For MSPs and MSSPs

Insurance renewals: from fire drill to service line

You already run your clients' Microsoft environments. Their cyber insurance questionnaires land on your desk anyway. Insurance Posture makes that work a deliverable: one login across every client, read-only scans that cross-check application answers, and a broker-ready brief you hand over with your remediation plan.

Read-only by design. Client grants consent, scans make no changes, access is revocable at any time.

The problem you already own

The questionnaire lands on you either way

When a client's renewal arrives, three things are true at once.

1

You are the one who knows the answers

MFA coverage, backup configuration, privileged access: the client forwards the questionnaire to you because the controls live in tenants you manage.
2

Answering from memory is a liability transfer

If an answer you supplied turns out wrong at claim time, the conversation comes back to you. Evidence-checked answers put scan data, not recollection, behind what gets submitted.
3

Today you do the work for free

Renewal support is unbilled hours. Packaged as an insurance readiness service with a deliverable, the same work becomes recurring revenue.
Built for multi-client work

One login, every client, evidence per answer

The platform pieces that make this a service rather than a favor.

Multi-organization access

Every client is its own organization under your login, with role-based access for your team. Client data never mixes.

Read-only client connections

Each client consents to read-only scans of their Microsoft 365, Entra ID, and Azure. No write access, revocable any time.

Evidence-checked answers

Application answers land as verified, attested, or gap. You see exactly which answers rest on scan evidence before anything is submitted.

Drift alerts between renewals

Scheduled rescans catch controls that quietly regress after the application is signed, while there is still time to fix them.

A deliverable, not a spreadsheet

The broker discussion brief names each drifted answer in plain language with the evidence attached. You deliver it with your remediation plan.

One library across carriers

Canonical questions map across carrier forms, so one assessment per client pre-fills most of what each carrier asks at renewal.

The service motion

Renewal readiness in three recurring steps

Run it 90 days before each client's renewal, then keep the rescans on.

  1. 1

    Onboard the client tenant

    The client consents to a read-only connection for Microsoft 365, Entra ID, and Azure. Setup is minutes per tenant, and access is revocable.

  2. 2

    Run the assessment

    Upload the client's renewal application or answer from the canonical library. Scans cross-check every mapped answer and flag what the environment contradicts.

  3. 3

    Deliver and keep watch

    Hand over the drift brief with your remediation plan. Scheduled rescans alert you when a control drifts before the next renewal.

FAQ

Common questions from MSPs

Can I manage multiple clients under one login?

Yes. Each client is its own organization with role-based access for your team. Client data stays separated.

Does the scanner need write access?

No. Connections are read-only, consented, and revocable. Scans collect configuration state and make no changes. Details on the security page.

Can I white-label the reports?

The engagement and the advice are yours; reports carry Insurance Posture branding today. The brief is written to be delivered inside your service.

How is it priced?

Per client organization. See pricing or contact us about multi-client arrangements.

Start with the client whose renewal is next

Connect one tenant read-only, run their renewal through it, and see what the brief finds. Then decide if it becomes a service line.

Start with one client