CyberGrape – cyber security certification and GRC platform for small business

For MSPs

Add a security and compliance service your clients will pay for, without building it yourself.

Your clients are being asked to prove their security. CyberGrape gives you the assessment, the certification programme, the monitoring and the reports to answer that, for every client, from one console.

Assess a client, free

Why clients are asking

More of your clients are being asked to prove it.

They come to you because someone has asked a question they cannot answer.

Insurers ask for evidence

Renewal and application forms ask what security measures are in place. Clients want an answer they can back up.

Bigger customers ask for proof

Tenders and supplier reviews increasingly want more than a promise. A recognised certificate settles the question.

Owners want to know where they stand

Most small business owners cannot say how secure they are. They look to the people already running their IT.

What you can offer

Four things you can put in front of a client.

You do not need to build any of it. You need to bring it to the right client at the right time.

The assessment, as a sales tool

The free readiness assessment shows a client where they stand and what to fix first. It opens the conversation without a sales pitch.

A certification programme

Take a client up the SMB1001 tiers. Bronze, Silver and Gold are signed off by the client's directors. Platinum and Diamond are independently verified.

Monitoring that keeps going

Connected tools keep each client's picture current, including supplier risk and email protection across their domains.

Reports clients understand

A plain summary of where the client stands, what changed and what is next, plus a proof pack they can hand to an insurer or customer.

Your first client

From assessment to a paying client, in plain steps.

The timeframes below are the ones we stand behind. Your client's own pace sets the rest.

  1. AssessRun the free readiness assessment with the client.More on this step
    It shows where they stand and what matters first. Nothing to buy and nothing to install, so it is an easy first conversation.
  2. Show them the resultWalk the client through what to fix first.More on this step
    You explain the result in your own words. It gives you a reason to propose a programme, with the gaps already named.
  3. Agree the serviceChoose the programme that fits the client.More on this step
    You decide which services to offer and how you present them to the client.
  4. Connect their toolsLink the client's systems so proof collects as they go.More on this step
    Connecting tools turns the picture from a snapshot into one that stays current. Proof then collects as the client works, with no chasing for screenshots.
  5. Fix what matters firstWork through the gaps in order, starting with the biggest.More on this step
    Bronze to Gold typically takes weeks. Platinum and Diamond typically take two to three months, plus a separate external audit fee.
  6. Sign-off and certificateThe client's directors sign off, or the independent audit completes, and CyberCert issues the certificate.More on this step
    We prepare and submit the evidence. CyberCert issues the certificate. CyberGrape does not.
CyberCert logo

CyberGrape is a licensed partner of CyberCert, certification authority for Dynamic Standards International (DSI), the publisher of the SMB1001 standard.

Certificates are issued by CyberCert against the SMB1001 standard published by Dynamic Standards International. CyberGrape prepares and submits your evidence but does not issue the certificate.

One console

Every client in one place, each one kept separate.

Each client has their own environment. You see across all of them, and switch between them in a click. Clients who sign in see only their own business.

SampleA portfolio view
  • A list of your clients showing who is on track and who needs attention
  • Each client's data, proof and certificate status kept separate from every other client
  • Email protection across many client domains, reviewed together
  • One place to start, review and renew every programme
  • Client A
    Working towards Gold
    On track
  • Client B
    Some fixes are overdue
    Needs attention
  • Client C
    Directors to review
    Ready for sign-off
  • Client D
    Assessment complete
    Getting started

An invented example to show the layout. The names are made up and it does not show real client data.

Expert backup

When a client needs more than you want to take on, we are behind you.

Some clients will need a security leader, testing of their defences or round-the-clock protection. Bring us in for that part and keep the client relationship.

A security leader on call

Advice and ownership for clients who need a security lead.

Protection that is watched

Managed protection for the devices your client relies on.

Testing and assessments

Find weak spots before an attacker does.

What it connects to

The tools we bring together for each client

Nine partners lead the programme. Open any logo to see what it does for your client.

All technology partners
  • CrowdStrike logo
  • CyberCert logo
  • Keepit logo
  • NinjaOne logo
  • Black Kite logo
  • Cloudflare logo
  • Proofpoint logo
  • Suped logo
  • Bitwarden logo

Questions

Questions MSPs ask

Add the service. Keep the client.

Tell us about your clients and we will show you how the programme would work for your business.

Assess a client, free