Sentinel Cyber
SENTINEL CYBER
Sales playbook & pricing engine
The firm

Who we are, and what we actually run.

A one-screen brief so you can answer “who are you, and what do you actually run?” with confidence — the story, the stack, and the one-line version.

{{ para }}

The stack we run

The vendors and partners behind the pitch, grouped by what they do. One line each on why it’s in the stack.

{{ grp.category }}
{{ it.name }}
{{ it.why }}
How we’re different, in 20 seconds
{{ firmDifferent }}
Fit

Who to chase, who to qualify out.

The cheapest way to stop burning weeks on dead deals. Chase the A’s, nurture the B’s, and pass on the rest fast and politely.

Tuned for {{ verticalLabel }} — {{ verticalSub }} · switch in the header
{{ ic.tier }} {{ ic.badge }}
{{ ic.firmographics }}
{{ ic.verticalLine }}
Qualify in
{{ sg }}
Disqualifiers
{{ dq }}
Play: {{ ic.note }}
Discovery

What to ask — not what to say.

{{ discoveryIntro }}

Tuned for {{ verticalLabel }} — {{ verticalSub }} · switch in the header
{{ g.category }}
“{{ q.question }}”
Why it works: {{ q.surfaces }}
Listen for: {{ q.goodSignal }}
If not: {{ q.badSignal }}
Sets up: {{ q.pointsTo }}
Objections

The stalls, and how to answer them.

Buyer stalls that make green reps freeze — and the calm reframe for each. (These are different from the “why we win vs other MSPs” lines on the battle cards.)

Tuned for {{ verticalLabel }} — {{ verticalSub }} · switch in the header
“{{ o.objection }}”
What’s behind it: {{ o.behindIt }}
Reframe: {{ o.reframe }}
“{{ o.response }}”
Proof: {{ o.proof }}
Re-open with: {{ o.reopen }}
Lifecycle

First touch to expansion.

The sequence, what to do at each step, and who actually holds each role. Get the stakeholder map right and the rest gets easier.

{{ lifecycleIntro }}
{{ st.n }}
{{ st.stage }}
Goal: {{ st.goal }}
Do: {{ st.act }}
Advance when: {{ st.advance }}

Who to talk to

The roles below are tuned to the {{ verticalLabel }} vertical — switch it in the header.

{{ r.role }}
{{ r.who }}
{{ stakeholderNote }}
What moves the needle

Recurring revenue is the whole game. Everything else is one-time noise.

Every managed client is seats × a monthly price, with a floor. The floor is the part most reps forget — and it's where the easy margin lives. Close the recurring base first; sell projects, hardware, and VoIP on top of it.

The floor
{{ minFmt }}/mo

No managed client bills under this, period. At low seat counts the floor — not the per-seat math — is what you're really selling.

Floor breakeven
{{ breakevenSeats }} seats

On {{ activeTierName }}, the per-seat price clears the floor at this headcount. Below it, push seats or tier — above it, every seat is pure compounding.

Published flat pricing
$100–350/seat

Four fixed price points — margin is an output, not a lever. You don't negotiate the price; you negotiate seats and scope. The ladder already protects the number.

The four levers, in order

Top to bottom = biggest needle-movers. Spend your energy up top.

{{ lv.n }}
{{ lv.title }}
{{ lv.body }}

Live margin map

These numbers track the calculator — change seats and toggles there and watch this move. The point: where the money actually is.

Tier Sell / seat Monthly Margin Profit b/labor /mo
{{ ti.name }} {{ ti.effUserFmt }} {{ ti.effMonthlyFmt }} {{ ti.effMarginFmt }} {{ ti.profitMonthFmt }}
Live package calculator

Build the quote. Watch the margin.

Each tier has a fixed sticker price. Flip the add-ons and they add their per-seat price on top — the sticker doesn’t move on its own. Past 50 seats you can apply a volume discount. {{ costViewNote }}

