Broadcom is dismantling of VMware Cloud Service Providers (VCSPs)

-

 


What Broadcom Is Doing to the VCSP Program

1. Broadcom is shutting down the existing VCSP program

Multiple sources confirm that Broadcom issued formal non‑renewal notices to many VMware Cloud Service Providers, ending contracts as of January 26, 2026.
Partners may finish existing commitments but cannot renew or create new long‑term contract commitments.

2. Moving to an invite‑only VCSP ecosystem

Broadcom is replacing the open VCSP model with a highly selective, invite‑only program, keeping only a small fraction of providers.
For example:
• Only 19 providers in the U.S. were retained out of thousands.
• Hundreds of European providers are being cut loose.

3. White Label program sunset (critical for smaller providers)

The White Label model—previously the path for smaller CSPs—has been terminated (or will be phased out depending on region).
This effectively eliminates market access for many small providers.

4. Providers that are cut must hand off customers

Broadcom directs non‑renewing VCSPs to transition customers to the remaining authorized partners to “ensure a smooth transition.”

5. Motivation: Narrowing focus + pushing VMware Cloud Foundation (VCF)

Broadcom states the restructuring is about:
• “evolving customer requirements”
• aggressively promoting VMware Cloud Foundation (VCF) as the core platform
• working with a “focused set of partners” with proven scale and expertise

This is consistent with Broadcom’s broader push toward:
• subscription‑only licensing
• reduced partner counts
• consolidation of VMware services into fewer, higher‑value bundles

Impact on Cloud Service Providers (CSPs)

1. Hundreds of CSPs losing VMware authorization

Especially in Europe, sources describe the situation as “a bulldozer named Broadcom” flattening the market and forcing CSP exits.

2. Risk of forced customer migrations

Customers of affected CSPs may be required to migrate, with major operational and cost implications.

3. Reduced competition & higher prices

Industry groups like CISPE warn the consolidation could lead to:
• higher customer costs
• reduced sovereignty
• fewer local cloud options

Bottom Line

Broadcom is indeed dismantling the traditional VCSP program — not simply restructuring it. The changes are sweeping, abrupt, and largely eliminate smaller providers from the VMware ecosystem.

The new model dramatically concentrates control and aligns with Broadcom’s broader strategy of:
• fewer partners
• full commitment to VCF
• subscription‑only licensing
• tighter ecosystem control

Popular posts from this blog

WSUS CVE-2025-59287 Mitigation

-
Image
CVE-2025-59287 is a critical Remote Code Execution (RCE) vulnerability affecting Windows Server Update Services (WSUS) . Here's a detailed breakdown of what it is, how it works, and what you should do about it: Overview Disclosed: October 2025 Patch Tuesday CVSS Score: 9.8 (Critical) Affected Systems: Windows Server 2012 through 2025 (including Server Core installations) Exploitability: Microsoft rates it as “Exploitation More Likely” Technical Details The vulnerability arises from unsafe deserialization of untrusted data in WSUS. Specifically, the GetCookie() endpoint in WSUS processes encrypted AuthorizationCookie objects without proper type validation. The deserialization occurs via .NET BinaryFormatter , which is known to be insecure when handling untrusted input. Attackers can send a crafted SOAP request to WSUS over port 8530 , containing a malicious AuthorizationCookie . The cookie is decrypted using a hardcoded AES key and then deserialized, allow...
Read more

Cloud Infrastructures are Having a Bad Week

-
Image
  Today’s disruptions across Microsoft Azure and Amazon Web Services (AWS) were significant, but they’re not signs of cloud computing’s demise. Instead, they underscore the risks of centralization and the importance of designing systems that can withstand provider-level failures. What happened today? • Microsoft Azure outage: Azure’s Front Door service suffered a major disruption due to a misconfiguration, impacting services like Outlook, Xbox, Microsoft 365, and even third-party platforms like Starbucks and Alaska Airlines. The Azure website states a little more than disruption. "Azure Front Door - Connectivity issues - Observing recovery Starting at approximately 16:00 UTC on 29 October 2025, customers and Microsoft services leveraging Azure Front Door (AFD) may have experienced latencies, timeouts, and errors. We have confirmed that an inadvertent configuration change was the trigger event for this issue. Affected Azure services may have included, but were not limited to: App S...
Read more

CVE-2025-58034 Fortinet Warnings and Mitigation

-
Image
Type: OS Command Injection vulnerability (CWE-78) Affected Product: Fortinet FortiWeb (Web Application Firewall) Affected Versions: 8.0.0 – 8.0.1 7.6.0 – 7.6.5 7.4.0 – 7.4.10 7.2.0 – 7.2.11 7.0.0 – 7.0.11 [nvd.nist.gov] , [cvedetails.com] Description The vulnerability is caused by improper neutralization of special elements used in OS commands . An authenticated attacker can exploit this flaw by sending crafted HTTP requests or CLI commands , allowing them to execute arbitrary code on the underlying system. This can compromise the integrity, confidentiality, and availability of the device. [nvd.nist.gov] , [cvedetails.com] Severity CVSS v3.1 Base Score: 7.2 (High) Vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Impact: High on Confidentiality, Integrity, and Availability [cvedetails.com] Exploitation Status Actively Exploited: Yes. Fortinet confirmed expl...
Read more