The Stack Gap: Addressing The Identity Layer In MSP Security
As security stacks expand, many solution providers are finding gaps in areas that traditional tools do not fully address. Identity risk tied to unmanaged and personal devices is becoming a common concern for MSPs supporting distributed workforces.
Peter Giardino, head of MSP channel strategy at Aura Business, said the industry has historically centered on device-focused protection. “Traditionally, I think there's been tools that have really focused on hardware risk as opposed to identity risk.” He noted that user behavior and credential security are now a larger part of the threat landscape.
This shift is creating challenges for MSPs, particularly those serving small and midsize businesses. Eric Meibers, solutions consultant at Aura Business, said partners are struggling to find a practical approach. “Many MSPs are kind of left scrambling trying to play catch up typically ends with them either cobbling together point solutions, which can be cumbersome and expensive, or just kind of washing their hands of it all together.”
The issue is not limited to tools. MSPs are balancing security needs with user privacy and operational overhead. Solutions such as mobile device management can add visibility, but they may also introduce resistance when applied to personal devices.
Research discussed in the webinar shows that many incidents are tied to credential theft and phishing activity outside managed environments. Giardino said this gap often sits beyond existing visibility. “The biggest risks MSPs face today aren't happening on managed devices. They're happening at the identity level, which is typically outside their visibility.”
Rather than replacing existing tools, Giardino said MSPs should consider adding coverage where they lack insight. An identity-focused layer can extend protection into unmanaged environments while aligning with existing security stacks.
To learn more about how Aura supports MSPs and is changing BYOD security, visit Aura.com/msp.