Volume pricing available — {{ seats }} seats
{{ volumeNote }}
%
{{ seats }}
$
$
What the outside rep adds on top of Sentinel’s price. Rep keeps {{ padSplitRepPct }} of the pad; the rest is yours. Internal-only — the prospect just sees the higher price.
Add-ons (add their $/seat to every tier)
Pick a coverage tier — reprices every package:
Cork Vantage platform fee ($150/mo) is MSP-side — not billed per seat.
Business Premium is included in Core & Partner but not Secure or Co-Managed. Most of the stack — Defender, identity protection, device management — assumes BP licensing. For a Secure or Co-Managed quote, turn it on or confirm the client already owns it.
{{ edrNote }}
$
Loaded labor
{{ laborNote }}
Outside-rep comp
%
%
%
Rep earns the greater of the base rate or their share of the pad. Soft ceiling only warns — it never blocks.
{{ ti.name }} {{ ti.flag }}
{{ ti.tagline }}
{{ ti.clientUserFmt }} /seat/mo
{{ ti.priceNote }}
Floored at minimum — list seat price is {{ ti.sellUserFmt }}
vCISO retainer included
{{ ti.advisoryValueYrFmt }}/yr advisory value
{{ ti.vcHoursMo }} hrs/mo of vCISO advisory ({{ ti.vcHoursYr }} hrs/yr) — the unbundled alternative is a generalist MSP plus a standalone vCISO firm at $3–5K/mo.
Monthly recurring{{ ti.clientMonthlyFmt }}
Effective margin{{ ti.effMarginFmt }}
{{ ti.guardLabel }}
Sentinel base / seat{{ ti.effUserFmt }}
Pad (sales top end) / seat{{ ti.padFmt }}
Software / seat{{ ti.softwareUserFmt }}
Labor / seat{{ ti.laborUserFmt }}
└ incl. vCISO delivery / seat{{ ti.vcisoUserFmt }}
Loaded cost / seat{{ ti.cogsUserFmt }}
Commission (rep) ↑ uplift {{ ti.repCommPctLabel }} · {{ ti.repCommMonthlyFmt }}/mo
Profit b/labor /mo (net comm.){{ ti.netProfitMonthFmt }}
Pad exceeds the markup ceiling — confirm before quoting.
Flat $350 is validated for 15–40 seats. Below 15, quote Core plus a separate vCISO retainer instead.
Above 40 seats the flat $350 no longer applies — use a banded price and negotiate.
$
Fixed sticker — add-ons and any volume discount adjust the seat price shown above.
{{ inc }}
Partner vCISO retainer — terms
{{ vcHoursMo }} hrs/mo · {{ vcHoursQtr }} hrs/qtr pool · {{ vcHoursYr }} hrs/yr at {{ seats }} seats

Included hours are banded by seat count: 4 hrs/mo up to 20 seats, 6 hrs/mo at 21–35, 8 hrs/mo at 36+. Ad-hoc and overage work bills at $325/hr; non-Partner advisory bills at the same rate.

Retainer terms
Hours pool quarterly ({{ vcHoursQtr }} hrs/quarter at this seat count) — no rollover past quarter-end.
Overage bills at $325/hr — no Partner discount.
Client is notified at 75% of the quarterly pool — never a surprise at invoice.
Program onboarding: $6,500–$10,000 one-time — baseline risk assessment, policy suite build, control mapping, first CyberCert submission, first tabletop (20–40 hrs). Not drawn from the retainer.
4% annual escalator, auto-uplift at each anniversary.
36-month recommended term.
What the included hours cover (72-hr/yr band)
Tabletop exercise — prep + delivery + writeup5
CyberCert audit work — evidence, control mapping, submission8
Quarterly security governance reviews (4 × 2.5)10
Annual risk assessment + policy review/refresh6
Ad-hoc advisory — questionnaires, insurance renewals, due-diligence packets12
Realistic consumption41 hrs/yr
Internal: 41 consumed against 72 included — a ~35% buffer. Sell the coverage, not the buffer.
Not included — scoped separately
SOC 2 / ISO 27001 / HIPAA readiness engagements (40–80+ hrs each).
Written policy authoring, control narratives, auditor representation.
CyberCert Platinum / Diamond (carry $3,000 / $5,000 audit fees).
Any certification or audit fee itself — always a client pass-through.
CyberCert Bronze through Gold audit labor is included. The cert fee never is.
Battle cards

Every offering, and why we win it.

What each offering actually is, what it earns, and where we beat other MSPs and consulting firms. Open a card for the full play. Start with how we position the whole relationship:

Our approach vs other MSPs
Other MSPs hire us to secure them
When the people whose whole job is IT need their own environment locked down, they bring us in. The client gets that same standard applied to their business — security is what we do, not a box we resell.
Security-first, business-aware
Most MSPs treat security as an upsell on top of break-fix. We start from security and build the IT service around it — without losing sight of the fact that the client is running a business, not a SOC.
A firm minimum, then as far as you want
We hold a non-negotiable security baseline that keeps every client genuinely protected. Past that line, the client decides how far to take it — and we use best-in-class tools and real methodology to get there, not a checklist.
{{ c.kind }} {{ c.margin }}
{{ c.name }}
{{ c.what }}
Open battle card
Info cards

What it all means, in plain English.

Every tool in the stack, explained without the jargon — what it is, and why it actually helps the client. You don’t need to be technical to use these; they’re here so you can answer “what’s that?” with confidence.

{{ ic.term }}
{{ ic.full }}
{{ ic.short }}
{{ ic.body }}
Microsoft licensing — why we use it

Business Premium, and the two Suites.

Why the base license matters, and what each upgrade Suite adds on top of it.

