Blackpoint Cyber’s New CompassOne Drives Unified Security Posture for MSSPs

San Francisco, California - At RSAC 2025 today, Blackpoint Cyber unveiled its CompassOne Unified Security Posture and Response platform to help MSSPs and MSPs strengthen their cybersecurity posture across the entire attack surface.

CompassOne aims to unify multiple security functions into a single platform, to help MSPs and MSSPs reduce tool sprawl, decrease expense, improve efficiency and save time, Manoj Srivastava, Chief Technology and Product Officer at Blackpoint Cyber, told MSSP Alert.

"We've been really focused on MDR all these years," Srivastava said. "But now we're thinking about this new category that we're calling unified security posture management that brings various pieces of cybersecurity together: Risk, detection, response, remediation and recovery; bringing all of those together in one cohesive strategy, so that you can have your tools, your people, processes, all integrated and managed in a more consistent way," he said.

The CompassOne platform aims to address some of the biggest headaches for MSSPs and MSPs: Tool sprawl and complexity.

"Managed service providers are a first line of defense against cyberthreats,” said Jessica Davis, principal analyst, MSPs, at Canalys. “The growing number of disconnected point products can actually increase cyber risk by creating complexity and visibility gaps. Many organizations are now prioritizing platform consolidation to improve efficiency and resilience. While managed detection and response (MDR) continues to see strong growth—Canalys forecasts a 16% increase in 2025—MSPs are also considering broader solutions that support the entire security lifecycle."

It's difficult for MSPs and MSSPs to determine which tools they need, not to mention how to stitch those tools together and prove their value to their end customer, Srivastava said.

"Threats that don't operate in silos, so there's no reason that our defensive tools and strategies need to be operating in silos, either. It's really hard for MSPs, in particular, to figure out which tools they need, then bring them together and stitch together their value story," he said.

Blackpoint's strategy with CompassOne is to bring data from multiple sources into one platform, regardless of vendor. That helps provide a holistic view of risk, threats, alerts, the attack surface and more to enable a SOC to be more responsive from left-of-boom to right-of-boom, he said.

"There's a whole left-of-boom part of it, which is vulnerability management and looking at cloud security posture, for example -- which is before an incident happens. And CompassOne can focus on cybersecurity hygiene that before customers had to buy separate tools for, or weren't looking at at all," Srivastava said. Now, he added, Blackpoint Cyber is looking beyond just the detection and response to incorporate prevention, detection response, vulnerability management, prioritization and more in a single platform.

"We're going to give you the high level view, so you can step back and look at your what your security posture is, what your overall risk is, not just a single tool. As an MSP, it moves them up the value chain, from just being a tool provider to a strategic risk advisor or partner who can say, 'What's your risk? What's your cybersecurity posture, your organization's exposure?' And now you can quantify the investment that those clients are spending with your MSSP or MSP, and it's a more strategic conversation," Srivastava said. CompassOne helps MSPs become stickier with the clients, because they're selling them a part of the risk management and cybersecurity posture management journey and, ultimately, even more services, he said.

The CompassOne platform includes:

Security Posture Rating: A letter-grade security posture rating system based on established cybersecurity frameworks to track cybersecurity maturity and compliance progress over time

Unified Asset Inventory - "You can’t secure what you can’t see,” Srivastava said. The asset inventory offers complete visibility across the entire attack surface—devices, identities, cloud and SaaS environments.

Tenant Administrator - Complete oversight for MSPs and IT teams. Monitor clients, track renewals, manage billing, and respond to security issues instantly.

Managed Detection and Response (MDR) - Blackpoint’s 24/7 Security Operations Center (SOC) delivers the fastest threat detection and response in the market.

Vulnerability Management - Identify and remediate the risks that matter most with automated discovery, prioritization, and remediation guidance.

Application Control – Block unauthorized software and prevent ransomware, zero-day exploits, and insider threats.

Cloud Posture Management – Continuously monitor and fix security misconfigurations in Microsoft 365 before attackers exploit them.

LogIC (Logging with Integrated Compliance) - Effortless compliance, without legacy SIEM headaches. Capture, store, and analyze security logs automatically to meet regulatory standards and pass audits with ease.

CompassOne uses the National Institute of Standards and Technology (NIST) framework to benchmark cybersecurity posture, Srivastava explained. In the future, he said Blackpoint Cyber wants to be able to move into the compliance and insurance market so that organizations can trust in a widely-recognized standard.

Currently its data platform leverages threat intelligence from its Adversary Pursuit Group as well as data from the thousands of MSPs and MSSPs and 15,000 tenants that currently use the platform, he added.

Of course, not every MSP or MSSP needs all these features at once. So, Blackpoint Cyber is packaging CompassOne in two editions to start: Essentials, which includes the detection and response subscription and Standard Edition, which includes the unified security posture management features, he said.

"There's two different tiers because we want to compete at all levels," he said. "We want to offer a price-effective, cost-effective solution for those MSPs that buy some of the cheaper MDR solutions out there, which is Essentials, and you can still get protection for endpoint and cloud through that. If you're ready to be proactive and you're ready to have an actual cybersecurity program, vulnerability management program, you can bump up to Standard. And then we'll be looking at a 'best' category focused on compliance.