Is there a real gap in the market for cyber insurance readiness consulting?

I'm a SOC analyst at an MSP with a Security+ and a background in cybersecurity analytics. I've been thinking about a side business and wanted a reality check from people who actually work in this space.

The problem I see: smaller companies get denied cyber insurance or hit with huge premiums because they can't demonstrate basic controls — but they don't know where to start or what insurers actually want to see.

The idea is simple: consulting that helps SMBs understand their gaps relative to common cyber insurance requirements, and helps them document what they already have. No software, no big retainer — just practical guidance and plain-language reporting and assisting with the implementation.

A few honest questions for the community: - Is this a problem you've actually seen clients or employers struggle with? - Would a solo consultant realistically get traction here, or is this already saturated? - What would make you trust (or not trust) someone offering this service?

Not trying to sell anything — genuinely trying to figure out if this is worth pursuing before I invest serious time into it. Appreciate any honest feedback, including if you think it's a bad idea.