UK SMEs to increase reliance on managed security services, new report says
A new report by Six Degrees has revealed that UK small and medium-sized enterprises (SMEs) are set to increase their reliance on managed security services throughout 2025. The independent research, titled Mapping the UK SME Cyber Security Landscape in 2025, highlights a growing trend of outsourcing cyber security needs due to skills shortages and compliance pressures.
Key findings
According to the report:
Two-thirds (66%) of SMEs expect to become more reliant on managed security services over the next 12 months.
80% of these businesses view this shift positively.
Only 13% anticipate reducing their reliance, while 19.5% plan to maintain their current levels.
Why SMEs are turning to managed security services
The research identified key drivers behind this increasing dependence on third-party security providers:
Lack of specialist cyber security skills – 37% of SMEs say their teams lack the expertise to manage complex security solutions.
Compliance and regulatory requirements – 36% cite industry regulations and legal mandates as a primary motivator.
Growing cyber threats – 34% are concerned about the rising volume and sophistication of cyber-attacks.
Need for 24/7 security coverage – 28% see round-the-clock protection as a major benefit.
Shifting responsibility – Over 20% of SMEs admit they outsource security to transfer liability to a third party.
Expert Insights
Vince DeLuca, CEO of Six Degrees, acknowledges the trend but warns against assuming managed security services can fully offload cyber risk.
“We’ve long understood that many security investments are driven by compliance needs. But the ongoing cyber security skills shortage makes SMEs more vulnerable, increasing their reliance on third-party providers,” DeLuca explains. “However, security isn’t something you can fully outsource—businesses must adopt a shared risk approach and integrate security into their overall strategy.”
Addressing SME cybersecurity frustrations
The shift towards managed security services is also linked to common pain points SMEs face in managing cyber security internally. The report highlights 11 major frustrations, including:
High implementation costs (43%)
Long implementation times (37%)
Underutilization of existing security solutions (33%)
Loss of in-house security experts (24%)
By partnering with managed security service providers (MSSPs), SMEs can access advanced solutions such as Managed Extended Detection and Response (MXDR) for threat analysis and containment—without the burden of hiring and retaining in-house specialists.
The future of SME cybersecurity
As cyber threats evolve and regulatory requirements tighten, SMEs are increasingly seeing outsourced security as a strategic move rather than just a cost-saving measure.
“There’s a direct link between cyber security frustrations and the lack of skilled professionals,” DeLuca concludes. “By relying more on managed services, SMEs are not just addressing skills shortages but also enhancing their security posture in a way that aligns with their business needs.”
