Proof Gap Scorecard
You do the work. Can you show it?
Every MSP promises security and great service. Prospects can’t check either. When they can’t see a difference, price decides. Find out how much of your work a prospect can actually see.
16 questions, about 4 minutes. Free.
Built by Mit Patel, who ran an MSP for 20 years. A self-assessment from your own answers, not an Assurix assessment.
Grade C, Best-kept secretProof Score 57 out of 100
Proof Gap: 55 points of work in place that a prospect, client or auditor couldn’t see today.
Your result is ready
Your full result shows
- What your grade, profile and Proof Gap mean
- Where the gap is, area by area
- Up to three next steps you can take this month, without Assurix
- What prospects can’t see yet when they compare you with other MSPs
Your Proof Gap Scorecard
Grade . Proof Score out of 100.
Most of what you do, you can already show. The next step is having someone independent check it, so a prospect doesn’t have to take your word for it.
Some of the basics aren’t in place yet. That’s common in a growing MSP, and those steps take the most risk out of the business, so they come first.
You do more than a prospect can see. Most of the work is in place, but much of the evidence isn’t in front of anyone yet. That gap is where a cheaper quote starts to look the same as you.
A good share of the work is in place, and much of it can already be shown. A few gaps in the work itself are holding the score back.
Doing and ShowingOut of 100, weighted across the four areas
Your Proof Gap: points of work in place that a prospect, client or auditor couldn’t see today.
Four areas, 12 scored questions
Plus 4 about your MSP. Answer from memory: nothing to look up.
Winning new business
Whether a prospect can see the difference between you and a cheaper MSP before they choose.
Protecting your own business
Whether anyone checks your own systems between audits, and how quickly a change would be noticed.
Keeping your clients
Whether clients can see the security work they pay for, and whether the figures they see are right.
Audits and questionnaires
Whether evidence can be found, kept current and reused when an auditor, insurer or customer asks for it.
How it works
Answer 16 questions
About 4 minutes, one question at a time.
See your grade and profile
Straight away, with your Proof Gap: how much of your work is in place but can’t be seen.
Get your full result
Each area’s score and up to three next steps you can take this month, without Assurix.
Questions
- Is it free?
- Yes. You see your grade and profile before you give your email, and your full result straight after.
- What happens to my details?
- Your result opens on the page, with a PDF to download. We may contact you about your result. Unsubscribe at any time. See our privacy policy.
- Is this an Assurix assessment?
- No. It scores your own answers. An Assurix assessment checks the evidence itself, across 59 controls.
- Who built it?
- Mit Patel, Assurix’s founder. He built and ran Netstar, an MSP, for 20 years and sold it in 2021.
16 questions, about 4 minutes. Free.
Your score by area
Each area’s score is the average of Doing and Showing across its questions. In your overall score, winning new business counts for 35 points in 100, your own business and your clients 25 each, and audits 15.
Winning new businessWeakest area/100
Protecting your own businessWeakest area/100
Keeping your clientsWeakest area/100
Audits and questionnairesWeakest area/100
What prospects can’t see yet
Your next steps
Your weakest area
/100
The lowest of your four areas, so it holds your overall score back most.
- What this area covers
- Whether a prospect can see the difference between you and a cheaper MSP before they choose.
- How Assurix helps
- A Trust Portal link a prospect can open, with a plain-English “What is checked” page across security and service, and current status on the public Trustmark Directory.
- Proof
- Down to the last two for a 70-user deal, Sereno walked the prospect through its live results and won against a rival holding ISO 27001 and SOC 2. Not the cheapest quote.
- What this area covers
- Whether anyone checks your own systems between audits, and how quickly a change would be noticed.
- How Assurix helps
- Quick wins that cut the most risk come first. 40 security controls aligned to CAF 4.0, live-measured ones checked every six hours and the rest on a set cycle. A failure has 30 days to be fixed, and the Trustmark is suspended publicly if it isn’t.
- Proof
“It isn’t do or die. You are not going to come in one morning and find you have been kicked out and your Trustmark has been revoked. There is a proper process around this, and there is opportunity to rectify anything.”
Ian Groves, Managing Director, Start Tech
- What this area covers
- Whether clients can see the security work they pay for, and whether the figures they see are right.
- How Assurix helps
- Your clients and prospects can open a live page showing your patching, response times and client satisfaction across your MSP, independently assessed by Assurix. The security work stops being invisible, so a cheaper quote stops looking the same.
- Proof
- Labyrinth’s own reporting said 95% patched. Assurix found the real figure was 47%, caused by a vendor policy setting, and worked with the vendor to fix it.
- What this area covers
- Whether evidence can be found, kept current and reused when an auditor, insurer or customer asks for it.
- How Assurix helps
- One place for evidence, policies and documents. Evidence is reused for ISO 27001 and Cyber Essentials where they overlap, questionnaires are answered from one source, and there’s a template for every documented control.
Talk it through this month
You said you want to act this month. Pick a time for a 30-minute call and we’ll go through your result and what to do first.
