Graften / vCISO for MSPs
vCISO services for MSPs, powered by your clients' real data
Clients increasingly want a named security lead without hiring one. A vCISO service works when the advice is grounded in what is actually happening in each client's environment.
What a vCISO service needs underneath it
- A trustworthy baseline. A client health score built from measured evidence. Anything that could not be measured is reported as not assessed and does not move the score.
- A risk register with severity, owners and status, where an open critical risk caps the client's grade so it cannot be hidden by good scores elsewhere.
- Reporting people read. Branded client portals and scheduled reports on a monthly cadence.
- Guidance in the moment. An assistant that can answer questions about a client's actual findings.
The Graften vCISO tools
- AI vCISO chat, with remediation guidance for gaps and AI-assisted incident response playbooks.
- Board-style reports and drafted policy documents from the client's real data.
- Proactive insights that highlight what changed since the last review.
AI is a metered add-on. Each plan includes a monthly allowance of AI credits, usage is visible in the platform at any time, and the platform stops cleanly at the limit rather than running up an unexpected bill.
Frequently asked questions
Is AI included in every plan?
AI features are an add-on with a monthly credit allowance per plan. Usage is shown in the account area.
Does the AI invent findings?
The assistant works from the client data held in the platform, and the underlying scores treat missing measurements as not assessed. As with any generated advice, a qualified person should review it before it goes to a client.