When to sell Business vs Application (and when Portfolio)

Confused packaging kills partner deals. The client asks for "a pen test," three people mean three different things, and you either oversell depth they don't need — or undersell continuous risk they do.

Here's a plain playbook for what to lead with through BreachRisk for Service Providers: Business, Application, and Portfolio — and when Insurance Readiness fits. (Cyber Questionnaire Validator and Pre-Claim Intervention aren't part of the partner catalog; don't promise them as tenant deliverables.)

Default: BreachRisk Business

Lead here for almost every MSP-managed org.

Business is continuous outside-in assessment: discover what's reachable, probe what's real, score breach risk, hand back evidence under your brand. It matches the question most clients (and their insurers) actually ask about the perimeter and exposure, not the internals of one custom app.

Sell Business when:

• They want ongoing proof, not a one-week project
• The pain is "what's exposed to the internet / identity / cloud edge?"
• Your QBR needs a trendable score and a ranked queue

If you only package one thing, package this.

Add Application when the crown jewels are the app

Application is for web-app / API / access-control depth — real application-layer testing and compliance-ready reporting when the client's risk lives in software they build or host, not only in the external estate.

Sell Application when:

• They're shipping a customer-facing app or API that has to stand up to scrutiny
• A buyer, auditor, or enterprise customer is asking specifically about application testing
• Business already covers the perimeter and the next question is clearly in-app

Don't open with Application for a 40-person firm whose main problem is an exposed VPN and stale admin panels. Match depth to the surface.

Use Portfolio when "the client" is many entities

Portfolio is the multi-entity lens — useful when your customer is really a set of organizations (franchisees, subsidiaries, vendor groups) and someone needs a book-level view, not a single-tenant story.

Sell Portfolio when:

• One contract covers many assessed entities
• Leadership wants comparison / concentration of risk across the set
• You're already delivering Business (or Application) per entity and the missing piece is the rollup

Portfolio isn't a substitute for per-tenant assessment. It's how you operate and report when the map has more than one pin.

Insurance Readiness — when the buyer is underwriting-shaped

Insurance Readiness fits when the conversation is explicitly about being able to show risk posture in terms insurers understand — often alongside a renewal or a broker-led process.

Use it when the client's next audience is an underwriter or broker, and your role is helping them show evidence rather than only fixing tickets. If the motion is pure MSP stewardship with no insurance thread, stay on Business.

A simple decision tree

1. One org, external risk, ongoing proof → Business
2. Plus a serious app/API that needs depth → add Application
3. Many entities under one relationship → Portfolio (with Business per entity)
4. Insurance / broker is in the room → consider Insurance Readiness
5. They asked for "CQV" or pre-claim workflows → that's a different BreachBits motion; don't force it through the SP catalog

Packaging language that stays honest

• Speak in client outcomes ("continuous external breach-risk assessment," "application testing with a compliance-ready report") before product names.
• Keep white-label tied to the Service Provider motion — reports and share links under your brand.
• Skip public seat math. Scope the apps; price in a partner conversation.

The bottom line

Most of your book wants Business. Application is a deliberate upsell when the software surface deserves it. Portfolio is for multi-entity reality. Insurance Readiness is for insurance-shaped conversations. Everything else is noise.

Get the default right and the rest of the catalog becomes expansion — not confusion. More on the partner model at BreachRisk for Service Providers, or book a demo to walk packaging with a real tenant example.