accountability and risk of misaligned incentives. Vendors such as Microsoft and Anthropic push seat-based AI sales (e.g., Copilot, LLM services), but few MSP-led case studies exist to verify real client impact. Most reported usage centers on basic, assistive functions—despite a marked increase in AI discussion among MSP communities.</p><p>The most notable finding is the disparity between AI licenses sold and those actively used, with implementation typically limited to automation of simple tasks su...

<p>The episode highlights a structural shift in which MSPs face increased contractual and operational risk as vendors embed AI agents in managed IT tools by default, often without explicit customer agreements or added cost. This practice blurs accountability for AI-driven actions and outcomes. Key examples include MSP360 and Omnissa, which have activated AI agents to automate support and administrative functions across their platforms without requiring provider or customer sign-off.</p><p>MSP360’s MCP server connects its backup platform to Claude and ChatGPT, allowing agents to diagnose and remediate issues at no extra charge. Omnissa offers AI agents for ta...

<p>A structural margin pressure is emerging as AI manufacturers bill MSPs for agent activity, while MSPs are paid by clients for resolved outcomes. Companies like ConnectWise and Super IT charge based on volumes of AI-driven attempts (agent activity, token usage), creating a financial disconnect—since MSP contracts tie revenue to tickets actually solved and kept closed, not the process steps taken.</p><p>ConnectWise introduced an RMM agent that automates diagnostics and ticket triage within its platform. Company-supplied data claims substantial efficiency gains: for one partner, 99% of over 7,000 tickets were evaluated in 30 days, but these metrics center on activity an...

<p>The episode centers on a structural shift in technology risk management: liability for AI decisions is increasingly transferring downstream from technology vendors to MSPs and their clients. Insurers are moving to exclude generative AI from standard liability policies, while California regulators have mandated new automated decision-making rules with specific risk assessment and audit requirements for certain businesses operating above defined thresholds. Product licensing from major AI manufacturers such as OpenAI and Anthropic continues to disclaim liability, relying instead on "as is" terms that put post-deployment legal exposure on service providers and end users.</p><p>The most consequential development...

<p>The episode identifies a structural shift: traditional patching is no longer sufficient protection as the act of releasing a patch now informs and accelerates attackers, particularly with the use of AI. When vendors publish fixes, attackers can promptly identify and exploit not-yet-patched systems at scale. Companies and data sources underlying this shift include OpenAI, Microsoft, CISA, and the Verizon 2026 Data Breach Investigations Report.</p><p>The most consequential development is Verizon’s finding that vulnerability exploitation now leads breach causes at 31%, overtaking credential theft and phishing. The percentage of fully remediated exploited flaws has declined to 26%, and the average ti...

<p>The episode highlights the increasing shift of operational risk and accountability to MSPs as AI-powered agents become integrated into client environments through white-label and usage-based models. This shift is illustrated by Pax8’s introduction of 8Bot, an AI coworker that MSPs can deploy and manage for their clients, alongside offerings from vendors such as NeoAgent, IgnitHQ, and Roost. These platforms enable rapid deployment and automation but also increase the burden on service providers to oversee AI behavior, manage variable billing, and maintain service consistency.</p><p>Key evidence comes from Pax8’s strategy for 8Bot, which is designed for part...

<p>The episode documents a structural shift in the managed IT services sector: automation and AI are displacing both entry-level and advanced technical work, eroding the traditional skills ladder within MSP operations. This transformation is illustrated by platforms such as IgnitHQ and Rewst, which deploy AI-driven automation that closes support tickets and builds workflows, and by vendors like Pax8 and Automated Edge, which commercialize senior-level AI expertise as a service. Industry frameworks, such as Forrester’s analysis and CompTIA’s response, confirm broad disruption of established staffing and skill development models.</p><p>IgnitHQ reports that one-quarter of its partners now...

<p>The episode exposes a governance gap in risk management and asset responsibility for internet-facing systems—especially websites—within managed service agreements. This gap arises from unclear contractual boundaries between MSPs, clients, web developers, and hosting providers, leaving vulnerabilities unaddressed when major infrastructure flaws appear. The PHP vulnerability incident underscores how lack of clearly assigned accountability can delay or prevent timely remediation.</p><p>Two severe flaws in PHP, present since version 5 and with a severity of 9.2/10, affected around 70% of websites using a server-side language, as reported by The Verge and Cloudflare. Exploits began before official patches or public disclosure, and...

<p>The integration of generative AI into small business environments is driving a shift toward localized infrastructure management. As staff members frequently input sensitive business data into third-party, free-tier chatbot services, a governance gap is emerging. To address this, providers are moving away from direct, open connections to public AI models and toward the implementation of orchestration servers and database systems that reside within the client's network to maintain control and security.</p><p>Evidence suggests that shadow AI usage is pervasive across client environments. Assessments performed using desktop agents indicate that employees are already utilizing AI tools for daily...

<p>The primary structural trend is the shift from reactive auditing of AI agent actions to proactive, policy-driven control over what AI agents are allowed to do within IT environments. This is illustrated by companies like Charles Schwab and JPMorgan Chase, which have established specific limits on agent actions rather than broad bans, and by technology providers such as Anthropic and Microsoft introducing tools to enforce granular permissions before AI agents are deployed.</p><p>Evidence underscores this shift: Acronis found AI agent tools on 9.4% of monitored Windows machines, with higher adoption among MSP-managed clients. Financial institutions are restricting critical...