# Remediation Upsell Generator

*/Opportunities/Remediation_Upsell_Generator*

## Opportunity Overview

**Wedge**: Begin strictly with Microsoft 365 security assessment scans for MSPs conducting initial prospect audits. This narrow focus limits the required technical vocabulary and maps to universally understood remediation SKUs like configuring conditional access or Intune policies. Once the system owns M365 quoting, expand laterally into network vulnerability scans and formal compliance gap assessments.
**Timing**: Modern LLMs possess the expanded context windows and technical reasoning required to ingest raw JSON or PDF outputs from standard security scanning tools and map them accurately to specific remediation labor hours and service SKUs.
**Why This I C P**: MSPs operate on thin margins for core managed services and rely heavily on project-based remediation work for profitability, making them highly motivated buyers for tools that accelerate project quoting.
**Size Of Prize**: There are roughly 40,000 MSPs in the US, each spending approximately $15,000 annually in account manager labor time attempting to manually translate technical audits into sales quotes. This equates to an addressable market of 40,000 MSPs × $15,000 annual spend ≈ $600M.
**Gap Narrative**: Managed Service Providers run automated vulnerability and compliance scans that generate massive, technical data dumps. Account managers lack the technical depth and time to translate these raw scan outputs into scoped, priced, client-friendly remediation proposals, leaving billable project revenue uncaptured.
**Defensibility**: Defensibility accrues through workflow lock-in and localized pricing intelligence. As the system observes which remediation proposals get signed versus rejected, it builds proprietary mappings of optimal labor-hour estimations and pricing thresholds specific to individual MSPs and client verticals, creating high switching costs.
**Why This Thesis**: An Agentic approach matches the workflow perfectly because the input is highly structured scan data and the required output demands multi-step reasoning to identify the issue, map it to a required fix, estimate hours, and draft business-case justification into a final Statement of Work.

## Opportunity Linked Thesis

**Thesis**: [Software](/Theses/Software)

## Opportunity Linked I C P

**Icp**: [Managed Service Provider](/CompanyTypes/Managed_Service_Provider)

## Opportunity Market Sizing

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**S A M**: ~40k-50k North American and European mid-market MSPs (10+ technicians) ≈ $160M-300M
**S O M**: ~$10M-20M
**T A M**: ~150k global managed service providers × ~$4k-6k/yr per provider for account management and quoting software ≈ $600M-900M
**Growth Rate**: ~12-18%/yr, driven by escalating cyber insurance requirements forcing MSPs to rapidly audit and remediate client environments
**Paid Comparable Spend**: ~$200-800/month on vCIO reporting and asset lifecycle tools, plus ~10-15 hours/month of Account Manager labor manually drafting remediation quotes

## Opportunity Incumbents

- [ConnectWise CPQ](/Products/ConnectWise_CPQ) — Tool
- [ScalePad Lifecycle Manager](/Products/ScalePad_Lifecycle_Manager) — Tool
- [QuoteWerks CPQ](/Products/QuoteWerks_CPQ) — Tool
- [PandaDoc Proposals](/Products/PandaDoc_Proposals) — Tool
- [Manual Excel Pricing](/Products/Manual_Excel_Pricing) — Spreadsheet
- [In-House vCIO Consultants](/Products/In-House_vCIO_Consultants) — Service
- [Word Document Proposals](/Products/Word_Document_Proposals) — DIY

## Opportunity Win Conditions

**Kill Thresholds**:
- Quote send rate falls below 40% of generated quotes within 30 days
- Average manual edit time exceeds 10 minutes per quote
- Day 30 active usage drops below 30% of onboarded account managers
- End-client acceptance rate on remediation quotes falls below 15% in the first 90 days
**Leading Metrics**:
- Time from account creation to first remediation quote sent
- Percentage of generated quotes sent to end-clients
- Average manual edit time per generated quote
- PSA service catalog sync success rate
- End-client remediation quote approval rate
**What Proves Right**: Account managers convert raw audit findings into client-ready remediation quotes in under five minutes, eliminating manual Excel drafting. MSPs deploy the generated quotes to end-clients, seeing a minimum 20% attach rate on new security upsells. Cohorts retain at greater than 85% past the first quarter and accept price points above $300 per month because the tool directly drives measurable project revenue.
**What Proves Wrong**: Account managers abandon the generator because the output requires excessive manual editing to match their specific PSA service catalogs. MSPs revert to QuoteWerks or Excel because the automated proposals lack the nuanced vCIO context required to convince end-clients of the security risks. End-clients view the auto-generated remediation proposals as generic spam and reject them, yielding zero new project revenue for the MSP.

