Now accepting January 1 Cyber Insurance Renewals. See your timeline and price in 1 minute →
MSP Assessment

You pay your MSP every month. Can you prove what you're getting?

Your cyber insurer will ask if you have MFA, tested backups and endpoint protection. Most owners can't prove it. The MSP Assessment checks what your MSP actually delivers and gives you a clear report in about 10 business days.

10 areasreviewed, from endpoints to incident response
~10 daysfrom kickoff to your report
Fixed priceby company size, from $1,950
12 monthsno-solicit commitment on your managed services
Is this you?

If two or more of these sound familiar, this is for you.

  • You sign the MSP invoice every month and couldn't say exactly what it covers.
  • Your cyber insurance application asks about MFA, backups and EDR, and you're taking your MSP's word for it.
  • Tickets sit for days, and nobody tracks how long they take.
  • A former employee may still have access to email or files.
  • You've never seen a list of your devices, licenses or network setup.
  • Your MSP is probably fine. You just have no way to check.
What we review

Ten areas. One straight answer.

The same checks at every company size. Larger environments get sampled, not skipped.

01

Endpoints

Desktops, laptops and servers: every device managed, patched, protected by EDR, with local admin removed and end-of-support hardware flagged.

02

Network & Wireless

Firewall firmware, support and licensing, switch and access point age, guest network separation, config backups and how remote access works.

03

Security & Identity

MFA on every user and admin, no shared or stale accounts, email security (SPF, DKIM, DMARC), awareness training and who actually watches the alerts.

04

Backup & Recovery

What's covered, including Microsoft 365, whether an offsite or immutable copy exists, and proof of the last restore test.

05

Microsoft 365 & Licensing

Licenses vs. active users (are you paying for people who left?), Secure Score, conditional access and sharing settings.

06

Cyber Insurance Readiness

Your controls mapped against a standard carrier questionnaire, and anything you've attested to that isn't actually in place.

07

MSP Service Delivery

Response and resolution times from a 90-day ticket export vs. your SLA, repeat issues, how tickets get escalated and a short staff survey.

08

Contract & Documentation

What your contract covers vs. what's delivered and billed, and whether you own your admin credentials, network diagram, asset list and vendor list.

09

Strategic Partnership

Does your vCIO or customer success manager meet on a set schedule and bring real guidance? Are they helping improve your business systems and grow revenue, or just renewing the contract? IT should be a partner, not a line item.

10

Incident Response & SOPs

If something goes wrong, does your team know who to call at your MSP and what happens next? We check whether an incident response plan, escalation contacts and SOPs for onboarding, offboarding and everyday tasks actually exist. When the plan is already built, your team follows the steps instead of panicking and making it up on the fly. Gaps here lead to SOP & Incident Response Planning →

What you get

Written for owners and CFOs, not technicians.

  • A 2-page executive summary in plain English
  • A red, yellow, green scorecard for all 10 areas
  • A prioritized fix list with owner, effort and rough cost for each item
  • An MSP-ready copy of the fix list, written in neutral, no-blame language
  • A cyber insurance gap sheet you can use on your Cyber Insurance Renewal
  • A 60-minute readout with your leadership team
  • A 30-day follow-up check on progress
How it works
  1. Take the walkthrough. Agent MSPA gives you a price and a quick risk read in about a minute.
  2. Kickoff call. We confirm scope and send your MSP a short request for read-only access.
  3. Review. We check your environment and your MSP's service records. Your MSP spends an hour or two, total.
  4. Report. In about 10 business days you get the findings, the fix list and a call to walk through them.
Agent MSPA

Your MSP Scorecard and price in about a minute.

A one-minute guided walkthrough. Tap your answers and get your MSP Scorecard, your price and one free fix. No sales call required.

Agent MSPAMSP Assessment walkthrough

Not available to current Sullivan-Solutions managed services clients.

Pricing

Fixed price by company size.

You know the full cost before you commit.

UsersPrice
Up to 25$1,950
26 to 50$3,500
51 to 100$5,500
101 to 250$8,500
251 to 500$16,500

Add-ons

+$750 per additional location. +$2,500 for regulated environments (HIPAA, CMMC, financial).

Over 25 users?

Complete the MSP Assessment and we waive the $1,500 setup fee on Cyber Insurance Renewal Readiness.

Get My Price
We work with your MSP, not against them

Most MSPs aren't bad. Most MSP relationships are unmanaged. We fix that.

This is not a pitch to take over your IT. The goal is to help you get full value from the MSP you already pay. Your MSP gets a clear, specific fix list, not blame. Most gaps come from scope nobody wrote down, not from bad intent.

Our commitment

We will not solicit your managed services business for 12 months after the assessment. If you want help later, you can call us. We won't call you.

Mike Sullivan, founder of Sullivan-Solutions LLC
Mike SullivanFounder & Principal, Sullivan-Solutions LLC
Who does the assessment

Someone who has sat on both sides of the table.

Mike Sullivan brings IT executive experience and 17 years running a successful technology business. He spent 15 years on the managed services side and has reviewed thousands of MSPs.

He knows what good service looks like, what to ask for, and how to get it fixed without burning the relationship. You get a straight answer you can act on.

Questions

What owners ask before they start.

Are you trying to replace my MSP?

No. We help you get what you already pay for. Your MSP gets the same fix list you do, and we won't solicit your managed services business for 12 months.

What does my MSP have to do?

Give us read-only access and a few standard exports: asset list, patch report, a 90-day ticket export and backup job reports. Most MSPs spend an hour or two in total.

What if my MSP won't cooperate?

That tells you something on its own. We still review everything we can reach directly and note the gaps in the report.

Will this help with my Cyber Insurance Renewal?

Yes. We check the controls insurers ask about and give you a gap sheet you can use on your application. Over 25 users, completing the assessment also waives the $1,500 setup on Cyber Insurance Renewal Readiness.

Do you need access to our data?

No. We look at configurations, settings and records. We don't open your business files or email.

How long does it take?

About 10 business days from kickoff to your report and readout.

Stop guessing what your MSP delivers.

Take the one-minute Agent MSPA walkthrough to get your price and a quick risk read.