Last month we said we were investing in security operations, where the platform identifies the fix, dispatches it, verifies it worked, and captures the proof in one closed loop. May is the first concrete down payment on that promise. Not full autonomy, not yet. But the start of something specific: the platform doing more of the connective work for you.
Here's the shift this month. Open a Telivy assessment and the first thing you now see is a Top Actions table that ranks remediation steps by their projected impact on a client's CIS score. The highest-leverage fixes surface ahead of everything else, rather than a flat list to triage manually. Click into a Microsoft 365 policy gap and the Policy Inspect drawer pulls together recommendations, CIS references, Microsoft's own documentation, and admin portal navigation in one panel. If a finding can be fixed from the interface, a "Fix Available" badge shows up in the severity column, and fixable findings sort to the top. Different work, same intent: the distance between knowing what's wrong and resolving it gets shorter every release.
For partners running multi-framework compliance engagements, Crosswalk Review (Early Access in Telivy) extends the same connective work into the compliance side. When a client is being measured against CMMC, HIPAA, and CIS at the same time, Crosswalk Review maps your completed answers from one framework to related controls in the others. You answer once, you apply across many. Pair this with the Evidence Locker in Tentacle, now in production rollout, and the loop from assessment to remediation to defensible proof gets meaningfully tighter.
Behind the scenes, the next big Tentacle bet is active: Cyber Insurance Risk Management and Monitoring. It takes the messy, manual cyber insurance questionnaire (often dozens of pages on multifactor authentication coverage, backup posture, endpoint security deployment, training cadence, and more) and turns it into a continuously monitored mapping between insurance carrier requirements and the Telivy and Tentacle evidence already in place. More on that as we get closer.
The through-line for 2026 remains: Assess. Prioritize. Remediate. Prove. May's contribution sits squarely in Prioritize > Remediate. Every release deepens the loop, and every loop closure is more work the platform does for you instead of work that falls on your team.
Here's what we shipped over the last month.
This is the Telivy that gets sharper every month, less about what's wrong and more about what to do next. May's release set is the first installment of a broader prioritization and guided-remediation layer that lands across Q2.
The Top Actions table makes the highest-leverage fix the first thing your tech sees on a client assessment. The Microsoft 365 Policy Inspect drawer collapses what used to be a multi-tab research project into a single workflow. Crosswalk Review turns "fill out five questionnaires" into "fill out one, map to five." Each of these shaves real time off the work between finding a risk and resolving it.
If you're running compliance programs across regulated verticals, Crosswalk Review and Framework Similarity Scores together change the economics of multi-framework work. Pull these together with the Evidence Locker in Tentacle (now in production rollout) and the loop from assessment to remediation to defensible proof gets meaningfully tighter.
The Evidence Locker we announced in April is now in production rollout. Partners using compliance-as-a-service in healthcare and financial services are beginning to populate live evidence timelines, with Telivy scans flowing into source-attributed evidence snapshots and 90-day compliance heatmaps lighting up across client workspaces. If you have not yet had the conversation with your partner manager about wiring it into your existing client programs, this is a good month to do it. The depth of the timeline grows with every weekly Telivy scan, which means partners who start in May will be sitting on three full months of source-attributed, auditor-ready evidence by August.
Behind the scenes, the next major Tentacle capability is moving: Cyber Insurance Risk Management and Monitoring.
This is the surface that takes a client's cyber insurance application questionnaire (often dozens of pages full of questions on multifactor authentication coverage, backup posture, endpoint security deployment, training cadence, and dozens of other controls), ingests it, maps each question to the underlying Telivy and Tentacle controls that already have evidence, and surfaces a continuously updated compliance picture against the carrier's specific requirements. The bet: most MSPs are answering insurance questionnaires manually today, often inaccurately, with no continuous monitoring of whether the answers stay true between renewals. Tentacle plus Telivy can change that.
The Evidence Locker's value compounds with time. Every additional week of scan data is another week of evidence in the timeline. For service lines tied to regulated verticals, the timeline is the differentiator. And as cyber insurance carriers increasingly demand continuous attestation rather than annual paperwork, the Tentacle + Telivy story becomes the cleanest answer in the MSP market.
If compliance-as-a-service or cyber insurance support is a service line you're building, reach out to your partner manager to walk through how to wire Evidence Locker into existing client programs and how to be on the early access list for Cyber Insurance Risk Management when it lands.
ControlOne in May continued the polish trajectory, with one substantive shift around fail-open configurability that is worth calling out for partners managing larger or more uptime-sensitive deployments.
Fail-open configurability is the substantive headline. The fail-open story across March (configurable triggers), April (state preservation through migration), and May (preset sensitivity options) gives partners progressively more control over recovery behavior rather than forcing every deployment into the same defaults. License visibility, zone indicators, and admin column flexibility are the kinds of operational improvements that do not make headlines but remove daily friction across the portal.
The through-line for 2026 remains: Assess. Prioritize. Remediate. Prove. Every release deepens that loop. May's contribution is in the Prioritize > Remediate segment, with the platform handling more of the connective work that used to fall on your team.
Visit releases.cytracom.com for more details on these and other updates. You can also subscribe there for real-time updates as releases are shipped.
We’re looking forward to connecting with partners and peers at several industry events this summer. If you’ll be attending any of the events below, we’d love the opportunity to meet and catch up in person.
Attending Pax8 Beyond? Let us know! We’d love the chance to meet up, say hello, and connect with our valued partners while we’re all in Salt Lake City.
What’s new across the Cytracom platform, and what’s coming next? Join our executive leadership team on June 17 for a Q2 Product Update Webinar featuring the latest updates across Telivy Assess, Telivy Monitor, Tentacle, ControlOne, and UCaaS, plus a look ahead at the innovations shaping the future of MSP service delivery.
Register now to reserve your spot.
Only available through June 30, 2026.
Compliance pressure is increasing, client expectations are rising, and manual tracking is not scalable. This exclusive TeamLogic IT offer gives you a faster way to deliver ongoing risk visibility, structured compliance management, and reportable security insights without adding more operational overhead.
For a limited time, deploy Tentacle Compliance Management for an end customer and receive one additional month of Telivy Monitor free.
Most clients are still relying on spreadsheets, point-in-time assessments, and inconsistent reporting. Tentacle and Telivy Monitor help you deliver a more continuous, defensible approach to compliance and security monitoring that strengthens trust and creates higher-value recurring services.
Don’t wait. Claim your free month before the offer ends.
At Cytracom, we’re committed to helping you stay informed, supported, and equipped to better serve your clients and grow your business.
As the needs of MSPs continue to evolve, we want this newsletter to deliver practical insights and resources that are relevant to your day-to-day operations, customer conversations, and long-term goals.
If there’s a topic, challenge, or business conversation you’d like us to cover in an upcoming edition, send us a note at swise@cytracom.com. We’d love to hear what would be most valuable to you and your team.
Thank you for your continued partnership and leadership within the TeamLogic IT community.
— The Cytracom Team