Get it checked
You can show most of what you do. The next step is having it independently assessed, so a prospect doesn’t have to take your word for it. Start with a 30-minute call, where we’ll go through how the assessment works.
See where this leads
Start with the steps above. When you want to see what a prospect could open once the basics are in place, here’s a live Trust Portal for a demo MSP.
Close your Proof Gap
Most of your work is already there. On a 30-minute call, we’ll go through what’s behind your gap and what other MSPs fixed first.
Talk it through
On a 30-minute call, we’ll go through your result, the gaps holding your score back, and what to do first.
Proof Gap ScorecardYour Proof Gap Scorecard
You do the work. Can you show it?
Grade . Proof Score out of 100.
Most of what you do, you can already show. The next step is having someone independent check it, so a prospect doesn’t have to take your word for it.
Some of the basics aren’t in place yet. That’s common in a growing MSP, and those steps take the most risk out of the business, so they come first.
You do more than a prospect can see. Most of the work is in place, but much of the evidence isn’t in front of anyone yet. That gap is where a cheaper quote starts to look the same as you.
A good share of the work is in place, and much of it can already be shown. A few gaps in the work itself are holding the score back.
Doing the work happens/100
Showing a prospect, client or auditor could see it/100
Your Proof Gap: points of work in place that a prospect, client or auditor couldn’t see today.
Built by Mit Patel, who ran an MSP for 20 years. A self-assessment from your own answers, not an Assurix assessment.
Proof Gap ScorecardYour score by area
Each area’s score is the average of Doing and Showing across its questions. In your overall score, winning new business counts for 35 points in 100, your own business and your clients 25 each, and audits 15.
Winning new businessWeakest area/100
DoingShowingProtecting your own businessWeakest area/100
DoingShowingKeeping your clientsWeakest area/100
DoingShowingAudits and questionnairesWeakest area/100
DoingShowing
What prospects can’t see yet
Proof Gap ScorecardYour next steps
Up to three next steps you can take this month, without Assurix.
Proof Gap ScorecardYour weakest area
/100
The lowest of your four areas, so it holds your overall score back most.
- What this area covers
- Whether a prospect can see the difference between you and a cheaper MSP before they choose.
- How Assurix helps
- A Trust Portal link a prospect can open, with a plain-English “What is checked” page across security and service, and current status on the public Trustmark Directory.
- Proof
- Down to the last two for a 70-user deal, Sereno walked the prospect through its live results and won against a rival holding ISO 27001 and SOC 2. Not the cheapest quote.
“every man and his dog can do IT. ... So the differentiator, annoyingly, usually is cost.”
- What this area covers
- Whether anyone checks your own systems between audits, and how quickly a change would be noticed.
- How Assurix helps
- Quick wins that cut the most risk come first. 40 security controls aligned to CAF 4.0, live-measured ones checked every six hours and the rest on a set cycle. A failure has 30 days to be fixed, and the Trustmark is suspended publicly if it isn’t.
- Proof
- “It isn’t do or die. You are not going to come in one morning and find you have been kicked out and your Trustmark has been revoked. There is a proper process around this, and there is opportunity to rectify anything.”Ian Groves, Managing Director, Start Tech
“we do everything for our customers, and you know, make their environments better, and take our eye off the ball of our own.”
- What this area covers
- Whether clients can see the security work they pay for, and whether the figures they see are right.
- How Assurix helps
- Your clients and prospects can open a live page showing your patching, response times and client satisfaction across your MSP, independently assessed by Assurix. The security work stops being invisible, so a cheaper quote stops looking the same.
- Proof
- Labyrinth’s own reporting said 95% patched. Assurix found the real figure was 47%, caused by a vendor policy setting, and worked with the vendor to fix it.
“oh, I haven’t called you for two months. So what am I paying for?”
- What this area covers
- Whether evidence can be found, kept current and reused when an auditor, insurer or customer asks for it.
- How Assurix helps
- One place for evidence, policies and documents. Evidence is reused for ISO 27001 and Cyber Essentials where they overlap, questionnaires are answered from one source, and there’s a template for every documented control.
“when you’re a small team, you know, everything’s in everyone’s heads”
Proof Gap ScorecardBe chosen on proof, not promises.
What is Assurix?
Assurix is the live trustmark for MSPs (managed service providers). It independently assesses 59 controls: 40 security controls aligned to NCSC CAF 4.0 and 19 operational controls built for MSPs. Prospects and clients see the result on a Trust Portal anyone can open, and the governance, risk and compliance (GRC) platform to do the work is built in.
Book a demo
Pick a time for a 30-minute call and we’ll go through your result and what to do first.
assurix.com/bookWhat we cover
- What a prospect sees: the 59 controls and live measures like SLA response and patching
- How to stand out from cheaper MSPs and win new clients, including prospects who don’t want to switch again
- Where you would start, building on any Cyber Essentials or ISO 27001 work you already have
- The time it takes, from 2 hours a week, and the pace that suits you
Mit Patel founded Assurix and is its CEO. He built and ran Netstar, a UK MSP, for 20 years, grew it to 60 staff and £8 million in revenue, and sold it to private equity in 2021.