Services
Let's Chat

Hook

Video Poster Image

Key Takeaways:

  • Process Before Platform
    Map your customer journey first. Then choose the tools that support it. Automation without clarity just amplifies the chaos.
  • Build a Single Source of Truth
    Stop juggling multiple systems. Pick one core platform for data and integrate everything else into it.
  • Automate the Repetitive, Personalise the Rest
    Automate the predictable. Keep the personal moments human. That’s how you stay connected while scaling.
  • AI Should Be Your Teammate, Not Your CEO
    Use AI to assist, not decide. It should lighten your cognitive load — not replace your judgment.

If your business feels like it’s held together with spreadsheets and wishful thinking, this episode will show you how to scale without losing the soul of your brand.

Sub-Header 1

Sub-Header 2

Sub-Header 3

Sub-Header 4

Sub-Header 5

Sub-Header 6

Sub-Header 7

Sub-Header 8

Sub-Header 9

Sub-Header 10

The Real Reason Buyers Pick the Big 4 Over Better Cybersecurity Firms

Jun 30, 2026

Key takeaways

  • Losing pitches to the Big 4 usually isn't about budget. It's a category problem: when your positioning reads the same as theirs, buyers default to the familiar name.

  • Challenger brands don't try to win the same game as the market leader. They break a rule the category follows, on purpose, so they stop being compared at all.

  • A position counts only if a Big 4 firm cannot structurally occupy it. Their size is their cage. Yours is your advantage.

  • Run your positioning through 3 questions: could a Big 4 firm say this without losing a client, does it leave someone out, does the right buyer lean in or scroll past.

  • Niching down and repellent positioning aren't the same thing. "Cybersecurity for small businesses" is a market segment. A position names the buyer's exact situation.

"The founders who stop losing to bigger businesses own a position so specific that a Big 4 firm structurally cannot occupy it."

 

I had a client recently win a near-six-figure strategic engagement and the full implementation contract, against a Big 4 firm the buyer had already paid and walked away from.

She runs a two-person consultancy, has been in business for only three or four years in business and doesn't have a global brand behind her.

The buyer had brought in one of the Big 4 first and paid serious money. Got a report back so broad it didn't move anything. So he made a second call, to her, and she walked away with everything.

That's not luck. That's what happens when your positioning is specific enough that a buyer who's already been burned by broad knows exactly who to call next.

If you've lost work to a bigger firm and told yourself it was the budget or their name on the door, I want to walk you through why that diagnosis is almost certainly wrong.

The frustrating part underneath this

If you're a cybersecurity founder who's lost a pitch to a bigger firm, you've probably got a stronger track record than the team that won it. Tighter delivery. Better outcomes. Work that actually gets used instead of filed away.

And clients still choose them anyway.

Here's the question underneath the frustration: what's the point of being this good if nobody can see it?

It's a category problem. When a buyer opens a shortlist and can't immediately see why you're different, their brain reaches for the only safe move left. It picks the familiar name. Familiar feels safe, and safe is the path of least resistance when you're exhausted and dropping a Big 4 name in Friday's board meeting makes the person who hired them look good for the choice.

You're losing because you're comparable. And the comparable always loses to the well-known.

Why the standard advice makes this worse

The usual fix you'll hear is: get better credentials, look more established, and sharpen up the website. I understand the instinct. It just doesn't address the actual problem.

Buyers are overwhelmed with options right now. And, when we’re looking at choices that appear to be similar, our brains tend to default to the safest, most familiar one rather than evaluating each option on its merits. That's a well-documented pattern in how people make decisions under uncertainty, and it works against you the moment your proposal reads like a broad capability list.

Because then yours and the Big 4's land in the same mental category. Same shelf, side by side, compared the same way a supermarket compares own-brand to name-brand. On that shelf, the bigger company wins even when they're more expensive.

The buyer who eventually called my client had already been on that shelf. Bought the big name, got the broad report, watched it do nothing.

Getting off the shelf entirely. That's the actual goal.

What a challenger brand actually does

A challenger brand changes the game rather than trying to play the market leader's game better. It finds a rule everyone in the category follows without question, and breaks it on purpose, not recklessly, deliberately, so it stops being compared to the leader at all.

It's hard to see your own positioning clearly when you've spent years inside the industry. You know too much about how it works to see how a buyer experiences it from outside. So before the cybersecurity examples, here's that mechanic in action.

The market leader can't copy the move without undoing what makes them the market leader. That's the whole point.

Liquid Death sells water. You can get water from Evian, San Pellegrino, any supermarket shelf, any vending machine on the planet. Nobody compares Liquid Death to any of them, not in conversation, not in anyone's head.

Every other water brand competes on the same things: purity, source, health credentials, maybe sustainability. Liquid Death looked at that game and refused to play it. Instead, they asked who else is thirsty that the big water brands are ignoring completely, and ran a campaign declaring parenting the world's most extreme sport. Parents in an octagon, battling toddlers dressed as MMA fighters. Changing a nappy as a heavyweight bout. ESPN-style commentary on surviving a headbutt.

Energy drink brands sponsor motocross riders and MMA fighters. Liquid Death looked at that convention and asked who else takes that level of physical and mental punishment that nobody's speaking to. Exhausted parents, who arguably need the caffeine more.

