FIELD NOTE 04
What a Domain Can Tell You—and What It Can’t.
There's a whole industry built on scoring companies from the outside. Point a scanner at a domain, collect what's publicly visible, and produce a security…
Read the field note →INSIGHTS · MICROSOFT 365
Tenant evidence with the boundary left visible.
Field notes on identity, MFA, guest accounts, connected applications, and what a read-only Microsoft 365 source can support.
FIELD NOTE 05
The Questions Your Client’s Tenant Can Answer Before They Do.
Related: [Guest accounts now outnumber employees two to one](/insights/microsoft-365-guest-accounts) Hand a business owner a security questionnaire and…
Read the field note →FIELD NOTE 06
Your Client's Cyber Insurance Application Is a Sales Document.
Related: [MFA adoption statistics for small business](/insights/mfa-adoption-statistics-small-business) Somewhere in your client's filing cabinet, or more…
Read the field note →FIELD NOTE 08
Renewal Season Is the Best Sales Season Nobody Uses.
Every MSP I've ever met complains about the same thing. Outreach is miserable. Cold calls go nowhere, email campaigns get deleted, and the marketing dollars…
Read the field note →FIELD NOTE 09
The App Nobody Remembers Approving.
Every Microsoft 365 tenant I've seen scanned has at least one, and most have a dozen: an application, connected years ago, holding permissions nobody can…
Read the field note →FIELD NOTE 10
Your Clients Already Connected AI. Here’s What the Tenant Can Prove.
Every MSP is preparing for the conversation where clients ask about adopting AI. I have news: the adoption already happened. It just didn't go through you,…
Read the field note →FIELD NOTE 16
Why We Refuse to Read Your Files.
When we designed the SCOUTz collector architecture, we made a decision that cost us features and I'd make again tomorrow: the platform does not read…
Read the field note →FIELD NOTE 20
Outside-In Scores Are Estimates. Tenant Data Is Evidence.
Related: [SaaS security in 2026](/insights/saas-security-2026) There's a booming category of tools that will hand you a security score for any company on…
Read the field note →FIELD NOTE 22
Eight Business Worries. One Consented Assessment.
Here's a mistake I made for years and watch other MSPs make daily: assuming clients care about security the way we care about security. We think in…
Read the field note →FIELD NOTE 23
A Domain Scan Won’t Win the Deal. It Wins the Conversation.
Think about how an MSP walked into a first meeting ten years ago. A business card, a folder of references, maybe a co-branded brochure from whatever vendor…
Read the field note →FIELD NOTE 25
Scanning Without Asking: The Boundary for Read-Only Assessment.
There's an uncomfortable fact at the front door of this whole business, and I'd rather address it head-on than hope nobody notices. The read-only domain…
Read the field note →FIELD NOTE 26
What a Read-Only Domain Review Actually Does, and the Rules It Follows.
I've talked a lot about the free domain review as a conversation starter, so it's time to open the hood. What does a read-only domain review actually…
Read the field note →FIELD NOTE 28
Zombie Licenses: Payroll for People Who Don't Work Here.
Every company has an offboarding checklist, and almost every one of them contains the same hole. Collect the laptop. Disable the account. Forward the mail…
Read the field note →FIELD NOTE 31
The MSP's Real Moat Isn't the Stack. It's the Relationship.
RMM, PSA, EDR, backup, SOC, documentation, AI: most MSPs can buy roughly the same categories of tools. A competitor can copy a stack faster than they can…
Read the field note →FIELD NOTE 32
Domain Review vs Cloud Review: They Solve Two Different Problems.
Picture two browser tabs before a first meeting. One can read the company's public domain records without asking anyone for access. The other cannot open…
Read the field note →FIELD NOTE 35
AI Is Out of Control. That Doesn't Mean We Should Lose Our Minds.
An MSP opens an application list and sees ChatGPT, Copilot, an AI meeting assistant, and three products whose AI features arrived during ordinary updates.…
Read the field note →FIELD NOTE 42
AI Does Not Become a Service Until It Has a Boundary.
Putting AI in a service description does not create an AI service. It creates a claim. A real managed offering needs a defined customer, a supported use…
Read the field note →FIELD NOTE 43
You Cannot Hire Your Way Out of Manual Security Work.
More talent helps. It does not repair a workflow that asks every new technician to rediscover the same process. MSPs lose capacity in the spaces between…
Read the field note →FIELD NOTE 49
The Prospect Should Become the Client Without Losing the Story.
The usual MSP sales process loses information at every handoff. Marketing has the campaign context. Sales has CRM notes. The assessor has scanner output.…
Read the field note →FIELD NOTE 51
Those Product Screens Are Real. AI Didn't Invent the Product.