{{ im.term }}
{{ im.tag }}
{{ im.short }}
{{ im.body }}
Slide BCDR · 2026

Backup that pays for its own hardware.

Monthly cloud-retention subscription. The appliance is bundled in and becomes the client's to keep after the term. Pick a model, capacity, and retention — see the sell and the profit.

{{ slideSel }}
Monthly sell
{{ slideSellFmt }}
Your cost
{{ slideCostFmt }}
Monthly profit
{{ slideProfitFmt }}
Hardware value
{{ slideFtoFmt }}
{{ slideFtoNote }} Free-to-own value is informational — it's the hardware the client keeps, not a line item you bill.
Why it wins
Competitors lease you a box forever. Slide bundles the appliance into the subscription and hands it over after the term — strong recurring margin for us, no capital outlay and a tangible asset for the client.
Professional services

The high-margin, project work.

Scoped, project-based, billed up front. This is where the hourly rate does the heavy lifting — sell it on top of every managed client.

AI & software build
Custom apps, AI integration, workflow automation, bespoke tooling. Scoped only.
$300–400/hr
5-hour scoping block first — credited back if the build proceeds
Labor billed in 80-hour blocks ($24k–32k each)
Typical project 160–400 hrs · ~$48k–160k
Assessment & hardening
Cloud, Microsoft 365, Google Workspace, and local infrastructure. Scoped, then fixed.
$200/hr · $1,000 scope min
5-hour scoping minimum fixes the scope
Remediation billed hourly after scope
We fix what we find — not a PDF in a drawer
Compliance — audit & readiness
Plain-English compliance work. Scoped per engagement.
CIS ControlsReal audit · IG1–IG3
NIST CSF 2.0 / 800-171Real audit
ISO 27001 · HIPAA · SOC 2Readiness only
Readiness = pre-assessment / gap, not a licensed third-party audit. Package fees scoped per client.

AvePoint backup — per-GB calculator

{{ gbFmt }}
{{ gbMarkupFmt }}
Cost is $0.171/GB/mo from the catalog. Usage-based Azure / AWS backup.
Monthly sell
{{ gbMonthlySell }}
Annual sell
{{ gbAnnualSell }}
Monthly profit
{{ gbMonthlyProfit }}
Annual profit
{{ gbAnnualProfit }}
Compliance services

The technical control layer, priced honestly.

What we do, what we don't, and which rate applies. By control count the technical layer is roughly 40–50% of a SOC 2 — the documentation side is the bigger lift in client hours. Don't soften the line below; overpromising here costs credibility in month three.

Say it exactly like this
“We build and maintain the technical control layer your auditor will test. We do not author your policy set or represent you in the audit.”

The rate split

The test: is the deliverable a configuration or a document? Config = $200/hr. Document, meeting, or decision = $325/hr.

Configuration work
$200/hr
BitLocker via Intune, CA policies, MFA enforcement
Logging / retention buildout, endpoint hardening
Access review execution — pulling and remediating
Evidence capture — screenshots, exports for the auditor
Auditor finding — remediating / fixing the gap
Documents · meetings · decisions
$325/hr
Written policies, procedures, control narratives
Control mapping — which config satisfies CC6.6
Auditor meetings, Q&A, remediation triage
Auditor finding — diagnosing what it means
Risk assessment, vendor management program
The one that gets argued about: an auditor finding splits across both rates — diagnosing what it means is $325/hr; fixing the gap is $200/hr. Quote it that way up front.
Audit vs. readiness — be precise
CIS and NIST are real audits — we assess and score the live environment. ISO 27001, HIPAA, and SOC 2 are readiness only: we prepare you for a licensed third-party audit; we are not one.
“Who does the other half?”
The documentation and governance half we don't do: the client's own counsel, a compliance platform (Vanta / Drata), or Sentinel at the $325/hr advisory rate as a scoped engagement.
VoIP / telephony

Phones, kept simple.

Most clients want the same thing: enough concurrent calls and some phone numbers. Don't drown them in the billing matrix — sell the five things below and scope the rest.

{{ v.tag }}
{{ v.name }}
{{ v.body }}
The wedge: flat-rate SIP
Our trunking is flat-rate through our SIP provider — no per-minute meter ticking in the background, no surprise bill at month-end. Competitors quote a low seat price and make it back on usage. We don't. Lead with "predictable" and you'll win the room.
{{ active.kind }} {{ active.margin }}
{{ active.name }}
What it is
{{ active.whatLong }}
Who it's for
{{ active.who }}
The economics
{{ active.econ }}
Why we win vs other MSPs & consulting firms
{{ w }}
Talk track
"{{ active.talk }}"
Cost Adjuster
Edit the coded cost of each product. Blank uses the default (shown faint). Changes affect the internal margin/profit readout only — they never change the client price, and they persist on this device.
{{ cg.group }}
{{ it.label }} {{ it.unit }}
$