The Signal
In the seven days from Apr 13 to Apr 20, four DoGood network members posted active rationalization decisions across four different categories. A Law Firms IT leader is putting an iVanti ITSM stack against ServiceNow. A Consumer Products IT director is shopping the MSP relationship for a Q3 replacement. An Education AVC and CISO is consolidating security sensors. A Software security manager is consolidating an AI agent inventory. No two submissions named the same target vendor.
Pull the lens back to the full 30-day window and the breadth holds. Eight rationalization decisions across six member companies span Software, Consumer Products, Law Firms, Education, Healthcare, and Business Services. The categories named cover the enterprise stack: ITSM, MSP, security sensors, observability tooling, AI agent inventory, and workflow automation. The pattern is breadth, not concentration.
The Network's Vendor Watchlist
Most-mentioned vendors in member priority submissions over the last 30 days, in descending order: Pipefy (3), GitHub Copilot (3), ServiceNow (2), Cursor (2), Red Canary (2), Datadog (2). 26 distinct vendors are mentioned exactly once. No single vendor is dominating the conversation. That fragmentation is the consolidation problem in microcosm: when buyers are evaluating dozens of tools in parallel, the platform pitch lands harder than the point-solution pitch.
From the Network
"Currently an iVanti shop for ITSM. Looking at the market for potential replacements. Reviewed Service Now, but also seeing your product."
"We are looking to potentially replace our MSP in the late third quarter of this year."
"Looking into what options there are to consolidate sensors with other options."
Three different categories. Same posture: shop the market, narrow the stack.
Top Open Priorities This Week
Two raw asks pulled directly from member submissions in the last 14 days, unedited:
"We have many security tools. But need to use each of them separately during the investigation."
"We're noticing an issue as we're trying to scale our SIEM. I'm curious to learn about your per-user pricing and automated threat detection for our M365 environment."
Both members are sitting on consolidation prerequisites. One is feeling the cost of fragmentation, the other is hitting the scale wall of a single tool. These are the conversations vendors should be in this week.
Powered by the DoGood network
The data in this issue came from priority submissions by 5,000+ enterprise IT leaders. If you run IT or security at a $100M+ company and want to see what your peers are funding — and earn rewards for participating in vetted meetings with the vendors worth your time — apply to join DoGood.
The Context
ServiceNow closed its $7.75 billion acquisition of Armis last week, folding cyber asset and exposure visibility into the same control plane that runs many enterprise ITSM and CMDB workflows. The deal lands in a quarter that already logged 108 cybersecurity M&A transactions, the second-highest quarterly count in sector history.
The headlines are catching up to what the network was already showing. While members are independently trimming their stacks, vendors are absorbing each other. The categories the network is rationalizing this month (ITSM, MSP, security sensors, observability tooling, AI inventory) overlap directly with the categories the platforms are now rolling up.
Bottom Line: Consolidation pressure is bidirectional. If your renewal calendar runs through 2026, the vendor on the other side of the table may be a different company by the time you sign.
What to Do About It
Pull a 90-day inventory of every renewal worth $100K or more. For each line item, identify the platform vendor most likely to absorb that capability in the next 12 months and price both paths. Walk into renewal conversations with the consolidation alternative already costed.
Going through a tools rationalization review right now? The DoGood network is sitting on hundreds of recent peer notes covering vendor switches, platform replacements, and stack reductions across ITSM, MSP, observability, and security tooling. Apply to join to compare notes with the leaders making these calls this quarter.
The CXO Brief is powered by the DoGood network, 5,000+ IT leaders sharing what they are actually working on.
Know a CIO who needs this? Forward it and they can subscribe here.
Enterprise IT leader at a $100M+ company? Apply to join DoGood.