Posture you can put in front of an insurer.

MFA, EDR, patch, and restore-test truth per client — reconciled nightly from SentinelOne, Microsoft 365, ASIO, and Axcient. Not a questionnaire; the measured state.

incidents this quarter — both contained, both written up

89%

MFA coverage across the book (target 100%)

endpoints without EDR — two clients hold 43 of them

3 of 8

top clients on the paid security add-on

Findings

The security you deliver is broader than the security you sell.

Five of your eight biggest clients get best-effort security work inside their managed agreement — unpriced. The add-on formalizes it: MFA enforcement, EDR everywhere, quarterly restore tests, and a posture report their insurer will actually accept.

MFA coverage follows the same curve as everything else.

The two heavy AYCE clients are also the two worst MFA postures (79%, 82%). Every unenrolled account is a phishing outcome waiting to become a desk week.

Two restore tests are overdue — at clients billed for backup.

Oak & Iron and BlueRiver haven’t had a restore verified this quarter, and both appear in the billing finding for stale agents. A restore request should never be the first test.

Both incidents this quarter were contained by the stack, not by luck.

One phished credential (session revoked, MFA reset, mailbox rules audited — 41 minutes) and one malware download (SentinelOne quarantine, device isolated, reimaged). Write-ups attached to both clients’ QBR packs.

Posture by client

Client	MFA coverage	EDR gap	Patched ≤14d	Restore test	Security add-on
Fairfield Community Bank	100%	full	99%	passed	✓ subscribed
Summit Title Co.	98%	full	98%	passed	✓ subscribed
Crestview Orthopedics	96%	−1	97%	passed	✓ subscribed
Lawson & Pratt CPAs	94%	−2	95%	passed	best-effort
Oak & Iron Hospitality	88%	−4	93%	overdue	best-effort
BlueRiver Home Services	85%	−12	91%	overdue	best-effort
Harbor Point Dental Group	82%	−6	89%	passed	best-effort
Beacon Freight & Logistics	79%	−31	87%	passed	best-effort

Top 8 accounts by desk load shown. “Best-effort” = security work delivered inside the managed agreement, unpriced — the attach-rate opportunity in the findings.

Incidents this quarter

Date	Client	What happened	Outcome
Jun 18	Harbor Point Dental Group	Phished credential — attacker signed in from new geo	Session revoked in 41 min; MFA reset; mailbox rules audited; no data movement observed
May 07	BlueRiver Home Services	Malware download on MER-BRH-041	SentinelOne quarantined on execution; device isolated + reimaged same day

Every incident gets a plain-language write-up attached to that client's QBR pack — proof of value at renewal time, not just at panic time.

What you're looking at

This is the portal Automated Edge stands up for an MSP: every system connected — PSA, RMM, M365, accounting — this report generated from the real data, and the fixes automated. Yours runs on your own brain, your own database.

See the MSP program