Turn any domain into a signed client— white-label security assessment for MSPs.
Scan any prospect free. Send a Security Brief under your logo. Close a Good / Better / Best proposal they accept online, then keep them with rescans and policies you bill for.
Example: a domain scan produces a grade C, a branded Security Brief, and an accepted proposal
Grade
acme.com
Illustration with fictional MSP and client data.
Passive by design. Safe to run before they sign.
Every check reads public information: DNS, certificate transparency logs, domain registration, and one normal homepage visit. No port scans, no login attempts, no vulnerability probes.
SPF · DKIM · DMARC · MTA-STS · TLS reporting · email platform detection · email filter
Web and TLS
certificate · HTTPS redirect · security headers · software banners
Domain
DNSSEC · CAA · expiry
Attack surface
hostnames in public certificate logs
From domain to signed client in 3 steps
Step 1
Scan
Enter any client or prospect domain. Get a grade and plain-English findings.
Step 2
Send
Share a Security Brief or branded report under your logo. Get an alert the moment they open it.
Step 3
Sign and grow.
Turn findings into a proposal they accept online, then upsell from rescans and policies. (Pro)
Send a Security Brief they'll actually read.
Turn any prospect's domain into a short, branded brief in plain English. Built only from public data. No breach claims, no scare tactics. Just what's working, what's not, and how you'd fix it.
- Show the gaps, and what's already working. Prospects see the risks, the wins, and the opportunities to strengthen, with a plain-English "how we'd fix it" plan and a technical appendix for their IT person.
- Show the grade they could have. When fixing the listed issues would raise their score, the Brief shows the projected grade. It's a projection from the same scoring, not a guarantee.
- Make yes easy. Your booking link (once you add one in Settings), an optional proposal link, and a PDF download are built right in.
- Know the moment they look. You get an in-app and email alert when your prospect opens the Brief link, so you call while it's on their screen. Opens of a downloaded PDF aren't tracked.
Starter: 2 Security Briefs a month. Pro and Founding Partner: unlimited.
Scan → Report → Proposal → Accepted
Pro turns findings into work you already sell. Win the one-time project and the monthly retainer from the same scan, priced from your Service Library.
Step 1
Scan
Run a passive check on any client or prospect domain. Get a grade and plain-English findings.
Step 2
Report
Send a branded report or Security Brief with your logo and contact details.
Step 3
Proposal
Turn the report into a Good / Better / Best proposal from your Service Library: one-time fixes plus monthly retainers at your prices.
Step 4
Accepted
The client accepts online. You get notified, plus the accepted PDF and CSV. Your payment link is shown after they accept — we do not take the payment.
Sample proposal
Fictional MSP and client, default Service Library prices. Your client accepts online; Client Posture does not process the client's payment.
One-time fixes from the scan: $1,500.00. Monthly packages below use the MSP's own service list.
Essentials
One-time fixes plus light monthly upkeep
$70.00/mo
Plus
People protection for every user — recommended
$225.00/mo
Complete
Endpoint, website, and a scheduled review
$1,380.00/mo
Proposals that sell the whole fix.
Start with 50 ready-made MSP services. Findings map to the services that fix them, so every proposal starts from the scan.
Service Library is included on Pro.
- A strong core, already on. 10 essential services come pre-selected, so every quote starts complete.
- Your prices, your call. Suggested starting prices are fully editable.
- Room to grow the deal. An optional vCISO line sits in Best, and you can remove it in one click.
- AI governance, ready to sell. Three AI services (acceptable-use policy setup, governance program, tool risk review) are in the library. Turn them on with one click.
Every finding is a service you can sell.
Your Service Library comes loaded with 50 services. Set your own prices. Here's what the scan opens up:
Email security
Email security setup (SPF, DKIM, DMARC, filtering), DMARC management, Advanced email security, Google Workspace hardening
Identity and MFA
MFA rollout for all staff, Multi-factor sign-in & admin account hardening, Business password manager, Single sign-on for cloud apps
Backup and recovery
Ransomware-safe backup setup & restore test, Managed backup & recovery
Threat detection
Managed threat detection & response (EDR/MDR), Managed patching & device care (updates, encryption, end-of-life tracking), Vulnerability management
Website and domain
Website & domain security fixes, Certificate lifecycle management, Brand and lookalike domain watch, Attack-surface monitoring
Advisory and response
Security advisory (vCISO): policies, plans, insurance-application support, Incident response plan & payment-verification policy, Incident tabletop exercise, Compliance & insurance-application support
AI governance
AI acceptable-use policy setup, AI governance program, AI tool risk review
Security awareness
Security awareness training & phishing simulation, Phishing coaching for repeat clickers, Executive security briefing
Suggested starting prices are fully editable. Proposals and the Service Library are on Pro.
