They do not leave over price. The most common reason a client switches provider is that the incumbent could not produce evidence of the skills it says it has. The best provider should win. Right now the one that can prove it does, and proof is something you can build.
The comforting story about this business is that switching is painful, so clients stay. Barracuda put the question to 2,000 senior security decision-makers at organisations of 50 to 2,000 employees, Australia included. Two per cent said they could not foresee a situation that would make them switch.
The supply side agrees. A third of managed service providers say most of their new clients arrive from another provider, and only about one in eight are buying managed services for the first time.
So this is a share-shifting market, not a growing one. Almost every client you win is somebody else's client today, and almost every client you hold is somebody else's target. The contract is not what keeps them. Something else is, and it is worth knowing exactly what.
Barracuda asked those 2,000 buyers what would make them consider switching. Price came fourth.
| What would make you switch provider | Share |
|---|---|
| The provider cannot produce solid, checkable evidence of the security skills it offers, or of how it is set up for 24/7 support | 45% |
| We experienced a breach or a successful cyber incident | 40% |
| The provider increased the cost of its services | 38% |
| Another provider offers a solution we believe would be better | 38% |
| The provider cannot reassure us it is commercially sound and future-proof | 36% |
| The provider is not transparent about its own cyber security | 34% |
Barracuda with Vanson Bourne, The MSP Customer Insight Report 2025. Respondents could select more than one answer.
Read the top line again. It is not that the provider lacked the skills. It is that the provider could not produce evidence of them. Those are different problems and only one of them is a marketing problem.
The same gap is showing up on your side of the table. The share of providers naming "cannot quickly demonstrate value to clients" as their single biggest obstacle to winning new business nearly doubled in a year, from 10 per cent to 19 per cent. And 27 per cent name either no dedicated salesperson or no lead generation strategy at all, which is the closest thing the research has to a number for the owner being the only person who sells.
When a buyer says they want evidence, they do not mean a capability statement. They mean something they can check without taking your word for it.
Same stack, same vendors, same four logos on the homepage, same phrase about being a trusted partner. When a buyer cannot tell two providers apart, the decision falls to price, and the numbers show exactly that happening.
Clients spending more than twenty-five thousand US dollars a year with their provider fell from 75 per cent to 41 per cent in a single year, while clients spending under that figure more than doubled to 55 per cent. Competition and pricing pressure is now the top inhibitor to profitability at 49 per cent, attributed explicitly to the commoditisation of recurring services.
And the Australian arithmetic is harder than the American arithmetic. Average annual client spend in the Asia Pacific runs about US$67,300 against US$110,800 in North America. Roughly forty per cent less per account, which means the cost of winning one matters here in a way it does not there.
Meanwhile the floor is moving. Accenture completed its acquisition of Melbourne-founded CyberCX in February 2026, and private equity is assembling providers across Australia and New Zealand. Scale is arriving in this market whether or not you wanted it to.
If the thing that wins and holds a client is verifiable proof, then the system has to manufacture proof continuously rather than assemble it in a panic when a contract comes up for renewal.
Then Recommend feeds Attract. In a market where a third of new clients are taken from a competitor, a public body of verifiable proof is both how you win them and why yours stay.
There is no licensing regime for managed service providers and no industry advertising code. The constraint is the Australian Consumer Law, which prohibits false or misleading representations about standards, quality, approval and performance characteristics. Which makes the security badges on your homepage the most exposed sentences you publish.
There is a second exposure that has nothing to do with your marketing and everything to do with your agreement. The ACCC named it a priority for 2026 and 2027:
"Unfair contract terms in consumer and small business contracts, with a focus on harmful cancellation terms, including those associated with automatic renewals, early termination fee clauses and non-cancellation clauses."Australian Competition and Consumer Commission, February 2026
Automatic renewal, early termination fees and no-cancellation clauses is a fair description of how most managed services agreements are written. Since November 2023 it has been illegal to propose, use or rely on an unfair term in a standard-form small business contract, and the small business test captures most of a typical client book.
I am not your lawyer and this is not legal advice. But a provider whose whole argument is that clients stay because leaving is hard has a commercial model pointed at a named enforcement priority, and a provider whose clients stay because the evidence is overwhelming does not.
You spend your working life telling businesses not to run critical systems on something they neither own nor control.
A page arguing that you should demand evidence would be a poor place to stop supplying it. What exists is Norde Homes, a Perth home builder. Different industry, same mechanism: absent from AI answers, now named in them for the high-intent searches its buyers run. Roughly three qualified enquiries a week, and AI-assistant referral traffic up 140 per cent quarter on quarter.
Two qualifications. AI answers are not deterministic and vary between runs, so it is a position held rather than a ranking owned. And it is evidence the mechanism works, not evidence it works for managed service providers. Cross-industry proof is the accurate description.
The stronger evidence takes about a minute and is about your business rather than mine. The AI Scan runs a live web search and reports whether you are findable and citable when someone asks which provider to use, across four factors. Free, no pitch. If it returns solid on all four, you have no need of me.
You would not buy a security service on an adjective. Do not buy marketing on one either.
Arnoud Gernaat, Growth RebelsThe right-hand column is the honest one. Read it before booking anything, since a wasted call costs us both the same half hour.
There is no way to price this properly without understanding your client profile, your recurring revenue model and what one contract is worth over the years you keep it. So the first step is a free thirty-minute call.
Most providers need an Engine build rather than the entry one, because of what the buyer is deciding. They are handing over the systems their business runs on, to a firm they will struggle to assess, and 45 per cent of them will leave an incumbent over exactly that difficulty. That buyer has to be given proof before they move, and producing proof continuously is what the extra machine does.
Pricing is published on the site, because you should not have to sit through a call to find out what something costs.
No, because there is no such certification. The Australian Signals Directorate's own guidance confirms the Essential Eight is a graduated maturity model, with no issuing body and no list of approved products. A claim of certification is a representation about approval and standards, which is precisely what section 29 of the Australian Consumer Law prohibits when it is false. What you can say is which maturity level you have reached and who assessed it, which is a stronger claim anyway because it is checkable.
That is the right worry, and it is why the qualification layer matters more than the volume layer. Enquiries are screened on size, sector and stack before an engineer sees them, and the reporting shows how many were filtered out as well as how many came in. It is also worth noting that price came fourth in Barracuda's list of switching triggers, behind the provider's inability to evidence its skills. Buyers shop on price when they cannot tell providers apart, so the fix for price shopping is proof, not a higher rate card.
Keep them. They are the highest-trust source you have. The issue is that both channels depend on somebody else remembering you at the right moment, which means growth stops when the introductions stop and cannot be turned up when you need it. Kaseya found 27 per cent of providers name either no dedicated salesperson or no lead generation strategy as their single biggest obstacle to winning new business. A system does not replace the referral, it means the quarter does not depend on one arriving.
The paid side of Attract can produce enquiries within weeks of going live, because you are buying attention rather than earning it. The AI visibility side is slower by nature, since engines have to encounter and trust the signals before they cite a business. The proof library compounds from the first month and never stops. Anyone promising fast AI citation is selling something they cannot control.
Nobody is locked in, and forty-five per cent will leave over evidence you could have produced. Book a free thirty-minute call and we will work out what your growth actually depends on today.
A straight conversation, not a pitch. No prepared deck.