PwC Cybersecurity
PwC's cyber consulting arm advises big companies on security risk and breach response.
The call
PwC's cyber practice is winning industry awards while the firm around it shrinks for the first time in 15 years, and Deloitte keeps pulling ahead.
PwC offers cybersecurity services like breach response, risk audits, and compliance work, often bundled with its audit business to reach large companies. The work is hard to replace because PwC has deep relationships with major corporations and auditors who trust them, but Anthropic Claude and OpenAI are now automating entry-level tasks like vulnerability scanning and report writing (turning hours into minutes), and Deloitte is already winning more of this business overall. The one thing that changes everything is whether you end up in a senior advisory role (protected and valuable) or a junior analyst role (the exact jobs being automated and cut right now).
Why
01
AI pressure: Anthropic Claude Opus and OpenAI agentic tools. PwC says AI cuts remediation from hours to minutes, which is great for clients but shrinks the junior analyst work that trains new hires. Could AI do the core job? Only partly.
02
Bigger players: Deloitte. Deloitte holds 18.1% of global security services and 32% of consulting cyber work, well ahead of PwC's share. Could a giant copy it? Probably.
03
What protects it. Audit relationships and Fortune 500 penetration (82%) mean clients buy cyber work bundled with existing PwC trust, not shopped separately.
What would change this call
PwC FY2026 report (~Oct 2026) shows cyber headcount vs firm-wide headcount. Whether cyber is protected/growing or shrinking alongside the rest of the firm.
Next Gartner/IDC cyber market-share update comparing PwC and Deloitte. Whether Deloitte's lead over PwC widens or narrows.
Additional PwC RIF rounds in H2 2026 and where cuts concentrate. Whether junior/analyst cyber roles keep getting automated away.
Next Gartner/IDC cyber market-share update comparing PwC and Deloitte. Whether Deloitte's lead over PwC widens or narrows.
Additional PwC RIF rounds in H2 2026 and where cuts concentrate. Whether junior/analyst cyber roles keep getting automated away.
Key numbers
- PwC FY25 revenue $56.9B, up only 2.9%
- Global headcount fell 5,600, first drop since 2010
- Deloitte grew 4.8% vs PwC's 2.9%
Named risks
- First global PwC headcount contraction since 2010, with repeated RIFs through 2025 signaling structural cost pressure.
- AI-driven compression of junior analyst and GRC documentation roles, the traditional entry ramp for new joiners.
- Deloitte's widening lead in cybersecurity market share (18.1% vs PwC, as of June 2026) risks further share erosion.
- Two consecutive years of decelerating firm-wide revenue growth (FY24 3.7%, FY25 2.9%) as of October 2025.
- Reputational and regulatory fallout from China Evergrande audit scandal, including $62 million fine and six-month suspension.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Deloitte | losing to | Deloitte #1 in security services with 18.1% global share, 32% of consulting sub-segment, as of 2026-06-21 |
| Deloitte | losing to | Deloitte grew revenue 4.8-4.9% in FY2025 vs PwC's 2.9%, per 2025-10-29 report |
| EY | contesting | EY grew 3.9-4% in FY2025, ahead of PwC's 2.9% revenue growth, as of 2025-10-29 |
| Accenture | contesting | Named alongside PwC as direct competitor in cybersecurity consulting market reports, no dated share data disclosed |
| IBM Consulting | contesting | Overlaps with PwC in managed security and cyber consulting services, per market landscape reports |
Questions people ask
- Is PwC's cybersecurity practice profitable and growing in 2026?
- PwC does not break out cybersecurity practice revenue, but its parent Advisory segment grew 4.5-4.6% to about $24.3-24.4 billion in FY2025 (ended June 2025), while total PwC revenue hit a record $56.9 billion, up only 2.9%, its second straight year of decelerating growth, as of October 28, 2025.
- Could AI replace PwC's cybersecurity consultants?
- PwC itself says AI is replacing routine work: it states security tasks that 'took hours now take minutes' using Anthropic's Claude Opus 4.7 for agentic remediation, deployed May 2026, and plans to train 30,000 US staff on Claude, per its May 14, 2026 Anthropic alliance announcement. Junior analyst work is most exposed.
- Who is PwC's biggest competitor in cybersecurity consulting?
- Deloitte. Gartner ranked Deloitte number one in global security services by revenue for the third year running, with 18.1% global market share and 32% of the security consulting sub-segment as of June 21, 2026, well ahead of PwC and other Big Four firms.
- Did PwC lay off cybersecurity staff?
- No cyber-practice-specific layoffs have been disclosed publicly. PwC's documented 2025 cuts hit audit/tax (~1,500 US staff, May 2025), advisory/tech ops (~1,800, September 2024), and business services (~150, November 2025), while it simultaneously hired senior cyber leadership like Morgan Adamski from the NSA in mid-2025.
- Who owns PwC?
- PwC is a private global partnership network, not a public company. Member firms are separate legal entities (typically LLPs) overseen by PricewaterhouseCoopers International Limited, an English company limited by guarantee. Global chairman as of October 2025 is Mohamed Kande; there is no external investor or IPO history.
- How much is PwC investing in AI for cybersecurity?
- PwC invested roughly $1.5 billion in FY2025 (through June 2025) to expand AI capabilities firmwide, part of $3.1 billion total network investment including 12 acquisitions, and in 2026 rolled out Anthropic Claude Opus 4.7 and OpenAI-powered tools specifically for cyber defense and remediation, per releases dated May 14 and July 9, 2026.
Timeline
- 2026-07-09PwC announces expanded AI cyber defense capability with OpenAI
- 2026-06-21Deloitte ranked #1 in global security services with 18.1% share, third year running
- 2026-05-14PwC and Anthropic expand alliance; plan to train 30,000 US staff on Claude
- 2026-05-04PwC deploys Claude Opus 4.7 agentic vulnerability remediation via MCP
- 2026-04-09PwC launches 'The rise of autonomous AI in cybersecurity' series
- 2026-03-17PwC named Leader in Forrester Wave Cybersecurity Consulting Services Q1 2026
- 2025-12-18PwC named Leader in IDC MarketScape Cybersecurity GRC Consulting 2025-2026
- 2025-10-28PwC reports record $56.9B FY2025 revenue but first global headcount drop since 2010
- 2025-06-01PwC hires ex-NSA executive Morgan Adamski to lead US Cyber, Data and Tech Risk
- 2025-05-06PwC RIFs about 1,500 US audit and tax employees, roughly 2% of US workforce
Revision history
21 July 2026
First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- PwC global revenues rise to US$56.9 billion (2025-10-28)
- PwC grows global revenue by 2.7% to $56.9 billion (2025-10-30)
- PwC Reports Global Revenue of $56.9 Billion in 2025 (2025-10-29)
- PwC a leader in the IDC MarketScape (2025-12-18)
- PwC rated as a leader in Cybersecurity Consulting Services (2026-03-17)
- PwC shrinks global workforce for first time since credit crunch (2025-10-28)
- PwC RIF'd About 2% of Its U.S. Workforce (2025-05-06)
- PwC abandons headcount target as revenue growth slows (2025-10-28)
- Morgan Adamski named US Cyber, Data & Tech Risk Leader
- The rise of autonomous AI in cybersecurity (2026-04-09)
- PwC and OpenAI expand AI cyber defense (2026-07-09)
- Preparing for the vulnerability onslaught (2026-05-04)