An Open Source Business Plan for Security Focused MSPs

The Publicly Available Business Plan for Netizen Watch (Excludes details found in Investor, and Internal Versions)

Netizen Watch Business Plan 1.3

*Updated to Include Skip Trace Investigations, Cybersecurity Training, and Scam Investigations

Mission Statement:

To provide accessible and robust cybersecurity protection tailored to the needs of everyday internet users, with a special focus on cyber awareness and active scam investigations, including tax fraud.

Company Details:

• Location: USA

• Services provided by: Mogul Prep LLC

Team:

• Cybersecurity Architect/Purple Team Lead: Akyl Phillips (certifications: Certified Ethical Hacker, CompTIA Pentest+, Giac Certified Penetration Tester GPEN, Giac Certified Incident Handler GCIH, CompTIA Security+)

• Lead Project Manager/Marketing Director: Redacted

• Sales Lead: Redacted

• Sales Engineer: Redacted

Target Audience:

• Individuals earning over $100,000 through online platforms, social media, and digital devices who are well-versed in navigating the internet's pitfalls and scams.

• Small business owners often find themselves at a crossroads when implementing cybersecurity measures, unsure of the best path.

• Large corporations seek to establish flexible out-of-band monitoring and penetration testing services to bolster their digital security.

Services:

• Web Footprinting Report

• Threat Vulnerability Mapping Report

• Security Monitoring

• Penetration Testing

• Data Discovery Report

• Custom OSINT Scrub and Proposal: For the average netizen, offering managed endpoint protection, managed logging, and managed security monitoring based on their specific data protection needs.

• Cyber Awareness Training: Developed in partnership with leading providers to educate users on current cyber threats and protective measures.

• Active Scam Investigations: Including specialized services for tax fraud and other prevalent scams.

Tools:

• Maltego

• Shodan

• Kali Linux

• Metasploit

• ELK Stack

• Avast Business Hub

• Bitdefender (POC Pending)

• BurpSuite Pro

• OSQuery

• VSCode

• PowerShell

• Azure CLI

• Microsoft Intune

• Microsoft Azure

• Vercel

• Telekom Tmobile TPOT

• Google Forms

• GDrive

• OneDrive

• Substack

• Domains

• Microsoft O365

• Proton Mail

• Discord

• Jira

API Keys:

• Hibp Api Key

• fraudguard username

• pastebin api key

• alienvault Api Key

• Virustotal Api Key

• Ipinfodb Api Key

• abstractapi Company Enrichment

• abstractapi IPgeoLocation

• abstractapi Phone Validation

• bitcoinabuse

• Fullcontact Api Key

• Geocode Api Key

• Github Api Key

• LinkedIn Api Key

• Pushpin Api Key

• Reverse Api Key

• Spyse Api Key

• Twitter Api Key

• Whois Api Key

• whoxy DNS Api Key

• Youtube Api Key

• passivetotal

• securitytrails

• bevigil

• chaos

• whoisxmlapi

• quake

• robtex

• chinaz

• dnsrepo

• c99

• fullhunt

• fofa

• intelx

• certspotter

• bufferover

• leakix

Service Offerings & Pricing Tiers:

Monthly Pricing for Essentials Package

• Small Businesses (1–10 devices):
  $199 – $299 per month

• Medium Businesses (11–50 devices):
  $399 – $599 per month

• Large Businesses (51–100 devices):
  $799 – $1,199 per month

• Enterprise Businesses (101–200 devices):
  $1,499 – $2,499 per month

• Custom Pricing for 200+ devices:
  Contact for custom quote based on complexity and number of devices

---

Annual Pricing (with a discount)

• Small Businesses (1–10 devices):
  $2,100 – $3,000 per year (10-15% discount for annual payment)

• Medium Businesses (11–50 devices):
  $4,200 – $7,200 per year (10-15% discount for annual payment)

• Large Businesses (51–100 devices):
  $9,600 – $14,400 per year (10-15% discount for annual payment)