Grow toolkit
Find and pitch new clients in bulk.
Paste a list of domains or upload a CSV. We scan each one, rank them by dollar opportunity — your Service Library prices on Pro, default example prices on Founding Partner — and put them on a pipeline board that moves itself: Found, Contacted, Talking, Proposal sent, Won. Every prospect gets a ready-to-copy email and call script built from real findings. You send it; we never do.
Pro and Founding Partner: 150 prospect scans a month. Starter: 2 Security Briefs a month.
Keep every client. Grow every account.
Built for the meetings that make you money: discovery calls, QBRs, proposals, and cyber insurance conversations.
Weekly rescans and change alerts (Pro)
Grades stay current between meetings. Every rescan shows what improved and what slipped — bring that to the QBR. When a client's posture changes, you get an email, and a reason to call them.
Answer the insurance application before they ask.
14 carrier-aligned questions plus follow-ups, sent as a no-login link. Scans pre-fill what they can prove. Every answer is labeled Verified by scan, Confirmed by IT provider, or Confirmed by client. Your answers are never overwritten. Not insurance advice.
All plans.
Sell the paperwork, not just the scan.
14 policy templates: 10 core security and compliance policies plus 4 AI policies, each mapped to CIS Controls v8 and NIST CSF 2.0. Fill one form per client — we auto-fill the client name, your branding, and verified scan facts; remaining blanks stay marked until you confirm. Download a single policy or the full pack, branded, as PDF or Word. Templates, not legal advice.
Pro and Founding Partner.
Your whole offer on one page.
On Pro, turn your Service Library into a branded menu with your logo, colors and booking link. Founding Partner menus use default services and prices. Send it as a PDF or share a link.
Overview on every plan. Branded PDF and link: Pro and Founding Partner. Founding Partner menus use default services and prices.
Branded PDF reports
Your logo on every report. Grade, plain-English findings, evidence, and the fix. Download the PDF or share a link. Paid plans remove the watermark.
See a sample report →Bulk client import
Import your client list by CSV, scan them all at once, and export findings for tickets or SOWs.
Plug it into your stack.
Connect HubSpot and HaloPSA from Settings. Signed webhooks fire when a scan finishes, a grade changes, a Brief is opened, a proposal is sent or accepted, a deal moves stage, or a client is added. A REST API with scoped keys lets Zapier, Make or your own scripts add prospects and start scans. No contact data in webhook payloads. Unknown findings are never sent as issues or tickets.
Pro and Founding Partner. No published Zapier app yet; connect with webhooks or the API.
Integrations →Ask your AI assistant about your clients.
Connect Claude, ChatGPT or Cursor with your own API key. Ask which clients slipped, start a scan, add a prospect or draft a quote. It reads and drafts. It never sends, accepts or deletes.
Pro. Founding Partner: everything except quote drafts.
Founding Partner · 50 seats
Pay once. Keep it.
$1,999 one time: 50 client domains, your logo and colors, weekly rescans and alerts, unlimited Security Briefs, the Grow toolkit, the Policy library, a branded service menu, webhooks, API and MCP. Add Pro later for $299/mo instead of $399. Includes early access and a direct line to the founder.
Closes Dec 15, 2026 or when 50 seats are claimed. Proposals and the Service Library require Pro.
Claim a Founding Partner seatSimple plans. Start with 7 days of Pro.
Prices in USD. Full comparison on the pricing page.
Starter
$199/mo
- 25 client domains, unlimited branded reports
- Security Briefs: 2/mo
- Insurance questionnaire + auto-fill
- Bulk CSV import + export, team invites
Pro
$399/mo
- 150 client domains, weekly rescans, change alerts
- Good / Better / Best proposals + Service Library (50 services)
- Unlimited Security Briefs (150 prospect scans/mo)
- Policy library and branded service menu
- Grow toolkit: bulk find, pipeline, copy-only pitch scripts
- Webhooks, HubSpot, HaloPSA, REST API
- MCP server for your AI assistant · MCP docs
Founding Partner
$1,999 one-time
- 50 domains, logo + colors, weekly rescans, change alerts
- Unlimited Security Briefs · MCP server (no quote drafts)
- Policy library + branded service menu
- Grow toolkit · webhooks + REST API
- Lock in Pro at $299/mo (list $399)
- 50 seats. Closes Dec 15, 2026.