I have stood at a conference kiosk looking at a perfect dashboard on the big monitor while the actual demo ran on a laptop turned away from the room. The…
Read the field note →FIELD NOTE 53
The Goal Wasn't More Leads. It Was a Better Conversation With the Lead You Already Had.
There is always another list available. More companies, more contacts, more titles, more phone numbers, more records to move into a sequence. Those tools…
Read the field note →FIELD NOTE 56
The Prospect Has Google Too.
The modern buyer does not wait for the MSP to explain what an MSP is. They can compare websites, reviews, service lists, certifications, vendors, pricing…
Read the field note →FIELD NOTE 59
SCOUTz Doesn’t Close the Deal. You Do.
Software companies occasionally describe sales technology as if the relationship is an inefficient step waiting to be automated. We do not believe that.
Read the field note →FIELD NOTE 61
We’ll Put This Part in Writing: There Are No Guarantees.
Trust is easy to discuss when the claim is flattering. It matters more when the sentence limits the sale. SCOUTz does not guarantee more leads, a shorter…
Read the field note →FIELD NOTE 64
Your Prospect’s Email Appeared in a Breach. What Does That Actually Mean?
The breach slide usually starts with a familiar email address in large type. Then the label grows teeth: exposed credential, active risk, compromised user.…
Read the field note →FIELD NOTE 65
The More Frightening the Claim, the Better the Evidence Should Be.
Strong cybersecurity claims require evidence that can support their certainty. Fear-based labels weaken credibility when the source proves less.
Read the field note →FIELD NOTE 67
Stop Selling Your Stack
Nobody has ever called an MSP because they woke up Tuesday morning wishing they had a different RMM. Buyers want fewer interruptions, less uncertainty,…
Read the field note →FIELD NOTE 68
If All You Give Them Is a Stack and a Price, They'll Compare the Stack and the Price
Imagine two proposals. Both include Microsoft 365, EDR, backup, monitoring, help desk, and a security bundle. One costs $175 per user. The other costs $149.…
Read the field note →FIELD NOTE 70
Finding ChatGPT Isn't the Same as Finding AI Risk
An AI application name is a starting point, not a conclusion. ChatGPT installed does not prove active use. An enterprise application registration does not…
Read the field note →FIELD NOTE 71
Before You Govern AI, Figure Out What AI Discovery Means
Related: [Shadow AI in small business](/insights/shadow-ai-small-business) AI discovery is not one capability. The phrase is used for several evidence…
Read the field note →FIELD NOTE 72
The Cloud Assessment Is Where You Stop Looking Like Another MSP
The Domain Scan earns a responsible reason to talk. It does not close the deal, finish discovery, or prove what is happening inside the company. The…
Read the field note →FIELD NOTE 81
Cost Visibility vs. Security Evidence in Microsoft 365
Two products can review the same Microsoft 365 environment and answer different questions. BetterTracker publicly describes 365 Scout and its wider platform…
Read the field note →FIELD NOTE 85
The Founder Claim Has to Be as Precise as the Evidence
For a while I described SCOUTz as a product that was not built by vendors. The line sounded sharp. It was also incomplete. It told you who I wanted to…
Read the field note →FIELD NOTE 87
Nobody Won the Hundred Dollars
Credibility, a plan, and trust. A domain scan produces expertise and earns the appointment. The consented cloud review produces the facts the plan is built…
Read the field note →FIELD NOTE 93
Shadow AI in Small Business: What the Connected Apps Show
Shadow AI is employees connecting AI assistants to work email and files without IT approval. What Kaseya's 2026 data shows, and how MSPs turn it into a first meeting.
Read the field note →FIELD NOTE 94
SaaS Security in 2026, Read From the MSP Side of the Table
Kaseya's 2026 SaaS Security Report covers 27.6 billion events across 50,000+ small businesses. The findings that matter for MSPs, and how to use them in sales.
Read the field note →FIELD NOTE 96
Guest Accounts Now Outnumber Employees Two to One
69% of SaaS accounts in small businesses are guests, per Kaseya's 2026 data. Why Microsoft 365 guest access sprawls, the risk, and the cleanup MSPs can sell.
Read the field note →FIELD NOTE 97
MFA Adoption Statistics for Small Business (2026)
Only 27% of small businesses enforce MFA and 56% of accounts have it off, per Kaseya's 2026 SaaS data. What the MFA gap means and how MSPs close it.
Read the field note →SCOUTz OPEN BETA
Point SCOUTz at your next prospect. Walk in with a defensible answer.
Join Open Beta with a real MSP workflow. A person reviews every application before a workspace goes live. SCOUTz runs without an agent or install and never changes a configuration on its own.
SCOUTz prepares the conversation. The relationship and the sale stay yours.