They didn't change the product. They changed who they're being compared to. The buyer's brain files Liquid Death next to energy drinks, maybe a band they like. It never opens the water-brand drawer at all.

That's the move: make the comparison impossible, not just harder.

 

Your category is the actual problem

When a cyber founder leads with a positioning statement such as, "comprehensive cybersecurity services for businesses of all sizes," that sentence puts them in the same row as KPMG on a buyer's spreadsheet. And spreadsheets sort by price.

A firm that bills thousands of partners cannot say, "we only work with mid-market fintech companies going through their first regulatory audit." That sentence would disqualify too much of their pipeline for them to risk it.

Their size is their cage. You can walk through doors they can't fit through.

 

The Category Test

How do you know if you've actually stepped off that spreadsheet, or just reworded the same broad position with different words? Run your current positioning through 3 questions.

1. Could a Big 4 firm say this without losing a client?

If yes, you're still on their spreadsheet. "We help businesses improve their cybersecurity posture" is something KPMG says daily. "We help regulated financial services firms map their third-party risk exposure before an audit window closes" isn't. It's too narrow, too committed to one problem, and it would disqualify most of their pipeline.

 2. Does your positioning leave someone out?

Good positioning means something specific to the right buyer and very little to the wrong one. The specialist from the story isn't for every company, and she's not trying to be. The buyer who called her knew immediately she was right for his situation. That only happens when what you say is sharp enough to repel who it isn't for too.

3. When the right buyer reads it, do they lean in or scroll past?

Not whether it sounds good. Whether the person you actually want stops, rereads it, and thinks, "This person gets it." When that lands, they figure out how to get you on a call instead of comparing you against a shortlist. Price stops being the deciding factor, because you're no longer in the category they'd compare on price.

None of these 3 questions are about certifications, headcount, or years in business. They're about clarity of position.

 

Two mistakes founders make once they hear this

Niching, but staying in the same category. "Cybersecurity for small businesses" sounds specific. A hundred consultancies say something close to it, and so does a Big 4 subsidiary. Specificity means the right buyer reads it and thinks, "That's me." "Governance systems for financial services firms going through their first NIS2 audit who need the work delivered without the founder running every session" does that. The other one's a market segment, not a position.

Finding the bold position, then softening it. A bold position feels risky. What if it puts someone off? But a soft position also puts off the right buyers, constantly and unintentionally, because they scroll past it in search of someone who understands their specific situation. They often can't even name why, because it happens that fast and that subconsciously.

The position that feels risky is usually the one that works.

 

Frequently asked questions

Why do I keep losing pitches to bigger cybersecurity firms even when I have a stronger track record?

Because the comparison is happening on price and brand familiarity, not capability. When your positioning can be easily compared to the Big 4 firms', buyers default to the safer, more familiar name because it feels “trusted”. Fixing your positioning means changing the category you're compared in, not your credentials. The 2-person consultancy in this article won her a near six-figure engagement against a Big 4 firm for exactly this reason. Her positioning, not her headcount, made the buyer call her second.

What's the difference between niching down and the positioning described in this article?

Niching narrows your market. This is about using a specific, exclusionary position as a trust signal, one a Big 4 firm structurally can't copy without disqualifying their own pipeline. A niche statement like "cybersecurity for small businesses" can still sit on the same shelf as a Big 4 subsidiary. A position the Big 4 can't structurally say at all takes you off that shelf entirely, which is the actual mechanism behind why it converts faster.

Will being this specific lose me clients?

In practice, it tends to do the opposite. You stop spending proposal time on leads that were never going to convert, and the buyers who do reach out already think you're the right fit before the first call.

How do I know if my positioning is still too broad?

Run it through the Category Test: could a Big 4 firm say this without losing a client? Does it leave anyone out? Does the right buyer lean in or scroll past? If a Big 4 firm could say it word for word, you're still on their spreadsheet.

Is this only relevant to cybersecurity consultancies?

The challenger brand mechanic applies anywhere a smaller firm competes against bigger, better-resourced competitors. The Category Test questions are written specifically for cyber founders, but the underlying logic applies to any founder-led consultancy up against a Big 4 or enterprise-scale competitor.

Do I need new certifications or a bigger team before I can do this?

No. The 3 questions are about clarity of position, not credentials, headcount, or years in business. That's the entire point. A Big 4 firm has more certifications and more people than you ever will. It's available to you now, regardless of where your business is today.

Related reading

This piece sits in the same territory as a few others on positioning and differentiation, written for a wider service-business audience but worth a read if this resonated:

 

Resources mentioned

 

 
If you want to see whether you're still on the Big 4's spreadsheet, or whether you've actually found your zag, the Category Test takes a few minutes: findyourzag.

Stay connected with episodes, news and behind-the-scenes updates!

We hate SPAM. And we will never sell your information, for any reason.

Frequently Asked Questions

Resources Mentioned

Recent Episodes

The Real Reason Buyers Pick the Big 4 Over Better Cybersecurity Firms

Why Being the Best in Your Business Is Capping Your Growth

Why Warm Prospects Go Cold and the 7 Beliefs Every Buyer Needs First