Platform features

Everything in the SBCMSP platform

1,692 checks across four surfaces, ten compliance frameworks, AI remediation, monitoring and white-label reporting — explore every capability.

Get started Platform overview
Scan surfaces

Everything attackers and auditors can reach — external, internal, cloud and identity.

External Security Scanning

Continuously scan every client’s internet-facing attack surface: TLS, DNS, email authentication, exposed services, su…

Learn more

Attack Surface Management

Subdomain discovery, shadow-IT detection, third-party exposure mapping and a live port inventory — the full external …

Learn more

Deep Scan (EASM)

Over 4,000 CVE and template checks fire against every live host — KEV/EPSS-ranked, graded A–F and routed into the same findings queue…

Learn more

Windows Internal Agent

A lightweight Windows agent runs 324 internal checks across 18 core + 16 advanced modules: BitLocker, patching, local admin, AD attack p…

Learn more

SBCMSP Agent

Deploy once and the SBCMSP Agent reports continuously — per-host scoring, public-IP exposure scanning and identity fi…

Learn more

AWS Security Posture

168 checks across IAM, S3, EC2, CloudTrail, KMS and VPC — public exposure, weak IAM and misconfiguration flagged conti…

Learn more

Azure Security Posture

116 checks across Identity, Storage, Network, Key Vault, VMs, SQL and Defender — misconfiguration and public exposure …

Learn more

Microsoft 365 / Entra Assessment

126 checks on MFA coverage, conditional access, legacy auth, risky sign-ins, external sharing and tenant hardening, s…

Learn more

Google Workspace Security Posture

18 checks across 2-step verification, super-admin hygiene, risky OAuth apps, Alert Center and mobile posture — read-o…

Learn more

Google Cloud Security Posture

16 checks across IAM, public buckets, open firewalls, Cloud SQL, DNSSEC and log export — misconfiguration flagged per…

Learn more

Container & IaC Scanning New

32 Terraform and CloudFormation misconfiguration rules plus container SBOM CVE scanning, KEV/EPSS-ranked and on-deman…

Learn more

Public-Repo Secret Scanning New

Finds a client's leaked API keys, tokens and cloud credentials across public repos, gists and history — masked sample…

Learn more
Intelligence & remediation

Rank by real-world risk and guide the fix.

KEV / EPSS Intelligence

Every finding is enriched with CISA KEV listing status and EPSS exploit probability, so your techs fix what attackers…

Learn more

Threat Intelligence Feeds New

Public indicator-of-compromise feeds matched against every discovered asset — malicious IPs, domains and file hashes…

Learn more

Attack Path Correlation New

Correlate findings across external, deep-scan, endpoint and cloud into named attacker escalation routes — not a flat li…

Learn more

AI vCISO

A continuous virtual-CISO program that reasons over each client’s real multi-surface posture every night — briefings, …

Learn more

Score Projection

A color-coded score trend plus a projection that says “fix these 5 findings and this score goes from 83 to 97” — the …

Learn more

AI Remediation Guidance

Each finding pairs with AI-written, step-by-step remediation guidance — implementation steps, verification commands a…

Learn more

SLA Tracking & Escalations

Severity-driven SLAs (critical 24h, high 72h, medium 14d, low 30d) start the clock the moment a finding lands. Overdu…

Learn more

Active Defense

Turn a finding into a scoped, operator-approved action — disable a compromised Microsoft 365 account — behind a guardrail spine that keeps every step reversible and…

Learn more

AI Trust & Data Governance

Every client identifier is tokenized before any AI prompt and re-hydrated locally; evidence review stays text-only, with per-feature toggles and an activity…

Learn more

Approve-First AI Actions New

The in-app assistant proposes fixes as preview cards with a before/after diff — rescan a domain, set a finding's status, open a PSA ticket. Nothing runs until you click Apply…

Learn more

Remediation Campaigns New

Fix one recurring finding across every affected client, or patch one vulnerable package or CVE across the whole fleet, as a single approve-first campaign that proposes the fix per target…

Learn more

Security & Compliance Autopilots New

Control-drift detection that proposes a fix, an evidence-staleness review queue, a living security roadmap and one-click board packs — every change approve-first…

Learn more
Compliance

Ten frameworks, mapped and evidenced.

10-Framework Compliance

SOC 2, HIPAA, PCI DSS v4, NIST CSF 2.0, CMMC, ISO 27001, CIS v8, FTC Safeguards, Cyber Essentials and CIS Controls — …

Learn more

Evidence-Backed Compliance

Every control shows as automated, attested or undocumented — and an AI-generated questionnaire closes the gaps the sca…

Learn more

Cyber-Insurance Readiness

Map a client’s live posture onto the control questions carriers ask — MFA, EDR, tested backups — as a branded readine…

Learn more
Monitoring

Always-on checks on uptime, certs and DNS.

