WillItSurvive
Cybersecurity companies · subsidiary of KPMG International Limited · Netherlands

KPMG Cyber

Big Four cybersecurity consulting arm advising boards on risk, audits, and breach response.

Defensible for now
Assessed 21 July 2026 · Evidence as of 21 July 2026
Real protection, with named pressure against it.
On the recordSince 21 July 2026 · Checkable from December 2026 · Every call on the record Checkpoint: KPMG FY26 financial results, testing whether Advisory growth accelerates past 2.9%
The call

KPMG Cyber keeps its board-trust position while Deloitte and Accenture out-grow it and AI tools quietly shrink the junior work underneath the practice.

KPMG Cyber helps companies find and fix security problems, using its position inside the Big Four accounting firms to reach executives and boards. It is hard to replace because of deep client relationships and access to audit data, but Deloitte dominates the market with almost twice KPMG's share, and new AI tools from Microsoft and Anthropic can now do routine threat detection and vulnerability work that KPMG staff used to do, which will squeeze profit margins on lower-level jobs. The one thing that could change the picture is whether KPMG can rebuild trust after recent scandals in Australia and Canada involving audit confidentiality and regulatory violations, because companies will not buy security advice from a firm they no longer trust.

Why
01
AI pressure: Anthropic Claude and Microsoft Copilot/Agent 365. KPMG deployed Claude and Copilot across 276,000 staff in 2026 to automate SOC triage and log analysis, the junior work that funds the pyramid. Could AI do the core job? Only partly.
02
Bigger players: Deloitte Cyber and Accenture Security. Deloitte holds 18.1% of the security-services market and Accenture is growing 17.8% against an 11.5% market, both outpacing KPMG's 2.9% Advisory growth. Could a giant copy it? Probably.
03
What protects it. Audit licensure and board-level trust give KPMG regulatory standing that software vendors and pure consultancies cannot easily buy.
What would change this call
KPMG FY26 Advisory growth figure released around December 2026. Growth below the 11.5% security-services market rate would confirm share loss to Deloitte and Accenture.
Outcome of Ontario Securities Commission Bridging Finance proceedings (C$40M exposure). An adverse ruling would extend trust erosion from audit into KPMG's cyber-risk credibility.
Next Forrester Wave Cybersecurity Consulting report (late 2026/early 2027). Loss of Leader status to Deloitte or Accenture would show competitive slippage in advisory rankings.
Key numbers
  • KPMG Advisory revenue $16.4B, grew 2.9% (2025-09-30)
  • Deloitte holds 18.1% of $84.4B security market (2025)
  • Accenture Security growing 17.8% vs 11.5% market (2025)
Named risks
  • AI agents (Claude, Copilot) automating SOC triage and vulnerability scanning could shrink lower tier cyber staffing needs. Severity: medium
  • Deloitte and Accenture outgrowing KPMG's Advisory line, eroding relative market position in cyber consulting. Severity: high
  • KPMG Australia audit confidentiality scandal and ASIC partner investigation could erode brand trust underpinning cyber advisory credibility. Severity: medium
  • Ontario Securities Commission proceedings against KPMG Canada over Bridging Finance audits pose legal and reputational exposure. Severity: medium
  • Rapid firm wide rollout of Claude and Microsoft Agent 365 across 276,000 staff creates AI governance and security execution risk. Severity: low
Rivals, as read in July 2026
RivalDirectionEvidence
Deloittelosing toDeloitte holds 18.1% global security services share and ranked number one for third straight year, 2026-06-22
Accenturelosing toAccenture Security grew 17.8% versus KPMG Advisory's 2.9% in FY25, reported 2025 to 2026
MicrosoftcontestingKPMG partners with Microsoft (Agent 365, Copilot deployed 2026-06-09) rather than being displaced, positioning as ally not pure rival
AnthropiccontestingKPMG embeds Claude firm wide from 2026-05-19 for vulnerability remediation, blending vendor tool with advisory service
PwCcontestingPeer Big Four cyber consulting practice competing in same Forrester and Gartner rankings, no standalone share disclosed
EYcontestingPeer Big Four cyber consulting practice competing for same enterprise cyber advisory mandates, no standalone share disclosed
Questions people ask
Is KPMG Cyber losing market share to Deloitte in 2026?
Yes, per Deloitte's own June 2026 disclosure Deloitte holds 18.1% of the global security services market and 32% of the security consulting sub segment, ranking number one for a third straight year, while KPMG's Advisory line, which houses Cyber, grew only 2.9% in FY25 versus the market's 11.5% growth.
Could AI replace KPMG Cyber's staff?
KPMG's own 2026 Cybersecurity Considerations report flags SOC triage, log analysis and first line threat detection as shifting to autonomous AI agents, and KPMG deployed Anthropic's Claude in May 2026 specifically to find and fix vulnerabilities, suggesting lower level cyber roles face real automation pressure while advisory and CRQ work remain less exposed.
Is KPMG Cyber profitable?
KPMG does not disclose standalone cyber practice profit. Its parent Advisory line generated $16.4 billion in FY25 (year ended September 30, 2025) on 2.9% growth, within KPMG's overall $39.8 billion global revenue, up 5.1% in local currency, per KPMG's December 16, 2025 press release.
Who is KPMG Cyber's biggest competitor?
Deloitte Cyber is the largest rival, ranked number one globally in security services with 18.1% market share and 32% of the security consulting sub segment as of 2025 per Gartner data cited by Deloitte on June 22, 2026, ahead of Accenture Security which grew 17.8% against an 11.5% market average.
What AI tools has KPMG Cyber adopted?
KPMG embedded Anthropic's Claude across its Digital Gateway platform and all 276,000plus staff globally starting May 19, 2026 for tasks including vulnerability remediation, and on June 9, 2026 expanded its Microsoft alliance to deploy Agent 365 for AI agent governance plus Microsoft 365 Copilot firm wide.
Does KPMG Cyber have a proprietary product edge?
Yes, Forrester named KPMG a Leader in Cyber Risk Quantification Solutions in Q2 2025, stating KPMG is the only major professional services firm offering its own full featured CRQ solution, its Cyber Risk Insights platform, distinguishing it from Deloitte, PwC, EY and Accenture in that niche.
Timeline
  • 2026-07-20KPMG Australia fines seven staff up to A$180,000 over audit confidentiality breach; ASIC probes three partners
  • 2026-06-09KPMG expands Microsoft alliance: Agent 365 for AI agent governance, Copilot rolled out firm wide
  • 2026-06-01KPMG publishes Cybersecurity Considerations 2026 report flagging autonomous security workforces
  • 2026-05-21KPMG publishes report on cyber threats eroding Energy M&A integration value
  • 2026-05-19KPMG global alliance with Anthropic embeds Claude across Digital Gateway and all staff
  • 2026-03Ontario Securities Commission enforcement proceedings begin against KPMG Canada over Bridging Finance audits
  • 2026-02-19Forrester names KPMG a Leader in Cyber Risk Quantification Solutions
  • 2026-02-18Forrester names KPMG a Leader in Cybersecurity Consulting Services Europe, Q4 2025
  • 2025-12-16KPMG reports FY25 global revenue of $39.8 billion, up 5.1%
  • 2025-12-15KPMG survey finds 99% of US security leaders plan cybersecurity budget increases
Revision history
21 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources