LAST UPDATED: JULY 2026
This is a deeper dive on the same topic. There's no workbook question here, since you already answered it in the 101 lesson. Read for the extra detail, then continue to the next topic below.
Advanced MSP Expansion Revenue Strategies
The 101 lesson covered the fundamentals: the service-gap matrix, trigger events, one-page add-on talking points, and the discipline of tracking upsell opportunities rather than letting them evaporate. Once those practices are running across your client base, the advanced layer is building a structured expansion model that generates predictable revenue without depending on individual heroics.
Three advanced strategies separate MSPs with strong organic growth from those that treat upsell as an occasional lucky conversation: compliance-driven tiering, vCISO-style advisory services, and a maintained expansion pipeline that converts upsell conversations into forecasted revenue.
Compliance-Driven Upsell Tiers
Compliance creates the most natural upsell pressure that exists in the MSP market, because the urgency is external. A cyber insurance carrier demanding MFA and endpoint detection before renewing a policy is not your opinion; it is a business requirement the client cannot ignore.
Build your service tiers around compliance baselines that your clients' industries actually face: HIPAA for healthcare, SOC 2 readiness for SaaS or financial services clients, cyber insurance minimum requirements for anyone above a certain revenue threshold, and CMMC for defense contractors. Each tier is not a price increase. It is an answer to the question "what does a client in this industry need to have in place to stay protected and insurable?"
The pitch: "Your cyber insurance renewal is in March. We've reviewed what your carrier now requires versus what you currently have in place. There are three gaps. Here's the remediation plan, and here's what it costs to close them before the renewal date." That is a service conversation, not a sales pitch.
TOOLS CAN HELP WITH THIS
Free account planning tools exist to help with this. Book a free call with us to see what we recommend for your MSP.
Going Deeper
Pitching vCISO and Advisory Services
As clients grow and their compliance obligations become more complex, many reach the point where they need security leadership advice but can't justify a full-time CISO. The virtual CISO (vCISO) engagement fills that gap — and MSPs with deep security expertise are the natural providers.
A vCISO engagement is a monthly advisory retainer that typically includes: security policy development and review, board-level security reporting, incident response planning, compliance gap analysis, and vendor security reviews. Priced between $2,000 and $6,000 per month depending on scope, it represents the highest-margin product most MSPs can add to their catalog without hiring additional technical staff.
The client profile for a vCISO pitch: 50+ employees, any regulated industry (healthcare, legal, financial, government contractor), and a leader who has started asking questions like "are we compliant?" or "what would happen if we got hit?" Those questions signal executive security anxiety — the exact need the vCISO engagement is designed to resolve.
Using Third-Party Proof to Reduce Expansion Risk
When pitching an add-on service to an existing client, the biggest psychological barrier is the same one that faces new-logo sales: uncertainty about whether it will actually work. The fastest way to reduce that uncertainty is third-party proof from another client (with permission) who already uses the service.
Build a one-paragraph case study for each add-on service you commonly pitch — real client, real problem, real outcome (names anonymized if necessary). "A 35-person law firm we work with added managed security awareness training last year. Their simulated phishing click rate dropped from 22% to 4% in six months, and they used the results to negotiate a lower cyber insurance premium." That narrative is worth more than any feature list.
FOR MSP OWNERS SPECIFICALLY
Knowing what your named competitors offer — and at what positioning — directly shapes how you pitch expansion services. If a competitor is actively selling a compliance tier you don't have, clients who attend a competitor's webinar or get a competitor's proposal will start asking why you don't offer the same.
Your Jackdaw Competitive Intelligence Report maps exactly this: what services named competitors in your market lead with, what they charge (where visible), and where their offering has gaps your expansion catalog can cover. Use that intelligence to sequence which add-on services to prioritize and how to frame them against what clients are already hearing from the market.
Building and Maintaining an Expansion Pipeline
At the foundation level, upsell is tracked in a spreadsheet. At the advanced level, it functions like a sales pipeline — with stages, owners, expected close dates, and revenue forecasts. Every client with an identified gap and an open conversation gets a row. Every row has a status (identified, pitched, proposal sent, closed/won, closed/lost), a next action, and a next action date.
Reviewed monthly, this pipeline tells you two things: how much expansion revenue is realistically in motion right now, and which opportunities have gone cold and need a follow-up touch. A pipeline that is reviewed and advanced monthly generates meaningfully more revenue than a spreadsheet that only gets opened before a QBR.