CyberGrape – cyber security certification and GRC platform for small business

For MSPs

Certify your entire client base from one console.

Multi-tenant by design. Run SMB1001 programmes across your whole portfolio: automated billing and Black Kite risk monitoring, from a single MSP console.

See the platform
app.cybergrape.io · MSP Portfolio View
Managed Companies
6 active clients · 4 on track
4 on track
2 needs attention
A
Apex Legal
GoldGold
35/47
H
Hartfield Co.
SilverSilver
22/47
C
Coastline IT
BronzeBronze
14/47
B
BlueSky Media
GoldGold
30/47
O
Orion Finance
SilverSilver
20/47
R
Redwood Const.
BronzeBronze
17/47
4
On Track
2
Attention
63%
Avg Score
1
Cert Ready

Multi-client dashboard

Your entire portfolio. One view.

Every client lives in its own fully isolated environment. Their data, controls and evidence are completely separate. You see all of them from a single MSP console, with each client's certification progress, security score, outstanding controls and alerts at a glance.

The portfolio view shows which clients are on track for their next certification milestone and which need attention, so you can prioritise without chasing status updates across a dozen client logins.

Switch between clients in a single click
Consolidated alerts surface issues across your whole base
Per-client isolation: clients see only their own organisation
Certification readiness at a glance for every client
Trend tracking so you see who is improving and who is slipping
See the full platform
app.cybergrape.io · MSP Portfolio View
Managed Companies
6 active clients · 4 on track
4 on track
2 needs attention
A
Apex Legal
GoldGold
35/47
H
Hartfield Co.
SilverSilver
22/47
C
Coastline IT
BronzeBronze
14/47
B
BlueSky Media
GoldGold
30/47
O
Orion Finance
SilverSilver
20/47
R
Redwood Const.
BronzeBronze
17/47
4
On Track
2
Attention
63%
Avg Score
1
Cert Ready

Black Kite MSSP

Third-party risk across every client's supply chain.

Black Kite gives you vendor cyber risk monitoring across your entire client portfolio under the MSSP programme. Rather than a separate Black Kite subscription per client, you add clients to your portfolio and monitor their supplier ecosystems from the same place you run everything else.

Each client's vendors get a continuous external risk rating (ransomware susceptibility, breach likelihood, and a financial impact estimate) without any questionnaires to chase or agents to install. When a vendor's posture changes, you are alerted before the client is.

Portfolio-wide monitoring

All clients' vendor ecosystems in one MSSP view. No per-client logins.

Risk scores and trends

Ransomware susceptibility, financial impact, and posture trends per vendor.

Instant alerts

Alerts surface when a client's vendor is breached or their score drops.

Usage-based billing

Billed per monitored entity each month, reconciled automatically.

SMB1001 coverage: Black Kite data feeds control 4.9.0.1 (digital trust programme with suppliers) directly. Evidence is collected automatically, with no manual entry required.
Supply chain risk: all clients
6 clients · 47 vendors monitored
Apex Legal
DocuSign
91+2
BlueSky Media
Slack
85+1
Hartfield Co.
Xero
63-8
Orion Finance
AWS
780
Coastline IT
Dropbox
44-5
2 vendors need attention across your portfolio
app.cybergrape.io · MSP Billing Dashboard
September 2026
All invoices sent
Apex Legal
GRC + Black Kite
$890Paid
Hartfield Co.
GRC Standard
$490Paid
Coastline IT
GRC Standard
$490Pending
BlueSky Media
GRC + Black Kite
$890Paid
Orion Finance
GRC Standard
$490Paid
September total$3,250

Automated client billing

Client invoicing that runs itself.

Client billing is connected to Stripe and reconciled automatically. You set the price for each client's plan, and invoices go out each billing cycle without any manual work. Black Kite MSSP usage is tracked per client and added to their invoice automatically.

The MSP billing dashboard shows your full portfolio in one view: who is on which plan, what the current invoice is, and payment status. No spreadsheets. No manual reconciliation. No chasing.

Stripe-connected

Invoices go straight to Stripe. Payments land in your account.

Auto-reconciled

Black Kite usage tracked per client and billed automatically.

Portfolio view

All clients, all invoices, all payment statuses in one dashboard.

Flexible cycles

Monthly or annual billing per client, set when you onboard them.

SMB1001 programme management

Run SMB1001 programmes across your entire portfolio.

SMB1001 certification is increasingly required by procurement teams, insurers and enterprise partners. As an MSP, you can offer it as a managed service, running certification programmes across your whole client base from one console, with evidence tracked per client and renewal dates managed automatically.

1

Assessment

Run an SMB1001 readiness assessment for each client. Gaps and controls load directly into the platform.

2

Evidence collection

Integrations collect evidence automatically. What cannot be automated is tracked as an outstanding task.

3

Certification submission

When a client is ready, the evidence pack is compiled and submitted to CyberCert for certification.

4

Certificate issued

CyberCert issues the certificate and a verifiable digital badge. The client can share it with customers and insurers.

5

Annual renewal

The platform tracks renewal dates. You are notified when clients need to resubmit or complete a re-assessment.

All five tiers, one platform

Bronze, Self-attested. Fully manageable via the platform.
Silver, Self-attested. Fully manageable via the platform.
Gold, Self-attested. Fully manageable via the platform.
Platinum, Requires independent audit. CyberGrape prepares the evidence pack.
Diamond, Requires independent audit and penetration test evidence.
Evidence packs generated per client

Every control has evidence attached. When a client is ready to submit, the pack is already built.

Annual renewal tracking

Certificates expire annually. The platform tracks every client's renewal date and notifies you automatically.

Multi-client management

See which clients are Bronze, which are aiming for Gold, and which need intervention, in one dashboard.

Audit-ready at all times

Evidence is timestamped and tied to controls. If CyberCert asks for it, it is already there.

Commercial model

Scales with your portfolio.

The MSP programme is usage-based. You are billed per managed client per month, with Black Kite MSSP usage reconciled alongside. No per-seat pricing, no surprises. The more clients you certify, the more value you deliver and the better the economics get.

We tailor commercial arrangements to your portfolio size and the services you plan to deliver. Talk to our MSP team to get a quote.

Per-clientUsage-based pricing
5 tiersBronze through Diamond
MonthlyBilling reconciliation

Common questions.

Ready to offer SMB1001 to your clients?

Talk to our MSP team about how CyberGrape fits into your service stack and what the commercial arrangement looks like for your portfolio size.

See the platform