Endpoints
Desktops, laptops and servers: every device managed, patched, protected by EDR, with local admin removed and end-of-support hardware flagged.
Your cyber insurer will ask if you have MFA, tested backups and endpoint protection. Most owners can't prove it. The MSP Assessment checks what your MSP actually delivers and gives you a clear report in about 10 business days.
The same checks at every company size. Larger environments get sampled, not skipped.
Desktops, laptops and servers: every device managed, patched, protected by EDR, with local admin removed and end-of-support hardware flagged.
Firewall firmware, support and licensing, switch and access point age, guest network separation, config backups and how remote access works.
MFA on every user and admin, no shared or stale accounts, email security (SPF, DKIM, DMARC), awareness training and who actually watches the alerts.
What's covered, including Microsoft 365, whether an offsite or immutable copy exists, and proof of the last restore test.
Licenses vs. active users (are you paying for people who left?), Secure Score, conditional access and sharing settings.
Your controls mapped against a standard carrier questionnaire, and anything you've attested to that isn't actually in place.
Response and resolution times from a 90-day ticket export vs. your SLA, repeat issues, how tickets get escalated and a short staff survey.
What your contract covers vs. what's delivered and billed, and whether you own your admin credentials, network diagram, asset list and vendor list.
Does your vCIO or customer success manager meet on a set schedule and bring real guidance? Are they helping improve your business systems and grow revenue, or just renewing the contract? IT should be a partner, not a line item.
If something goes wrong, does your team know who to call at your MSP and what happens next? We check whether an incident response plan, escalation contacts and SOPs for onboarding, offboarding and everyday tasks actually exist. When the plan is already built, your team follows the steps instead of panicking and making it up on the fly. Gaps here lead to SOP & Incident Response Planning →
A one-minute guided walkthrough. Tap your answers and get your MSP Scorecard, your price and one free fix. No sales call required.
Not available to current Sullivan-Solutions managed services clients.
You know the full cost before you commit.
| Users | Price |
|---|---|
| Up to 25 | $1,950 |
| 26 to 50 | $3,500 |
| 51 to 100 | $5,500 |
| 101 to 250 | $8,500 |
| 251 to 500 | $16,500 |
+$750 per additional location. +$2,500 for regulated environments (HIPAA, CMMC, financial).
Complete the MSP Assessment and we waive the $1,500 setup fee on Cyber Insurance Renewal Readiness.
This is not a pitch to take over your IT. The goal is to help you get full value from the MSP you already pay. Your MSP gets a clear, specific fix list, not blame. Most gaps come from scope nobody wrote down, not from bad intent.
We will not solicit your managed services business for 12 months after the assessment. If you want help later, you can call us. We won't call you.
Mike Sullivan brings IT executive experience and 17 years running a successful technology business. He spent 15 years on the managed services side and has reviewed thousands of MSPs.
He knows what good service looks like, what to ask for, and how to get it fixed without burning the relationship. You get a straight answer you can act on.
No. We help you get what you already pay for. Your MSP gets the same fix list you do, and we won't solicit your managed services business for 12 months.
Give us read-only access and a few standard exports: asset list, patch report, a 90-day ticket export and backup job reports. Most MSPs spend an hour or two in total.
That tells you something on its own. We still review everything we can reach directly and note the gaps in the report.
Yes. We check the controls insurers ask about and give you a gap sheet you can use on your application. Over 25 users, completing the assessment also waives the $1,500 setup on Cyber Insurance Renewal Readiness.
No. We look at configurations, settings and records. We don't open your business files or email.
About 10 business days from kickoff to your report and readout.
Take the one-minute Agent MSPA walkthrough to get your price and a quick risk read.