Headline finding · measured 2026-09-07
MSP stands for managed service provider. 16,455 of 39,188 US firms in this market are one.
The acronym is simple. What it covers in practice is not, so this answers it with the composition of an actual market rather than a definition.
of the 39,188 firms in this market are classified as MSPs
n = 39,188 published US firms in the IT services market, classified into four categories: msp, mssp, it_consulting and var_telecom. Service and vertical figures are quoted against the whole 39,188, with an unknown counting against the share — services are on file for 35,215 of them. Measured 2026-09-07 in one snapshot.
The published statistic behind this
MSP Signal tracks 40,647 active IT service providers, classified into 13 categories.
n = 40,647 active providers · measured 2026-09-17. The figures on this page are frozen at their own measurement date and are not recomputed from that table.
Providers tracked by category ▸The short answer
MSP stands for managed service provider: a company that runs another company's IT for a recurring fee, rather than billing for each repair. The defining word is managed — the provider takes ongoing responsibility for keeping systems working, usually under a contract with a monthly price per user or per device.
MSSP stands for managed security service provider, the same model applied to security monitoring and response. In this market 1,897 firms, or 4.8% of 39,188, are classified that way.
The related terms a buyer meets are simpler than they look. Co-managed IT means the provider works alongside your own IT staff instead of replacing them, and 1,855 firms name it. A vCIO is a part-time IT director sold as a service, named by 1,600. Break-fix is the older model the managed model replaced: you call when something breaks and you pay for that visit.
Most firms in this market are not MSPs
16,455 of the 39,188 firms in this market are classified as MSPs — 42.0%. The largest category is actually IT consulting at 18,779 firms, or 47.9%, followed by VAR and telecom resellers at 2,057, or 5.3%, and MSSPs at 1,897, or 4.8%.
This is the practical reason the label is confusing. Slightly under half of the companies a buyer will meet while searching for managed IT are project consultancies, resellers or security specialists whose business is not a monthly managed contract, and many of them use the words "managed services" on their sites anyway.
The classification here is ours, derived from what each firm publishes about how it works. It is a reading of the market, not a registry, and a firm can sit near the boundary between two of these categories.
What one actually does, by the numbers
The clearest definition of the category is what the firms in it say they do. Cybersecurity leads: 15,824 of the 39,188, or 40.4%, name it. Then backup and disaster recovery at 10,983, or 28.0%; compliance at 10,190, or 26.0%; IT consulting at 10,059, or 25.7%; and cloud migration at 9,824, or 25.1%.
The median firm that names any service names five of them. So the honest description of a managed service provider is not one function but a bundle: security, backup, compliance work, cloud projects and a helpdesk, sold together on a recurring contract.
Note what is not near the top. Helpdesk, the thing most people picture, is named by 7.5%, and "managed IT" itself by 13.2%. Providers describe themselves by the outcomes they sell rather than the desk that answers the phone.
How to tell one from a consultancy
Ask how you would be billed. A managed service provider quotes a recurring fee, most often per user per month; a consultancy quotes a project or an hourly rate. Across this market 2.2% of firms publish any price at all, so you will usually have to ask.
Ask what happens at 2am. Managed contracts specify a response commitment and who carries the pager. Project work does not.
Ask who owns the monitoring. If nobody is watching your systems between incidents, the arrangement is break-fix regardless of what the contract is called.
What this number can't tell you
- ·The four categories are MSP Signal's own classification, derived from what each firm publishes. There is no registry of managed service providers, and no firm is asked to self-identify.
- ·Category boundaries are genuinely blurry. A consultancy with a small managed book and an MSP with a large project practice can both sit near the line, and a single label per firm cannot express that.
- ·Services are on file for 35,215 of the 39,188 firms, so every service share is a floor: read "40.4% name cybersecurity" as "40.4% show us they do", not as a claim about capability.
- ·Service labels are matched to a controlled vocabulary from provider sites, so wording differences matter. "Managed IT" at 13.2% is a tag, not a measure of how many firms sell managed contracts — the category figures answer that.
- ·The median of five services counts only firms that name at least one.
- ·The 2.2% published-pricing figure is measured across the whole directory and covers any published price in any unit.
What to do about it
- ▸Buying: the word on the website is not the model. Ask how you are billed, what the response commitment is, and who monitors your systems between incidents — those three answers separate a managed provider from a consultancy faster than any label.
- ▸Selling: 47.9% of this market is classified as IT consulting. If your business really is recurring managed contracts, saying so unambiguously is a differentiator, because most of your visible competition is not selling the same thing.
Questions this finding answers
- What does MSP stand for?
- The acronym is simple. What it covers in practice is not, so this answers it with the composition of an actual market rather than a definition.
- How was this measured?
- n = 39,188 published US firms in the IT services market, classified into four categories: msp, mssp, it_consulting and var_telecom. Service and vertical figures are quoted against the whole 39,188, with an unknown counting against the share — services are on file for 35,215 of them. Measured 2026-09-07 in one snapshot.
- What can't this number tell you?
- The four categories are MSP Signal's own classification, derived from what each firm publishes. There is no registry of managed service providers, and no firm is asked to self-identify.
Where does your firm sit on this?
Claim your MSP with a magic link from your company email to see your own certifications, reviews, web footprint and local rank measured against every provider we track.
Claim your MSP ▸Related markets
More findings
- 4.8%Only 4.8% of US IT providers present as an MSSP — and the ones that do are more than three times as likely to show a SOC 2.
- 1,8971,897 US firms present as MSSPs — and only 7.4% of them name managed security services as a service.
- 9.1%Project work is listed almost twice as often as managed work: 53.0% of US IT firms name a project service, 28.6% name a managed one.
- 15.5%6,083 US IT providers name education — 15.5% of the market.