SSL / TLS Monitoring

Continuous SSL/TLS monitoring — chain, protocol, cipher strength and grade — with expiry alerts at 30, 14 and 7 days.

Learn more

Uptime & Keyword Monitoring

Check availability as often as every 30 seconds, watch for keywords on the page, and alert when an unexpected port op…

Learn more

DNS Change Detection

A continuous record of every client’s DNS — A, AAAA, MX, TXT, NS, CNAME — with a change log you can acknowledge and a…

Learn more
Reporting & integrations

Prove it and route it — under your brand.

White-Label Client Portal

A live, client-facing portal — your logo, your domain, your colors — showing posture, open issues and compliance, plu…

Learn more

Integration Hub

Connect your whole stack — identity, MDM, EDR, RMM, backup, documentation, SIEM — with read-only keys. 20+ live integ…

Learn more

PSA Integration

Connect HaloPSA, Autotask, Syncro, Atera or NinjaOne and route findings to tickets automatically — with severity mapp…

Learn more

Evidence Vault

Every scan, report and remediation acceptance is captured to the Evidence Vault with content-addressed hashes and tim…

Learn more

Scheduled Reports

Pick a framework, cadence and recipient list — SBCMSP generates the PDF on schedule and emails it (or posts to a webh…

Learn more

Client Trust Center

A branded, public, no-login page showing a client’s live grade and framework coverage — proof you can hand a prospect,…

Learn more

Auditor Evidence Sharing

Bundle the report, attestation log and manifest into one package — or share an expiring, redacted, no-login link an au…

Learn more

Compliance Evidence Integrations

Connect the tools clients already run — training, PSA, backup, HRIS, EDR — and their data becomes automated evidence; …

Learn more

Business Reviews (QBR)

Generate a client-ready quarterly review — posture trend, what you remediated, remaining risk and next steps — as a br…

Learn more
Platform

The multi-tenant foundation.

MSP Security Platform

External, internal, cloud and identity scanning, compliance, remediation and white-label reporting — 1,692 checks acr…

Learn more
Detection & response

Run a full SOC and incident-response practice for every client.

Managed Detection & Response

Turn alerts and findings into a run SOC workflow — a triage queue, runnable threat hunts, tabletop drills, a live incident war room and ATT&CK mapping.

Learn more

Detection Rule Library

A curated, tunable library of detection rules you enable and tune per client — version-controlled content mapped to your frameworks and MITRE ATT&CK.

Learn more

On-Call & Escalation

On-call rotations showing who is covering now, step-based escalation ladders that page the next tier automatically, and one-tap acknowledge and resolve.

Learn more

Incident Response

The IR suite — a client-specific plan builder, retainer tracking, a breach-notification workflow with regulatory timelines, and post-incident lessons-learned capture.

Learn more
Identity, governance & programs

Identity assurance, AI and cryptography posture, advisory engagements and vCISO deliverables.

Identity & Access Governance

Recertify who holds access, inventory every service account and key, flag standing privilege for just-in-time, and simulate conditional-access changes before enforcing.

Learn more

AI Security Posture

Govern how clients use AI — acceptable-use policy tracking, LLM application security checks, an AI agent and tool inventory, and deepfake readiness.

Learn more

Cryptography & PQC Readiness

Discover PKI and certificates, catch sprawled keys and tokens, check signing and SBOM posture, and plan the migration to post-quantum cryptography.

Learn more

SaaS Security Posture (SSPM)

Posture management across connected SaaS apps — misconfiguration detection, over-privileged access, external sharing exposure and MFA gaps, from one console.

Learn more

Security Advisory

Structured advisory deliverables beyond scanning — OT/ICS checklists, third-party vendor reviews, a physical-security walkthrough and network-segmentation readiness.

Learn more

Human Risk Management

Measure and shrink the human attack surface — phishing simulations, awareness-training tracking, a per-user human-risk score, plus leaderboards and badges.

Learn more

Governance Deliverables

The vCISO governance output layer — board-ready security packs, executive digests, security-committee packets and budget planning, as drafts you review.

Learn more
Programs

Ways to partner with SBCMSP.

Founders Club

Early MSP partners get founder pricing for life, direct roadmap input, white-glove onboarding and priority support.

Learn more

Run your first scan free

See a client’s real posture in minutes — then unlock all 1,692 checks.

Get started View pricing