Virtual Blue – A Blue Team for MSPs
Having worked with many Managed Service Providers (MSPs) on their cybersecurity over the past three years, we’ve found one common challenge: keeping up-to-date cyber intelligence on their clients.
What does that mean?
Most MSPs have automated patching and updates for major applications and browsers. They might also deploy endpoint protection, DNS filtering, email security, and BitLocker encryption as part of their security stack.
So—have they got every angle covered?
Not quite.
In our experience, there are still vulnerabilities and weaknesses in client systems. When we audit MSP client networks for Cyber Essentials Plus or conduct a Vulnerability Assessment, we almost always find security gaps that need urgent attention.
Why this happens
New vulnerabilities are discovered every day. The real issue? Many MSPs and their clients lack a regular, systematic way to detect and address these issues.
In larger enterprises, this job falls to a dedicated group of security professionals known as the Blue Team.
Our answer: Virtual Blue
That’s why we created Virtual Blue — a team of skilled cybersecurity professionals working alongside our Continuous Compliance Platform to deliver regular, actionable reports on your clients’ cybersecurity posture.
Think of it as your virtual Blue Team.
What MSPs can do with Virtual Blue
With this intelligence, you can:
Pinpoint your clients’ biggest threats.
Fix or mitigate issues before they become incidents.
Integrate this live threat intelligence into your existing security stack.
Enhance your service offering and strengthen client trust.
Stay Compliant with Cyber Essentials all year round
Virtual Blue helps MSPs stay one step ahead — turning vulnerability discovery into a proactive advantage.
What’s Included in the Virtual Blue Service?
Internal vulnerability management service (Windows, Mac, Linux) - This will check for every known vulnerability on these devices via our lightweight discovery agent. If the device is online we can monitor it.
External vulnerability scanning service - This will check for issues associated with your WAN IP address. Common issues we find are unnecessary open ports, Firmware out of date or devices end of life.
Basic Website Security Scan - This service checks for known website vulnerabilities and exploits. We call it a basic scan as Website security can be highly complex, but you need to know if the website has major flaws or not. We can supply in depth web or application testing separately.
Email Sanity Check - We check your SPF and DMARC for compliance and effectiveness, every month.
Monthly Cybersecurity Report - We supply an individual white labelled report on all the services above that you can supply to your client or include as part of your QBR or current monthly reporting. Further details included are:
Threat analysis
Exploitability
Impact and suggested solutions
