MSP finds it gives away security services competitors charge for, and flaws in its own tenants
A small managed IT services provider. Outcome verified
The problem
A small managed IT services provider was being pulled into security work its customers expected, but gave much of it away inside its base price and doubted its own tools would survive scrutiny once it called itself a security provider. MFA exceptions had accumulated across client tenants, and no public pricing existed to benchmark against.
Why it mattered
Once customers pay for security explicitly, 'pretty good for an MSP' stops being acceptable. A misconfiguration repeated across client tenants becomes a liability, and underpriced services cap growth.
What we did
Vizius audited the provider's own consoles in a representative customer tenant, then reframed the offering around the outcomes customers actually buy (ransomware, data breach, fraud, insurance payout) and mapped what each requires. It gathered competitor pricing to benchmark the base package and drafted tiered offerings.
What changed
The provider received ten prioritized technical findings, led by overly broad MFA exceptions and permissive file sharing, and a pricing analysis showing its detection-and-response service could command roughly two and a half to three times its current charge while staying below competitors.
- Technology services and msp
- Small company
- Cyber insurance requirements