Questions MSPs ask
Can I run this on a prospect?
Yes. Client Posture only reads public information: DNS, certificate transparency logs, domain registration (RDAP), and one normal homepage request, the same kinds of signals search engines see. No port scans, vulnerability probes, or login attempts.
What's in the free trial?
Every new workspace gets 7 days of Pro: Security Briefs, proposals and the Service Library, weekly rescans, Grow, the Policy library, webhooks, the API and MCP. No card, no auto-charge. Afterward you move to Free (1 domain, watermarked reports) and keep your data.
What does the scan check?
17 passive checks. Email: SPF, DKIM, DMARC, MTA-STS, TLS reporting, email platform detection, and email filtering. Website: TLS certificate, HTTPS redirect, security headers, and software banners. Domain: DNSSEC, CAA, and expiry. Plus hostnames listed in public certificate logs.
Is it white-label?
Paid-plan reports have no Client Posture watermark. Security Briefs, proposals, Policy library documents, and service menus show your company name, logo, and contact details — they do not show Client Posture branding. Custom colors are on Pro and Founding Partner. Free reports carry a "Powered by Client Posture" watermark.
How does this help me upsell?
Every failed or weak check maps to a service in your library. On Pro, turn the scan into a Good / Better / Best proposal the client accepts online: the one-time fix plus the monthly retainer. Rescans show what slipped between QBRs. The insurance questionnaire opens the MFA, EDR, backup, and incident-response conversation. The Policy library opens written security, compliance, and AI policies.
What do I walk into the meeting with?
A branded report with their grade, plain-English findings, and fixes, as a PDF or share link. For prospects, a Security Brief with a projected grade (when fixes would raise it) and your booking link. Free reports are watermarked; paid plans aren't. Preview a sample.
Do you process payments for my clients?
No. After a client accepts a proposal, we show the MSP's own payment link. Client Posture is not a party to that sale and does not collect the client's payment.
Is the readiness score insurance advice?
No. The questionnaire is a checklist of controls commonly asked on cyber insurance applications, with answers labeled by source. It is not insurance, legal, or underwriting advice. The applicant is responsible for every answer on any insurance application.
Does the scan fill in the insurance questionnaire?
Partly. It answers only what a scan can prove, such as an email filtering gateway or end-of-life web software. Anything you or your client entered is never overwritten. If a later scan disagrees, the item is flagged for review. The applicant still confirms every answer.
Do you integrate with my PSA or Zapier?
HubSpot and HaloPSA connect from Settings on Pro and Founding Partner. There's no RMM connector yet. Signed webhooks and a REST API with scoped keys let you connect Zapier, Make or your own tools today. There's no published Zapier app yet.
What policies are included?
14 templates: 10 core security and compliance policies and 4 AI policies, branded to your company and exported as PDF or Word. They're starting templates, not legal advice.
Is this a penetration test or SOC 2?
No. It is a point-in-time passive external posture check — not a pentest, vulnerability scan, or compliance certification. We do not claim SOC 2 or ISO. See our Security page for how the product is built.
Can my team share one account?
Invite teammates from Settings → Team. Everyone works from the same clients and reports with their own login, so nobody shares passwords.
How long do you keep scan data?
Retention for accounts, scans, and reports is spelled out in our Privacy Policy. You can export or delete org data through support at support@clientposture.com.
How do trials, cancel, and Founding Partner work?
New workspaces get 7 days of Pro: no card, no auto-charge. Afterward you move to Free and keep your data. Cancel paid plans anytime in Billing settings. Founding Partner is a one-time $1,999 purchase with 50 seats, closing Dec 15, 2026. Founding Partners who upgrade to Pro pay $299/mo instead of $399/mo. Full details →
Run your first scan on a real prospect.
Free to scan, no signup. When you're ready, 7 days of Pro, no card.
Or run a free DMARC checker, SPF checker, or email security tools.