For MSPs, vCISOs & Advisors
Every client assessment, done once and done right
Each client has a different stack, a different threat picture and not much time to give you. Acuity gives your practice one repeatable way to assess every client against NIST CSF 2.0 or CIS Controls, show where they're exposed, and hand them a roadmap they can act on, with a portal they can log into.
- Manage every client from one account, each one isolated
- Documents-first assessments with AI prefill
- Gaps and roadmaps tied to the threats that target each client's industry
- A client portal that shows your ongoing value
The Challenge
More clients shouldn't mean more spreadsheets
Advisory practices grow by adding clients, and every new client brings the same manual work back.
A fresh spreadsheet every time
Each assessment starts from a blank template, and the quality depends on who ran it.
Roadmaps built by hand
Turning findings into a prioritized plan the client will fund takes hours of senior time per client.
Value that's hard to show
Between engagements, clients see invoices, not progress. Renewals depend on proving the program moved.
The Acuity Approach
One method across every client
1. Assess from their documents
Upload the client's policies and evidence. Acuity's AI drafts the assessment against NIST CSF 2.0 or CIS Controls v8.1, checks every answer against the evidence, and asks targeted follow-up questions where the evidence falls short.
2. Show what matters for them
See how the client's controls and tools cover the MITRE ATT&CK techniques used by the threat groups that target their industry. Gaps come in three views: tools, maturity and policies.
3. Hand over a roadmap and a portal
Acuity builds a prioritized roadmap from the client's goals, budget and timeframe. Each client logs into their own portal, so your work stays visible between meetings.
- 166
- MITRE ATT&CK threat groups behind industry threat weighting, across 12 industries
- 36
- Evidence checklist items every client's policies are reviewed against
- 1–5
- Maturity score with a written rationale for every CSF 2.0 subcategory
Frequently asked questions
Can I manage all my clients from one account?
Yes. Your team works across every client from one account. Each client’s data is isolated, and each client can have their own users and portal.
How long does a client assessment take?
With documents-first assessment, Acuity drafts the self-assessment from the client’s policies and evidence, so your team starts by reviewing rather than writing. You can also run a guided assessment, or record one you’ve already completed.
Which frameworks do you support?
NIST CSF 2.0 and CIS Controls v8.1 with Implementation Group mapping (IG1–IG3), plus NIST 800-171 (CMMC 2.0). Coverage is mapped to MITRE ATT&CK.
How is client data protected?
Acuity is multi-tenant with each client’s data isolated, email-based multi-factor sign-in and role-based access for your team and for client users.
Can I export results into my own deliverables?
Yes. Per-control scores, gaps, rationale and narrative export to CSV.
Do you work with partners?
Yes. We’re building our partner program with a small group of advisory firms and MSPs. If you assess clients today, we’d like to talk.
See it on one of your clients
Pick a representative client and we'll walk through an assessment, the gaps and the roadmap with you. You'll talk with the people who built it.