SCARLET RISK

For MSPs & MSSPs

Tools for the MSPs selling compliance to their clients.

Not another GRC platform pitch. These are the artifacts your reps need in the room: a client-ready gap summary and a tailored cyber-risk proposal, generated in minutes and branded as your work.

Why MSPs use this

Your clients don't buy controls. They buy the document that explains them.

Minutes, not evenings

A gap summary that used to take a rep two hours in Word comes out formatted and defensible.

Built to hand over

Executive summary, status table, 90-day plan, evidence list. Print to PDF or export to Word and put your logo on it.

Honest by default

Control statuses are labelled self-reported, never audited. No fabricated findings, no invented certifications.

Repeatable across clients

Same structure every engagement, so your delivery team isn't reinventing the deliverable per account.

Tool 1 — free

Client-ready compliance report generator

Mark each control as in place, partial, or missing. You get a readiness summary with an executive overview, a status table, prioritized gaps, a 90-day plan, and the evidence list an auditor will ask for.

Control status (self-reported)
MFA on email and admin accounts
Endpoint detection & response deployed
Documented security policies
Documented incident response plan
Backups running and tested
Security awareness training
Vendor / third-party risk reviews
Access reviews and offboarding process
Patch management within SLA
Centralized logging & alerting

We keep your email so we can follow up about the MSP program. Control statuses are yours — this is not an audit or attestation.

Tool 2 — free

Cyber-risk proposal builder

Company name and industry in, tailored proposal out: risk profile table, recommended services mapped to the risks they retire, phased engagement plan, and deliverables. No prices invented — commercial terms stay as placeholders you fill in.

Beyond the one-off document

When a client wants the ongoing program, put them on the platform.

Policies, risk register, vendor assessments, evidence library, and automations — per-client accounts you manage, with referral, reseller, and white-label tracks for the commercial side.

Need something custom — deeper permissions, a specific workflow, or a unique integration? Professional services are available on request.