## Opportunity Build Profile

**Hardest Part**: Deterministically mapping an ever-changing taxonomy of raw technical vulnerabilities to a standardized service catalog with accurate pricing and effort estimation without human scoping.
**Min Viable Scope**: Focus strictly on mapping external infrastructure vulnerabilities from a single scanner directly into one quoting tool. Deliberately exclude internal identity remediation, compliance framework mapping, and multi-scanner ingestion.
**Cold Start Problem**: The system lacks accurate baseline effort estimates for fixing obscure vulnerabilities. Break this by partnering with three mid-sized managed service providers to ingest historical statements of work and correlate them with past vulnerability scan reports to train the initial pricing model.
**Time To First Value**: 1 to 2 weeks to integrate the vulnerability scanner with the quoting tool and validate the initial service catalog mapping.
**Data Moat Available**: true
**Technical Difficulty**: Moderate

## Neighborhood

### Where the gap lives

- [Categorize Interview Notes](/Tasks/Categorize_Interview_Notes) — latent gap · Tasks

### Applies thesis

- [Managed Service Provider](/CompanyTypes/Managed_Service_Provider) — applies thesis · CompanyTypes

### Incumbent in

- [ConnectWise CPQ](/Products/ConnectWise_CPQ) — incumbent in · Products
- [In-House vCIO Consultants](/Products/In-House_vCIO_Consultants) — incumbent in · Products
- [Manual Excel Pricing](/Products/Manual_Excel_Pricing) — incumbent in · Products
- [PandaDoc Proposals](/Products/PandaDoc_Proposals) — incumbent in · Products
- [QuoteWerks CPQ](/Products/QuoteWerks_CPQ) — incumbent in · Products
- [ScalePad Lifecycle Manager](/Products/ScalePad_Lifecycle_Manager) — incumbent in · Products
- [Word Document Proposals](/Products/Word_Document_Proposals) — incumbent in · Products

### Embodies

- [Software](/Theses/Software) — embodies · Theses

### Similar Opportunities

- [Automated Code Remediation](/Opportunities/Automated_Code_Remediation) — similar · Opportunities
- [Compliance Remediation Pipeline](/Opportunities/Compliance_Remediation_Pipeline) — similar · Opportunities
- [Project Scope Validator](/Opportunities/Project_Scope_Validator) — similar · Opportunities
- [Autonomous Patching Engine](/Occupations/Computer_and_Mathematical_Occupations/Opportunities/Autonomous_Patching_Engine) — similar · Opportunities
- [Diagnostics as a Service](/Opportunities/Diagnostics_as_a_Service) — similar · Opportunities
- [Vendor Risk Profiling for IT](/Opportunities/Vendor_Risk_Profiling_for_IT) — similar · Opportunities
- [Proposal Assembly Agent](/Opportunities/Proposal_Assembly_Agent) — similar · Opportunities
- [Tier 1 Diagnostic Service](/Opportunities/Tier_1_Diagnostic_Service) — similar · Opportunities
- [Automated Vulnerability Patcher](/Opportunities/Automated_Vulnerability_Patcher) — similar · Opportunities
- [Autonomous Task Runner](/Opportunities/Autonomous_Task_Runner) — similar · Opportunities
- [Vendor Quote Parsing for Resellers](/Opportunities/Vendor_Quote_Parsing_for_Resellers) — similar · Opportunities
- [Automated Threat Intelligence](/Opportunities/Automated_Threat_Intelligence) — similar · Opportunities
- [Continuous Vendor Auditing](/Opportunities/Continuous_Vendor_Auditing) — similar · Opportunities
- [Handoff Automation Engine](/Opportunities/Handoff_Automation_Engine) — similar · Opportunities
- [Compliance Audit Agent](/Opportunities/Compliance_Audit_Agent) — similar · Opportunities
- [Autonomous Deal Scoring for Manufacturing](/Opportunities/Autonomous_Deal_Scoring_for_Manufacturing) — similar · Opportunities
- [SLA Reconciliation Agent](/Skills/Reading_Comprehension/Opportunities/SLA_Reconciliation_Agent) — similar · Opportunities
- [Contract Bid Operations](/Occupations/Protective_Service_Occupations/Opportunities/Contract_Bid_Operations) — similar · Opportunities
- [Supplier Risk Assessment](/Opportunities/Supplier_Risk_Assessment) — similar · Opportunities
- [Continuous HIPAA Remediation](/Opportunities/Continuous_HIPAA_Remediation) — similar · Opportunities