MSP & vCISO Tenancy

Run assessments for your entire client base under one managed tenancy

Embed the Security Compliance Hub into your consultancy or MSP practice. Deliver professional-grade cyber assessments across 25 client organisations as standard, and up to 1,000 on a raised tenancy, with Phronesis AI-powered reports, client-ready exports, and sector benchmarking from a single managed account — core frameworks included, specialist assessments and your own bespoke frameworks layered on top.

25 to 1,000 client organisations
12 core frameworks, add-ons & bespoke
Phronesis AI on every report
Client-ready PDF & JSON exports
Secure tokenised result-sharing
Sector benchmarking & peer comparison
Remediation Tracker per client
Compliance Passport for each client
Dedicated onboarding & partner support
Discuss MSP Tenancy Volume pricing available. Contact us for a tailored quote.

Eleven included, six specialist add-ons, and room for your own

A practice rarely runs one kind of engagement — the tenancy doesn't assume you do either.

Included in every tenancy

No extra licence — every client can run any of these from day one.

Cyber EssentialsNCSC CAFDORA ISO 27001ISO 42001AI GovernanceCRMA NIST CSF 2.0CIS Controls v8.1NIS2 Directive SOC 2 ReadinessUK GDPR
Specialist add-ons

Licensed separately, unlocked per practice, then available across your whole client book.

PE Cyber Due DiligenceSOC Maturity & AI ReadinessSOC-CMM CMMC Level 2FedRAMP ModerateHIPAA Security RuleDCC Readiness
Bring your own

We'll build a private or client-confidential framework to your spec — it sits on every client tile exactly like the rest, visible only to your practice.

e.g. "Acme Group Vendor Risk v2"

Your whole book, one screen — and colleagues you can actually bring in

Not a shared login. A portfolio with real access control.

Every client gets their own tile: assessments, a cross-framework risk view, an Evidence Vault, and a remediation tracker, all scoped to that engagement. Growing past a one-person practice doesn't mean sharing your password — invite a colleague and hand them exactly the clients they're working on, as an Editor or a read-only Viewer, and change it later without re-inviting them.

msp-portal.html

Client Portfolio

6 of 25
Alder Logistics
Transport · CAF
82%
Active
Harrow Dental Grp
Health · CE
61%
Stale >90d
Finch Underwriting
Finance · DORA
88%
Active
Orven Retail Co.
Retail
—
Unassessed

Team & Access

3 members
JM
Jae Marsh
jae@practice.co.uk
EditorAll clients
RK
Priya Kaur
priya@practice.co.uk
Viewer3 clients
Invite a colleague
name@practice.co.uk
Editor
Viewer
All clients
Specific clients
Alder Logistics Harrow Dental Grp + Add client
Send invite
Per-client scope, not all-or-nothing

Bring on a junior analyst for two engagements without handing them the other twenty-three. Scope is set at invite time and editable any time after.

Editor or Viewer, per person

Editors run assessments and update client records. Viewers get read-only access — useful for a partner or an account manager who needs visibility, not the keys.

One posture view per client

Assessments, cross-framework risk mapping, Evidence Vault, and a remediation tracker sit under each client tile — the same tools your own account uses, scoped to them.

Every framework for that client, wherever it's up to

Nothing pretends to be finished until it is.

Open Alder Logistics and every framework you run for them sits on one screen — completed and scored, mid-assessment with a saved draft, analysed but not yet finalised, or simply not started yet. The same five tabs (Assessments, Risk & Remediation, Workspace, Integrations, Third Party Risk) sit under every client in the portfolio.

msp-portal.html?client=alder-logistics
← Portfolio
Alder Logistics
Transport & Distribution · 340 employees
76%
avg across 2 scored
Assessments
Risk & Remediation
Workspace
Integrations
Third Party Risk
NCSC CAF
14 principles
82%
Completed 3 Aug 2026
View results →
DORA
5 pillars
64%
Continue →
ISO 27001
8 sections
69%
Analysed — awaiting finalisation
Review & finalise →
Cyber Essentials
6 controls
30%
Continue →
CRMA
14 themes
—
Not started
Start assessment →
AI Governance
7 domains
—
Not started
Start assessment →
SOC Maturity
Specialist add-on
—
Not enabled for this client
Enable add-on →
Vendor Risk v2
Bespoke · Custom framework
54%
Continue →

Everything you need to deliver compliance at scale

Use our platform to deliver assessment services across your client base

Phronesis AI analysis, sector benchmarking, exportable reports, and secure client result-sharing built into every engagement.

25 client organisations
included
raisable to 1,000

Certification Readiness

Run Hub assessments against client environments and deliver a structured readiness report for CE, CE Plus, ISO 27001, CAF, or DORA certification.

Gap Analysis & Remediation

Surface prioritised gaps across frameworks with Phronesis AI, then deliver a client-branded remediation roadmap with timeline and cost estimates.

Policy & Documentation

ISMS policies, procedures, and documentation aligned to ISO 27001, DORA, or NIS2 requirements, informed by your client's live assessment scores.

AI Governance Advisory

Guide clients through the EU AI Act, ISO/IEC 42001, and NIST AI RMF using the Hub's AI Governance Assessment as the baseline for risk classification.

Virtual CISO

Fractional CISO services with continuous Hub-powered posture monitoring. Run each client's ISMS from the first day: risk register, method, RACI, business assets and Statement of Applicability, with no assessment needed first. Assess against ISO 27001, ISO 42001 or the CAF once it has taken shape (Risk Management datasheet).

Security Tool Integrations

Connect Microsoft 365, Google Workspace, CrowdStrike Falcon, and Okta to pull live security signals directly into Hub assessments, auto-populating question hints with real posture data.

The one-pager for running this as a service

1 page First page of the Running your own Compliance-as-a-Service partner sheet

Running your own Compliance-as-a-Service

Everything on this page, on one side of A4 — short enough to forward to a colleague, attach to a proposal, or put in front of a partner in a meeting.

  • One portfolio across your clients, one method your whole team delivers, one evidence trail you can still prove a year later
  • Where the evidence comes from: connect a client's Microsoft 365 tenant once, read-only, and their tool-stack evidence arrives on its own
  • What stays yours: the client relationship, what you charge and your brand — including on the supplier-facing pages your clients’ suppliers actually see
Download PDF PDF · 1 page · 191 KB · no sign-up
2 pages First page of the Posture and pipeline datasheet

Posture & pipeline: every client's basics, then the work priced (beta)

A tab in the MSP Portal for seeing which clients need attention and turning it into a statement of work, shown with a fictional MSP and its clients.

  • Identity, Endpoints, Patching and Incidents for every client, read from its own connected tools or its finalised assessments, each reading naming its source
  • The clients that need attention first: a warning or bad reading, answers their own tools contradict, or an assessment over 90 days old
  • A remediation project for each, priced in days at your rates, with Pro Services quotes, a numbered statement of work and a pipeline of your fees
Download PDF PDF · 2 pages · 0.9 MB · no sign-up

Talk to our team

Tell us about your practice and we'll arrange a free initial consultation to discuss how we can help you deliver compliance services to your clients.

Whether you're onboarding your first client, adding a specialist add-on, or scaling towards 1,000, our team has the experience to get you there efficiently.

United Kingdom

Request Consultation or Support

✓

Enquiry Sent

Thank you for your interest. A member of our team will be in touch within one working day to arrange your free initial consultation.