Public research · no account required

The state of the US MSP market

Twelve findings, each one a query run against every managed service provider we track — not a survey, not a vendor panel. Where the numbers are uncomfortable we publish them anyway, including the one that failed to show what we expected.

Scope — read this before quoting anything

All company percentages use 21,555 active US MSP-family firms (MSP, MSSP, IT consulting, VAR/telecom), excluding test fixtures and firms with evidence of being non-US. Two families of stats use a different base and say so on every card:

  • Rating stats — of the 9,380 in-scope firms with a Google rating on file, not all 21,555. Read them as "of rated MSPs".
  • Website stats — of the 4,803 firms scored on the current web-maturity rubric.

Measured 2026-08-11 · re-run quarterly · sample size printed on every figure

The headline findings

Large samples, clean methodology, and genuinely surprising results.

Tier 1 finding
69%

of cybersecurity-selling MSPs list zero certifications

69% of MSPs that sell cybersecurity hold no security certification at all.

The whole industry sells security. Two-thirds of it shows no third-party proof.

10,226 in-scope firms advertise cybersecurity services; 7,077 of them list zero certifications of any kind. n = 10,226 · as of 2026-08-11.

Read the analysis ▸
Tier 1 finding
72%

of healthcare-targeting MSPs list no HIPAA credential

72% of MSPs marketing to healthcare don't list HIPAA.

Sharper than the general security gap, because the buyer is specific.

8,445 firms name healthcare as a target vertical; 6,056 list no HIPAA credential. 4,002 firms target government; 2,965 list neither CMMC nor NIST. as of 2026-08-11.

Read the analysis ▸
Tier 1 finding
8,667

US places with no MSP inside 25 miles

8,667 US places have no MSP within 25 miles — 27% of the country's populated places.

A quarter of populated America has no managed service provider in driving distance.

Computed across all 32,487 US places against rooftop and city-precision firm locations. as of 2026-08-11.

Read the analysis ▸
Tier 1 finding
0.05★

the entire quality gap between monopoly and competitive markets

MSPs in one-provider towns average 4.63★ across 31 reviews. In competitive markets they average 4.68★ across 45.

We expected a monopoly penalty. There barely is one — and the honest finding is more useful.

One-provider markets n = 78; markets with five or more providers, full in-scope sample. as of 2026-08-11.

Read the analysis ▸
Tier 1 finding
70%

of rated MSPs are at 4.8★ or above

70% of rated MSPs sit at 4.8★ or higher. Half have fewer than 10 reviews.

When almost everyone is excellent, the star rating stops carrying information.

Of 9,380 in-scope firms with a Google rating on file: median review count 10, p25 = 3, p75 = 27, p95 = 119. The top 5% average 521 reviews. as of 2026-08-11.

Read the analysis ▸

How MSPs actually run their businesses

Pricing, publishing, lead capture, headcount, tenure and stack — the operating picture underneath the headlines.

1.1%

of scored MSP websites show any price

Only 1.1% of MSPs publish any pricing.

53 of 4,803 firms scored on the current web-maturity rubric show pricing of any kind. as of 2026-08-11.

Read ▸
82%

of scored MSP sites have no active blog

82% of MSP websites show no active blog.

3,945 of 4,803 firms scored on the current web-maturity rubric show no active blog. as of 2026-08-11.

Read ▸
<10%

of crawled MSPs offer online booking

Fewer than 10% of MSPs let you book time online; roughly 1% offer live chat.

2,070 of 21,325 crawled firms show a booking link (Calendly, HubSpot, Chili Piper); 246 show a chat widget. as of 2026-08-11.

Read ▸
9

employees at the median US MSP

The median US MSP has 9 employees. 52% are under 10.

17,792 in-scope firms with a headcount on file. as of 2026-08-11.

Read ▸
16%

of MSPs registered their domain since 2020

16% of MSPs are on domains under six years old.

2,453 of 14,952 in-scope firms with a domain age on file. as of 2026-08-11.

Read ▸
80%

of all in-scope MSPs list zero certifications

80% of MSPs list no certification at all; only 6% list three or more.

All 21,555 in-scope active US MSP-family firms. as of 2026-08-11.

Read ▸
4,229

MSP sites that name Microsoft 365

Microsoft 365 is named on 4,229 MSP sites, Azure on 2,443, AWS on 1,741, Cisco on 1,132.

Vendor detection covers roughly 36% of in-scope firms and is keyword-based. Read every figure as a floor on visible mentions. as of 2026-08-11.

Read ▸

Methodology

What we measure. Every figure comes from a query against our live record of US managed service providers — company records, locations, published services, certifications, Google ratings and review counts, website structure and domain history. No respondents, no self-reported survey panel.

"Listed publicly" is the unit. Certification and compliance stats count what a firm publishes where a buyer can find it, not what it holds. A firm with SOC 2 and no mention of it counts as uncertified here. That is a real limitation and also a real finding: buyers see the same thing we do.

Partial coverage means floors, not rates. Where detection is pattern-based — booking links, chat widgets, vendor mentions — a feature delivered purely by JavaScript can be missed. Those figures are published as "at least", and vendor counts are never presented as market share.

Cadence. Measured 2026-08-11 and re-run quarterly. The deltas become the next edition's headlines.

Want your own numbers, not the industry's?

Claim your MSP with a magic link from your company email to unlock Benchmark, Markets and Signals for your own firm and territory — including where you sit on every measure on this page.

Claim your MSP ▸