• Enterprise Businesses (101–200 devices):
  $16,800 – $29,400 per year (10-15% discount for annual payment)

• Custom Pricing for 200+ devices:
  Contact for custom quote based on contract length, services, and specific needs

---

Additional Pricing Considerations for Essentials Package:

• Onboarding Fee
  One-time setup fee: $100 – $500 (based on device count and complexity)

• Support Add-ons

  • Basic Support (Mon-Fri, 9am – 6pm): Included in the package

  • Premium Support (24/7, priority response): $50 – $200 per month

• Volume Discounts

  • 5-10% off for businesses with more than 50 devices or multiple locations

  • 10-15% off for businesses with more than 100 devices or larger multi-site businesses

---

Continuous Logging Add-On Pricing

Continuous logging is an essential service for real-time security monitoring and compliance, offering detailed log collection, processing, and analysis for endpoint protection.

---

Monthly Pricing for Continuous Logging Add-On

• Small Businesses (1–10 devices):
  $99 – $149 per month
  Includes up to 10GB storage, basic threat detection, and logging capabilities.

• Medium Businesses (11–50 devices):
  $199 – $299 per month
  Includes up to 50GB storage, advanced monitoring, real-time alerts, and detailed logs.

• Large Businesses (51–100 devices):
  $399 – $599 per month
  Includes up to 100GB storage, advanced log analysis, threat intelligence integration, and compliance reporting.

• Enterprise Businesses (101–200 devices):
  $799 – $1,199 per month
  Includes up to 200GB storage, priority log analysis, enhanced compliance features, and SIEM integration.

• Custom Pricing for 200+ devices:
  Contact for custom quote based on log volume, storage, and specific business needs.

---

Additional Pricing Considerations for Continuous Logging:

• Excess Data Storage:

  • Additional $0.50 per GB for storage beyond the included amount.

• Log Retention Period:

  • 30-day retention is included.

  • 1-year log retention: $200 per year

  • 2-year log retention: $400 per year

• Custom Integrations (SIEM & Advanced Features):

  • Integration with third-party SIEM tools or custom dashboards: $300 – $600 per month

---

Skip Trace Investigations Pricing:

• Basic Skip Trace: $100 – $300 per individual

• Advanced Skip Trace (Deep Web, Asset Discovery): $500 – $1,000 per individual

• Corporate Investigations (Fraudulent Shell Companies, Beneficial Ownership Tracking): Custom pricing

  ---

Summary of Total Cost (Example)

• Essentials Package (for Small Business, 10 devices)

  • Monthly: $199 – $299

  • Annual: $2,100 – $3,000

• Continuous Logging Add-On

  • Monthly: $99 – $149

  • Annual: $1,188 – $1,788

Total Monthly Cost (for a small business with 10 devices)

• $298 – $448 per month

Total Annual Cost (for a small business with 10 devices)

• $3,288 – $4,788 per year

---

Customizable Options:

• Add more services or support levels with volume discounts or extended storage/log retention.

• Custom pricing and tailored solutions for businesses with more than 200 devices.

Startup Cost:

• Equipment, Tools, Software, and Infrastructure: <$5000 Minimum Overhead Annually

• Marketing: Flexible

• Savings Strategy: Utilize a remote work model, BYOD policy, and internal training to save on startup costs. Monitoring teams will develop privacy policies based on what they would not want to be seen, ensuring beneficial data privacy strategies.

Marketing Strategy:

• Budget Allocation:

  • Netizen: $2,500/year in services

  • Small Business: $10,000/year in cybersecurity-focused MSP services

  • Enterprise: $50,000/year in services

  • Client Acquisition Cost:

    • Netizen: $150

    • Small Business: $600

    • Enterprise: $5000

• Dynamic Marketing Plan: Develop strategies for both high-budget ($10,000/month) and low-budget scenarios.

• Content Marketing: 7-10 articles/month, daily social media promotion, focusing on joining the Substack newsletter.

• Content Development: Blogs, podcasts, YouTube videos, social media posts.