Managed security assurance
MSSP Reality Check
Find out whether your managed security provider is delivering evidence, outcomes, and improvement rather than activity alone.
A free six-dimension assessment that turns service uncertainty into evidence gaps, red flags, and practical next actions.The free assessment scores an MSSP or outsourced SOC across six operational dimensions. It turns service-review uncertainty into a structured report with evidence gaps, red flags, and actions you can take into the next conversation.
No account required. Your report is protected by a private access link. Review the scoring method.
Example result
Northstar Managed SOC
54
Developing
Priority evidence gap
Detection coverage is discussed in meetings, but no current use-case catalogue or validation evidence is being provided.
Example result
Northstar Managed SOC
54
Developing
Priority gap: detection coverage has no current validation evidence.
Who it is for
Built for buyers who need to challenge the service constructively.
You do not need to be a SOC analyst. The questions focus on evidence a responsible customer can reasonably ask a provider to explain or produce.
Product proof
Inspect the workflow before you use it
These captures come from the live assessment interface, the versioned fictional report, and the current toolkit development specification.
Actual assessment UI
Answer one evidence question at a time
The live assessment uses weighted Yes, Partial, and No responses, with space to record evidence and context.
Open the assessment
Fictional report
See the decision output before submitting data
The public sample uses the production scoring model and contains no customer record, private link, or real organisation data.
Inspect the sample report
Development preview
Inspect the planned toolkit scope honestly
This preview shows the current nine-file production specification. The files, checkout, and downloads are not yet available.
Review the toolkit previewSix dimensions
Examine the operating service, not just the contract.
Each dimension tests a distinct part of delivery, using weighted questions and evidence prompts to separate a credible service from an unverified one.
01
Onboarding & Discovery Rigour
Does the MSSP actually understand your environment before they start monitoring it?
02
Detection Quality & Coverage
Are the detections meaningful, or just noisy compliance theatre?
03
Triage & Escalation Process
When something fires, does a human actually think about it — or does an alert just become a ticket?
04
Tuning & Continuous Improvement
Is the service getting sharper over time, or is month 12 identical to month 1?
05
Reporting & Client Visibility
Can you actually tell whether the service is working?
06
Commercial & Delivery Alignment
Does what you're paying for match what you're actually getting?
When to use it
Use the check when confidence and evidence have drifted apart.
What you get
A useful report, not a generic maturity label.
The result is an indicative assurance view based on the answers provided. It is not a certification, penetration test, or substitute for reviewing service evidence.
Practical guides
Prepare for an evidence-led provider review
MSSP due diligence checklist
Twenty-four questions and the evidence to request before selection or renewal.
Read guide →What your MSSP should provide every month
A practical evidence pack for service reviews that need to produce decisions.
Read guide →MSSP SLAs versus security outcomes
Keep useful service levels while measuring coverage, quality, and improvement.
Read guide →Common questions
Before you start
Do I need technical SOC expertise to complete the check?
No. The questions focus on evidence a responsible customer can request from an MSSP. Where you cannot verify an answer, record the gap rather than guessing positively.
Should I complete it with my MSSP present?
A useful approach is to complete an initial view internally, then use the report to ask the provider for missing evidence and revise your conclusion where the evidence supports it.
Does a high score prove the service is effective?
No. The result is indicative and depends on the answers supplied. Review key-control red flags, notes, and current evidence alongside the overall score.
What happens to the report?
It is stored for up to 12 months and accessed through a signed private link that normally expires after 30 days. You can request deletion through the privacy contact.
Turn the next service review into an evidence conversation.
Complete the six dimensions and leave with clear questions and next actions.