Free playbook for MSPs
The First 90 Days: launch a security practice without hiring a security person.
A week-by-week plan for new MSPs, and for established MSPs adding security. Baseline your clients, sell a paid assessment, and turn one-time fixes into retainers, with scripts you can send this week.
- ✓A 13-week plan in three phases: set up and baseline (days 1–30), sell assessments and add-ons (31–60), and QBRs, retainers, and insurance season (61–90).
- ✓12 short scripts: client baseline email, prospect intro, brief-open call opener, paid-assessment one-liner, proposal cover note, QBR agenda, retainer offer, referral ask, and more.
- ✓Example pricing for the services you'll sell, with every number labeled as an example or tied to a published source.
- ✓A "finding to conversation" cheat sheet that turns common external findings into plain-English talking points and services.
- ✓A printable 90-day checklist and a monthly rhythm for after day 90.
What's in the 90 days
Vendor-neutral advice first. You can run every step with tools you already have. Where Client Posture can do a step for you, we say so.
Days 1–30
Set up and baseline
- Look the part: your brand, your menu
- Baseline every client domain
- Build a 25–50 prospect list
- Send briefs, call the same day
Days 31–60
Sell assessments and add-ons
- Package one paid assessment
- Good / Better / Best proposals
- Recurring add-ons and policy packs
- A pipeline you can see
Days 61–90
QBRs, retainers, insurance
- First QBRs, one recommendation each
- Convert projects to retainers
- Become their insurance-season ally
- Referrals and a case study
Full contents
Days 1–30
Set up and baseline your clients and prospects
Days 31–60
Sell paid assessments and security add-ons
- Week 5 — Package a paid assessment
- Week 6 — Turn findings into proposals
- Week 7 — Add recurring add-ons
- Week 8 — Pipeline review
Days 61–90
QBRs, retainers, and insurance help
- Week 9 — Run your first QBRs
- Week 10 — Convert projects to retainers
- Week 11 — Become their insurance-season ally
- Week 12 — Referrals and a case study
- Week 13 — Reset for the next 90
Reference
Pricing, checklist, and where the product fits
- Example pricing for your own security services
- The 90-day checklist
- Where Client Posture fits (and where it doesn't)
Sample from the playbook
Baseline your existing clients
- Run the same external check on every client domain.
- Sort the results by verified fails. Those are your first paid fixes.
- Send each client their report with a short, no-pressure note. Don't sell yet. Just show up with something useful.
In Client Posture: bulk-import client domains by CSV, scan them all at once, and export findings to CSV for tickets or SOWs.
Free playbook for MSPs
The First 90 Days
Launch a security practice without hiring a security person.
The one rule
Never put a claim in front of a client that you can't back up. Client Posture only shows a fail when it has verified it. Anything it can't confirm says Unknown or Not tested, so your client never sees a false alarm with your logo on it.
Want to try step one now?
Scan your own domain free. No signup needed to scan. Public information only: no port scans, logins, or probes.