The core structural shift addressed in this episode centers on the unbundling and modularization of vendor platforms in the MSP technology market. This shift is exemplified by ThreatCaptain’s launch of its Gen 4 product, which transitions from an all-encompassing platform to discrete modules aligned to specific MSP business challenges—lead generation, sales enablement, and ROI/risk analytics. The move is designed to align product structure and pricing more closely to the diverse operational maturity levels of MSPs, as described by Brad Powell, co-founder of ThreatCaptain.
ThreatCaptain’s Gen 4 is available in three modules priced at $199, $399, and $599, most notably a move away from the earlier $1,499 per month pricing reported in March. According to Brad Powell, this change was driven by limited adoption among smaller MSPs, with the prior model better suited to larger firms already equipped with mature sales teams. He cites customer Novus Insights as an example, attributing $80,000 in professional services revenue over three months and more than $1 million in expected ARR, but acknowledges this reflected a highly mature CISO-led operation. The vendor currently reports approximately 65 active paying MSP partners, intending to scale significantly.
Supporting developments include the influence of insurance risk modeling and industry threat intelligence frameworks on new MSP toolsets. ThreatCaptain originally built its risk engine leveraging data from the IBM Cost of a Data Breach Report and the Verizon DBIR, adapting these for SMB scenarios. The episode also highlights the role of information sharing organizations (ISAOs), with Brad Powell noting the challenges of translating technical threat data into actionable intelligence for SMB-focused MSPs and illustrating ongoing coordination and separation of threat feeds between vendor sales processes and industry sharing mechanisms.
Operational implications for MSPs include increased need for prudent selection among modular product offerings, clarity around the scope and accountability of vendor-delivered analysis, and awareness of potential misalignments between vendor risk models and actual business outcomes. The trend underscores cost versus capability tradeoffs, especially for smaller providers balancing limited resources against the operational benefits of specialized tools. For MSPs participating in threat intelligence programs, there is also an ongoing requirement to maintain clear boundaries around shared data to prevent unintentional exposure or misapplication in commercial contexts.