MSP & Vendor Risk · Interactive Tool
Three views of every service. Four kinds of gap.
Most MSP relationships do not fail loudly. They fail in the space between what the contract says, what is actually delivered, and what the client believes it is paying for — and that space stays invisible until an incident finds it. The Gap Analyzer makes it visible, service by service.
Runs entirely in your browser. Nothing is uploaded, ever.
Four gap types
Every service is scored from three angles — Contracted (what the agreement says, in writing), Delivered (what the evidence shows), and Perceived (what the client believes). Comparing the three classifies each service automatically:
Expectation gap
Believed covered; the contract says otherwise. The dangerous one — discovered mid-incident as “we thought that was included.” Fix: amend the contract, or accept the risk in writing.
Delivery gap
Contracted, but not evidenced. Someone is paying for a service that is not demonstrably happening. Fix: remediation plan with dates.
Awareness gap
Delivered, but the client does not know or value it. Value leaks on both sides of the relationship. Fix: make delivery visible in reporting and QBRs.
Coverage gap
Nobody contracted it, nobody delivers it, and the client needs it. Unowned risk. Fix: add scope, add a provider, or document the acceptance.
For businesses with an MSP
You sign the invoice. This tells you what the monthly fee actually buys — before a restore fails or an incident lands. Bring the report to your next contract review.
For MSPs
Self-audit an account before the client finds the gaps first. The awareness gaps it surfaces — services you deliver that the client never sees — are money left on the table at renewal.
Try it — sample assessment loaded.
This is the real tool running on a fictional company. Click around, change scores, watch the gaps reclassify. The full version adds contract upload and scanning, saving, and exports.
Organisation: Harbourview Distributors (sample) · Provider: NorthShore Managed IT (sample) · Perspective: Independent assessment
How to read this: the three tabs — Expectations, Contract, Evidence — each capture one view of every service. The Gap Matrix compares them and classifies each row. The Report rolls everything up. Any change in the three views flows through instantly.
The full version reads the contract stack for you.
Drop in the MSA, SOWs, and SLA schedules — PDF, Word, or text. The built-in scanner flags candidate clauses for every service and quotes them with citations ("SOW-2024.pdf p.4"), so scoring the contract baseline takes an hour instead of an afternoon. The parsers are embedded in the file: it works offline, and your contract never leaves your machine. There is no server to trust because there is no server.
"Provider shall perform monthly patching of managed operating systems and third-party applications on all managed endpoints, with monthly reporting on coverage."
Get the kit.
One download. The complete methodology, not just the tool.
- The Gap Analyzer (offline HTML app with contract scanner)
- The six-phase process guide
- Five stakeholder interview guides
- The Excel gap-analysis workbook
One company assessing its own MSP relationship, or one MSP self-auditing its own accounts.
Use across unlimited client engagements, internal or billable.
Prices in USD. Instant download. The tool runs from a single file — no accounts, no subscription, no telemetry.
Assessing a security provider instead? → MSSP Gap Analyzer
Want this run for you — with the client interviews and MSP evidence requests handled by an independent third party? That is the engagement version.
Book a gap assessment