Glossary

How are MSPs ramping up security this summer?

Published on
October 2, 2025

Quick overview

MSPs are shipping targeted product updates, expanding language support, and improving detection and response to help customers stay secure during peak business months. This update roundup highlights platform improvements, new detection features, enhanced playbooks, and phishing simulation options that make security operations more effective and scalable for service providers.

MSP summer security illustration

1. What big announcements should MSPs notice?

The most important news is that Palisade announced major funding and product expansions to accelerate platform capabilities and support MSP growth. That investment is being used to scale detection and response services, speed development, and expand coverage across customer environments. Expect improved automation, broader telemetry, and more integrated identity controls as part of that roadmap. MSPs should evaluate how these changes map to their service tiers and pricing. These moves mean partners can offer higher-value security services faster.

2. How do randomized phishing simulations improve training?

Randomized delivery makes phishing training more realistic and effective for end users. Instead of sending all simulated emails at once, the system staggers delivery across the campaign window so employees receive tests at unpredictable times. This approach increases click-rate realism and prevents users from gaming the system. MSPs can configure delivery for business hours and cover roughly 70% of the campaign span for better coverage. Results often produce higher retention of training outcomes.

3. What’s new with email scanning and detection?

Palisade added context-aware analysis that looks at sender behavior and attachment content to surface hidden threats. The system uses historical sender patterns and LLM-driven content checks to detect impersonation even when message bodies are sparse. Attachments that are plain text now get scanned for malicious indicators, improving chances to catch harmful payloads. These updates reduce false negatives and give SOC teams clearer evidence to act on. MSPs should enable these options to strengthen email defenses.

4. How are playbooks for external scan issues improved?

Playbooks now translate complex external-scan findings into concise, actionable steps for remediation. They include vendor-specific guidance for common risks like TLS misconfigurations, exposed databases, and vulnerable web apps. This reduces time-to-fix by guiding technicians through prioritized actions and verification steps. MSPs benefit from consistent remediation workflows that scale across clients. The updated playbooks also include links to vendor docs and recommended patches.

5. Why does language support matter?

Reporting in multiple languages helps MSPs communicate security findings to diverse customer bases and win trust with non-English speaking stakeholders. Adding 10 languages, including French, Spanish, Portuguese (BR), and German, makes reports easier to act on and shortens the feedback loop. Clear, native-language reporting reduces misinterpretation and speeds remediation decisions. MSPs should enable language-specific reports to improve customer experience. This capability also helps in global expansion and local compliance conversations.

6. What is ITDR and why should MSPs care?

ITDR is Palisade’s new control for detecting and responding to identity-based attacks across accounts and services. It monitors user behavior, correlates signals across the stack, and triggers containment actions before an attacker can move laterally. Identity threats are among the fastest-growing entry vectors, so having continuous identity detection improves containment. ITDR is included across plans, with deeper 24/7 MDR support available at higher tiers. MSPs should assess client identity risk and map ITDR into service packages.

7. How do these updates affect MSP pricing and services?

New capabilities let MSPs create higher-value service tiers and justify premium pricing for around-the-clock detection and identity controls. With expanded automation and playbooks, labor costs per incident can drop while service value increases. Providers should revisit packaging to highlight rapid detection, language-enabled reporting, and advanced email scanning. Bundling ITDR and enhanced MDR can open new upsell opportunities. MSPs should test pricing experiments with pilot clients.

8. What should MSPs prioritize to stay secure this season?

Prioritize identity protection, email defenses, and automated remediation workflows first. These areas address the most common attack paths seen during high-activity months and prevent escalation. Ensure playbooks are in place for external scan findings and that phishing simulations run unpredictably. Enable advanced detection features in email scanning to reduce hidden threats. Finally, use language-enabled reporting to accelerate client decisions.

9. How can MSPs measure ROI from these updates?

Measure ROI by tracking mean time to detect (MTTD), mean time to remediate (MTTR), and incident volume per client before and after enabling new features. Customer satisfaction and renewal rates tied to security outcomes are also key indicators. For phishing programs, compare simulated click rates and training completion over time. Quantify labor savings from automated playbook steps and faster remediation. Use these metrics to build case studies for prospects.

10. Are there integration changes MSPs need to know?

Most updates are backward-compatible, but MSPs should validate connectors for identity stores and email gateways to ensure telemetry flows correctly. Test ITDR connectors and email scanning rules in a staging environment before wide rollout. Update documentation for customers about required permissions and expected data retention. Coordinate with customers to schedule changes during low-impact windows. This reduces rollout friction and avoids service disruptions.

11. Which customers benefit most from these features?

Small and midmarket clients with limited in-house security benefit most from managed detection, identity controls, and language-enabled reports. Organizations with high email traffic or remote workforces also see immediate gains from advanced email scanning and phishing randomness. Regulated customers benefit from faster, documented remediation steps and clearer reporting. MSPs can prioritize pilots with clients that have clear compliance or phishing risk profiles. These customers typically see the fastest risk reduction.

12. How should MSPs communicate these changes to customers?

Lead with tangible benefits: faster detection, clearer remediation steps, and improved reporting in native languages. Provide example reports and a short implementation timeline so customers know what to expect. Offer a pilot with select clients to show improved MTTD and reduced manual effort. Emphasize identity protections and email scanning as direct risk reduction measures. Finally, share a pricing path for customers who want 24/7 MDR support.

Quick Takeaways

  • Major investment is accelerating Palisade platform growth and MDR capabilities.
  • Randomized phishing delivery creates more realistic training and better outcomes.
  • Advanced email scanning now uses sender behavior and attachment analysis to find hidden threats.
  • Updated playbooks turn scan findings into prioritized remediation steps.
  • Reports are now available in 10 languages, improving communication and trust.

FAQs

Q: Will ITDR be available to all customers?

A: Yes — ITDR is included across plans, with full 24/7 MDR response in premium tiers. MSPs should map client needs to the appropriate plan to ensure comprehensive coverage.

Q: Can phishing simulations be customized per client?

A: Absolutely — MSPs can set campaign windows, business-hour constraints, and randomized delivery percentages to tailor simulations to each customer.

Q: Do the new email scans require extra licenses?

A: In most cases, the advanced scanning features are enabled in-platform; MSPs should verify plan entitlements or consult their account team for licensing specifics.

Q: How quickly can language-enabled reports be turned on?

A: Language options can be enabled rapidly for existing report workflows; setup time is minimal but MSPs should verify translations for client-facing custom fields.

Q: Where can I learn more about integrating these features?

A: Visit Palisade's platform overview for integration guides and support resources: Palisade unified MDR platform.

Email Performance Score
Improve results with AI- no technical skills required
More Knowledge Base