The Forrester Wave™: Cybersecurity Consulting Services, Q1 2026 Report

The Forrester Wave™: Cybersecurity Consulting Services, Q1 2026 report is just out.

Cybersecurity consulting is in transition as genAI and automation promise faster, tailored insights — yet client expectations outpace current capabilities. Buyers increasingly expect real-time adjustments to risk assessments and policy recommendations, but most providers still operate on structured phases rather than continuous delivery. This gap fuels scrutiny of engagement economics: While firms advertise AI-driven efficiencies, customers rarely see proportional cost reductions. Procurement teams now demand transparent pricing and measurable ROI, challenging providers to reconcile innovation claims with actual savings. CISOs must navigate a mature market where differentiation depends on operationalizing AI without sacrificing governance or trust.

Cybersecurity consulting services customers using this evaluation to inform a purchase decision should consider:

• AI and automation embedded in workflows
• Strategy aligned with business outcomes
• Transparent economics and ROI evidence as requirements

Congrats PwC, EY and McKinsey for being Leaders on this report.

Download the full report: https://reprint.forrester.com/reports/the-forrester-wave-tm-cybersecurity-consulting-services-q1-2026-960c10c6/index.html

Dr. Philip Cao

Dr. Philip Cao (aka #DrPC), EDBA, MSCS, ZTX-I, CCISO, CISM, CMSC, CCSP, CCSK, CASP, GICSP, PCSPI is a Strategist, Advisor, Educator, Contributor and Motivator. He’s also a Cyber | Zero Trust Strategist & Evangelist and Chief Trust Officer. He has 24 years’ experience in IT/Cybersecurity industry in various sectors & positions.

See author's posts