A widening cyber-security gap between big and small firms: Small firms can't scale their defences to match AI-powered attacks
AI has made cyber attacks cheap to run and easy to scale. Large firms can answer in kind: they have security teams, budgets and tools, and they can grow each as the threat grows. Small businesses cannot. Their systems are often set up and looked after by outside suppliers, their defences are seldom tested, and a break-in is often found by someone else. So the same change raises the risk for big and small firms alike but the defence only for the large, and the gap between big and small firms widens. What is missing is defence that scales the way attacks now do: priced for a small firm, and able to run without a security team.
Owners of small businesses without a security team · the IT and web suppliers that set up and look after their systems · customers whose data is taken in a break-in · the banks and insurers that carry the losses
Why now
An ENISA survey of small and medium enterprises, carried out during the pandemic, found that around nine in ten expected serious harm to their business within a week of a cyber incident and that over half believed it would likely end the business, against a backdrop of low security budgets and a lack of in-house cyber skills. BleepingComputer reported on 23 September 2026 that the security firm Gambit traced one operator who used open-source AI agents to breach at least 27 companies in five days and take more than 600,000 card records, at an average of $25.46 per completed scan. The UK government's Cyber Security Breaches Survey, published in April 2026, shows the defending side split by size: 76% of large businesses had a formal plan for handling an attack, against 21% of micro businesses
Why it matters
An existential risk to the firms that make up the overwhelming majority of businesses, where the binding constraint is operator time rather than money or intent. Security that needs nobody to watch it is a different product from the one being sold. Security products assume someone to run them: alerts to sort, tests to commission, fixes to make. Small firms buy what their IT or web supplier offers, and many already pay one for security. A small team could start with one case where the stakes are clear, such as small online shops whose checkouts draw card thieves: constant, automated checks of the site, priced for a small firm and sold through the suppliers that already look after it.
From public reporting
Framed from public reporting. Here is what it was drawn from, so the framing can be checked against it:
Work it through with Ainna and it is packaged as finished documents: a problem framing document and deck, a pitch deck, a PRD and more. See the document examples
Take it to a hackathon
Use it as a challenge statement: copy it as a brief with who it affects, why now and the evidence to start from, ready for your event page. More hackathon problem statements on the Index.
In the collections
Hackathon problem statements 2026 · Real-world hackathon problem statements for 2026: sourced, scoped and ready to hand out. Each copies as a challenge brief with its evidence.
Cite it
“Small firms can't scale their defences to match AI-powered attacks.” Ainna Problem Radar, problem 0009, 21 September 2026. https://ainna.ai/problems/small-firms-face-enterprise-attacks-without-a-security-team
Problem Radar listens to public reporting, from institutions, research and the press, for problems worth solving, and frames each one to the same standard; Ainna's innovation team chooses and edits every problem before it goes on the Index. Every problem says where it came from, so the framing can be checked. Nothing on the Index comes from a user, and what you bring to Ainna is never published. How Problem Radar works.
Support has been largely automated, and for routine questions that is an improvement. The unusual case is where it breaks: a bereavement, a billing error, a locked account, a situation the script has no branch for. The customer loops, rephrases, tries again, and eventually gives up, and the company never learns it happened, because a failed escape is rarely a metric anyone collects.
Framed by Ainna editorial
Framed 21 Sep · High (Ainna's editorial grade)
For whomCustomers in genuinely unusual situations · the few remaining human agents · support leaders flying blind
Organisations that run websites and online services need to know who is using them, so they can serve people, share data safely and hold someone to account when something goes wrong. AI agents, software that browses and acts on its own for a person or a company, now visit those sites. Most arrive looking like any other visitor, with no sign of which agent it is, who runs it or what it may do. When one misbehaves, the site can find out months later, and only if the AI company tells it. Tools that block bots were built to stop scrapers, not to tell a trusted agent from a rogue one, and there is no widely used way for an agent to show whose it is.
We can now say with some precision which occupations generative AI reaches first, how that varies by country, and that the exposure falls hardest on clerical and administrative work done mostly by women. What does not exist is the other half: a route from an exposed role into an adjacent one that uses the same accumulated judgment. Retraining is too often offered as courses unrelated to what the person already knows how to do.
For whomClerical, administrative and business support workers · employers holding the institutional knowledge in those roles · public employment services
