Ricardo Villadiego, founder of Lumu, discusses the necessity of disruptive innovation in the managed service provider (MSP) sector. Drawing on principles from The Innovator’s Dilemma, he argues that current security stacks, consisting of firewalls, email filters, and endpoints, are frequently bypassed by sophisticated attackers. The primary goal is to shift MSPs toward a more resilient model that utilizes network metadata as the ultimate source of truth for identifying hidden compromises across all connected devices within an organization.
The session concludes that every MSP must evolve into a cybersecurity-centric organization within the next decade to remain viable. By leveraging Lumu’s disruptive approach, which includes automated metadata analysis and AI-driven expertise amplification, MSPs can empower entry-level analysts to perform at advanced levels. This transformation ensures operational efficiency and long-term business sustainability against evolving threats, moving away from failed legacy architectures like traditional SIEMs that struggle with modern cloud environments and storage optimization.
Takeaways
- The traditional security triad of firewall, endpoint, and email security is bypassed by 100% of successful modern cyberattacks.
- Ricardo Villadiego identifies the network as the ultimate source of truth because compromised networks consistently behave differently than healthy ones.
- Every managed service provider is predicted to transition into a specialized cybersecurity company within the next ten years to survive.
- Lumu’s ‘MSP Light’ offering allows partners to manage up to three customers with three integrations each at no initial cost.
- Real artificial intelligence should amplify human expertise, allowing Level 1 analysts to achieve Level 3 performance outcomes through automated lift.



