I wrote the standard for making websites AI-operable. Learn More

Benchmarks · Information Security Consulting

Cybersecurity and Cloud Infrastructure Consulting · Small

Small (6-20) US Intermediate maturity

65% Automation Opportunity Gap

This is the delta between where the segment is today and where it could be if automation were deployed against the work that's actually automatable. The higher the number, the more opportunity is on the table for operators in this segment.

"Top performers in small cybersecurity consulting firms leverage AI SOC and automation tools to reduce breach costs by over $2M per incident and cut manual workloads by up to 60%. They achieve faster incident detection and 24/7 coverage despite small teams, driving strong ROI and operational efficiency compared to peers."

Maintained by Tyler Willis · Automation Benchmarks · Updated · CC-BY-4.0 — cite this work

Methodology & sources

Where this data comes from and how to read it.

Collection methodindustry reports, vendor case studies, secondary research
Source credibilitySecondary
Statistical confidence70%
Data vintageJun 2026
Geographic scopeUS

Automation adoption

What percentage of this segment is using each category of automation today.

  • Using any automation: 49.0%
  • Using AI tools: 49.0%
  • Planning to invest in next 12mo: 49.0%

Typical automation budget: USD 100K-1.2M

Top tools in use: AI SOC platforms, XDR, automation for threat detection

Financial metrics

Revenue, retention, and profitability signals for the segment.

  • Reported ROI from automation: 2.2x

Growth & operations

How operators in this segment win — and what holds them back.

Primary bottleneck: understaffed security teams

Recurring pain points:

  • high breach costs
  • long breach dwell times
  • limited 24/7 coverage
  • cost of inaction

What top performers do differently:

  • AI/automation adoption
  • 24/7 AI SOC coverage
  • risk quantification for CFO buy-in
  • cost reduction through automation

Benchmark Index

Composite score comparing this segment to every other tracked segment.

55 /100

Take the raw data

Full segment dataset as CSV or JSON, plus API access — for client presentations, board decks, or building on top of it.

View JSON (free) Download CSV — paid API access

Cite this work

This entry is part of the Tyler Willis Intelligence public dataset and licensed under CC-BY-4.0. You're free to quote, redistribute, and feed it into AI systems — please carry the source URL or one of the citation strings below. 

Willis, Tyler. "Cybersecurity and Cloud Infrastructure Consulting · Small." *Automation Benchmarks*, tylerewillis.com/intelligence, accessed June 12, 2026. <https://tylerewillis.com/intelligence/benchmarks/information-security-consulting-small-us>
Willis, T. (2026). Cybersecurity and Cloud Infrastructure Consulting · Small. Tyler Willis Intelligence — Automation Benchmarks. Retrieved June 12, 2026, from https://tylerewillis.com/intelligence/benchmarks/information-security-consulting-small-us
@misc{willis_benchmarks_information_security_consulting_small_us,
  author       = {Willis, Tyler},
  title        = {{Cybersecurity and Cloud Infrastructure Consulting · Small}},
  howpublished = {Tyler Willis Intelligence --- Automation Benchmarks},
  year         = {2026},
  url          = {https://tylerewillis.com/intelligence/benchmarks/information-security-consulting-small-us},
  note         = {Accessed June 12, 2026. CC-BY-4.0.}
}
curl -s https://tylerewillis.com/intelligence/api/benchmarks/information-security-consulting-small-us.json | jq

Every JSON response carries a _source block with the canonical URL and citation string. Programmatic consumers: read that field.

For operators in this segment

Want to know where your agency sits?

The numbers above are segment averages. A benchmark audit puts your specific numbers next to your peers — and identifies the automation gaps that are actually costing you, ranked by how fast they pay back.

Book a Benchmark Audit Back to All Benchmarks