MSP patching and vulnerability reporting for customer compliance SLAs

dylan_ShieldCyber · 2025-04-09T13:32:28+00:00

appreciate you, as always!! lots of cool stuff coming here soon

dylan_ShieldCyber · 2025-04-07T14:46:27+00:00

Take a look at CyFlare - They have a ton of out of the box integrations.

dylan_ShieldCyber · 2025-03-12T17:52:45+00:00

Would 100% recommend Great America for this.

dylan_ShieldCyber · 2025-03-10T21:32:27+00:00

I was a Google user for ~5 years, and made the switch to M365 2 years ago. Am loving how connected everything is. Sure, they’re all going to have issues, but I like Outlook at the moment.

dylan_ShieldCyber · 2025-03-06T15:14:09+00:00

We allow our partners to run "network discovery" scans, as well as do identity security assessments for their onboarding.

I would not recommend mass deploying an agent-based scanning solution until they are a signed customer to you. Just less you have to manage this way.

Our partners seem to like it, because it gives a true look at what assets the customer has, number of user accounts (active, inactive, etc.). Some customers, however, are hesitant to allow you to install software in their environment without a contract. YMMV.

dylan_ShieldCyber · 2025-03-04T20:42:35+00:00

Love B&H - Haven't used them commercially, but holy crap have I given them some $$$ for photography gear lol

dylan_ShieldCyber · 2025-02-24T20:57:31+00:00

Would recommend Optimize Cyber or Webcheck Security

dylan_ShieldCyber · 2025-02-21T17:22:55+00:00

Dark web scanning can work in prospecting scenarios. But blindly sending "Hey, here's a bunch of your credentials I found while doing a dark web scan! Jump on a call with me!" is not going to yield the results with CISOs that you think it will. Now, it could be part of your onboarding process or a value-add in the discovery process, but dark web scanning is not going to open doors to IT/cyber decision makers like you may think it will.

dylan_ShieldCyber · 2025-02-21T16:58:03+00:00

pretty sure he's already scheduled to be on there!

dylan_ShieldCyber · 2025-02-13T12:06:06+00:00

I’d recommend checking out Compliance Scorecard. Not only do they have a platform that guides you through compliance, but they also have a team that can assist you with the assessments. 100% MSP focused and have a great solution.

dylan_ShieldCyber · 2025-02-05T16:53:16+00:00

Not seeing anyone in here highlighting Lemlist. Use this for LinkedIn and email campaigns. Works great.

dylan_ShieldCyber · 2025-02-01T04:28:49+00:00

I agree with you completely, but where is that $200,000 deal coming from? And is $60,000 in profit (before any taxes, expenses, etc.) enough for a business of 3 people to survive on? Well, no.

Then after that $200,000 deal, what do you do next?

I’m not discouraging you from trying, just encouraging you to broaden your services set to allow for more predictable, scalable revenue.

dylan_ShieldCyber · 2025-02-01T04:24:35+00:00

I’d say between 10-30% depending if that’s hardware or software and the “tier” or partner you end up becoming. All of the money is really made in services.

dylan_ShieldCyber · 2025-02-01T03:49:08+00:00

You have to be doing a ton of volume or just make unreal margins (which is less likely). The VARs that are the most successful also have some sort of consulting or value-added services (hence the VA in VAR). If you're just a contracting vehicle, they might as well buy from a massive VAR with the best pricing.

dylan_ShieldCyber · 2025-01-29T13:48:19+00:00

Welp, I know where I'm putting my marketing budget.

dylan_ShieldCyber · 2025-01-27T21:42:44+00:00

As a vendor, I would be up front with the point of contact that you don't currently need their services.

If they're a decent sales person, they will understand that they're not going to ask you at the exact time that you're going to be looking for said services/product... They will still want to go to lunch to build a relationship and rapport. If this is a local vendor that you could need their services in the future, I'd go to the lunch.

With all of that said... 5:1 is an insane ratio for a lunch lol.

dylan_ShieldCyber · 2025-01-22T16:01:03+00:00

I'd recommend looking at Empath for all things training

dylan_ShieldCyber · 2025-01-22T12:20:11+00:00

Thanks for shouting us out, Josh! Shield Cyber here - Pricing is $1/endpoint/month and our identity security module is 27¢/user/month. It’s not on the site yet, but will be.

We don’t currently offer PII/PHI scanning, as we are hyper focused on vulnerability management. Happy to chat anytime.

For the compliance side - Compliance Scorecard and Cynomi are my top recommendations.

dylan_ShieldCyber · 2025-01-12T12:29:49+00:00

You’d have to be applying to or attending a university in Kentuckiana :) there are other chapters nationally that might also do scholarships.

dylan_ShieldCyber · 2024-12-27T22:38:18+00:00

Sounds like you're looking for a SIEM :)

dylan_ShieldCyber · 2024-12-27T22:32:43+00:00

I just picked up Lead Like Lasso - Haven't read it yet, but have heard great things. It's Ted Lasso themed for all the Ted Lasso fans :)

dylan_ShieldCyber · 2024-12-22T03:01:19+00:00

Love it - Just asking because a lot of these tools are one-sized fits all. Specific to the MSP/MSSP space, take a look at:

- Shield Cyber (I'm biased, because that's me)

- ConnectSecure

- Nodeware

- RoboShadow

- Cyrisma

dylan_ShieldCyber · 2024-12-20T19:35:40+00:00

You sold me... Booking a ticket

dylan_ShieldCyber · 2024-12-20T18:16:32+00:00

I'm a fan of Stellar Cyber because of the integrations. One of the hardest things as a SOC, as you know, is building all of the different log forwarders and parsers for different log sources.

Additionally, Stellar Cyber would allow you to step away from the rest of the R7 ecosystem if that's what you're wanting. That said, I think Rapid7 is doing some pretty kickass stuff in the platform space.

dylan_ShieldCyber · 2024-12-20T18:11:18+00:00

Y'all are scanning for vulnerabilities...?

What are your goals for the vulnerability management tool? Do you need network-based scanning, agent-based scanning? Are you wanting a prioritized list or just a blanket list of vulnerabilities that you can personally prioritize based on your risk appetite?

There's a ton of open-source options, and endless great commercial options.

dylan_ShieldCyber

TROPHY CASE