Questions, answered
Certification, pricing, insurance, warranties and how the program works.
What is SPECTRA?
SPECTRA is a cyber risk platform. We partner with Managed Service Providers, Brokers, and Carriers to deliver tailored risk transfer solutions to channel partners and their customers.
SPECTRA is the only independent certification program that inspects and verifies MSPs: not a checklist, not a self-assessment, an actual inspection with documented evidence.
Does SPECTRA sell insurance?
No. Cyber insurance is a regulated product and must be placed by a licensed broker. SPECTRA certifies MSPs; our broker partners place the coverage. If your client already has an agent, that agent can access the program; we don’t displace them.
Who recognises the certification?
SPECTRA certification is the only MSP certification recognized by global insurers and brokers. Certified MSPs are featured on the SPECTRA Map, which insurers and brokers reference when routing referrals.
Who sets the standard?
SPECTRA’s benchmarks cover two areas: your own internal security, and the managed services you deliver to clients, aligned to NIST, CIS, and other recognized frameworks. Vendor-neutral throughout: we certify the outcome, not a specific product, and you keep control of your stack.
A certification is only as good as the standard behind it. SPECTRA’s Cyber Risk Advisory Board brings senior cybersecurity and national security expertise to bear on the Certification of Resilience, keeping it current as threats, regulation and industry practice change.
Is SPECTRA itself certified?
Yes. SPECTRA holds ISO 27001 certification for information security management.
How long does certification take?
Approved is self-service and takes about 20 minutes. Level 1 to 3 certification is typically completed within 3–5 business days from receipt of your documentation.
Do I need anything special to get started?
No. The Approved level is fully self-service in our PRISM Platform. Four controls, one platform, no phone calls. You can complete it today.
What evidence do I need to provide?
Information about your solution design and service delivery mechanisms, supported by evidence such as configuration exports and management reports.
Does SPECTRA require specific technology solutions?
No, SPECTRA is vendor agnostic, and the MSP can use any solution they want. The MSP controls the tech stack.
What’s the 12-month SPECTRA Approved requirement?
Approved MSPs are expected to reach Level 1 certification within 12 months to maintain their program status. Most partners achieve this within 30 days, demonstrating their commitment to enhanced cybersecurity practices and growing their business.
What happens if I don’t upgrade from Approved?
If you do not upgrade from the Approved level to Level 1 within 12 months, your participation in the program may be suspended or terminated, as Level 1 is the minimum ongoing requirement.
Is certification a one-time badge?
No. Certification is reviewed annually, not a one-time badge: multiple touch points through the year, not a set-it-and-forget-it badge.
What does SPECTRA Approved cost?
Nothing. Approved is free and fully self-service in PRISM: no credit card, no commitment. It includes one discounted cyber insurance referral for a client of your choice.
Is there a contract?
The program operates on a 2 year contract with a monthly payment based on Certification Level. The Approved level is free to start with no commitment.
Do we need extra contracts with clients for SpectraCare?
No. SPECTRA provides standard terms that embed into your existing Statement of Work.
Can I buy more SpectraCare protection than my level includes?
Yes, additional SpectraCare can be purchased in $10,000 increments of the desired amount up to $500k per certified service, up to 1M per customer across services. This allows you to customize protection for your clients beyond the standard pool limits.
Does SPECTRA sell insurance?
No. Cyber insurance is a regulated product and must be placed by a licensed broker. SPECTRA certifies MSPs; our broker partners place the coverage. If your client already has an agent, that agent can access the program; we don’t displace them.
How do clients of a certified MSP get preferred cyber insurance?
A 2-minute insurance application, no technical questionnaire. SPECTRA obtains from the certified MSP (and provides the insurer with) a detailed cyber posture inspection report of the applicant. Within 48 hours of submitting the short application, you receive a cyber insurance quote for preferred coverage and up to 35% discounted premium from an AM Best A+ rated insurer (Lloyd’s of London).
When do security referrals from brokers and insurers start?
Security referrals become available once you achieve Level 1 certification. This level signifies a robust security posture that qualifies you for direct referrals from our network of insurance brokers. Level 3 demonstrates a more robust security posture and gets preferred referrals.
What happens after a claim?
After a claim, SPECTRA insurance partners commit to not seeking indemnification (subrogation waiver) from the MSP, keeping the certified MSP on the incident, and avoiding delays and a costly rip-and-replace of the IT estate at the insured.
Does SpectraCare replace cyber insurance?
No. SpectraCare is a service performance warranty. It is not an insurance policy and does not indemnify financial losses: that is what a cyber policy is for.
Who backs the warranty?
SpectraCare warranties are backed by A+ rated carriers and structured to comply with regulatory guidelines.
Who receives the payout?
The customer, directly. Not the MSP.
Do we need extra contracts with clients?
No. SPECTRA provides standard terms that embed into your existing Statement of Work.
What if a client migrates a certified service mid-term?
Coverage follows the certified service, not a fixed configuration. Resubmit proof once the new environment is live.
Does coverage renew automatically?
No. SpectraCare warranties are renewed and verified annually.
Can we buy more than our level includes?
Yes, in $10,000 increments up to $500K per certified service and $1M per customer across services.
Is this insurance?
No. SpectraCare is a service performance warranty. It is not an insurance policy and does not indemnify financial losses: that is what a cyber policy is for.
Why does it matter whether my client’s MSP is SPECTRA certified?
Most security certifications are self-reported: no inspection, no verification, no one confirming that the MSP does what it says. Your client is taking their MSP’s word for it. SPECTRA is the only independent certification program that inspects and verifies MSPs: an actual inspection with documented evidence.
What does the program give me as an agent or broker?
A short, 2-minute cyber insurance application with no technical questionnaire, because SPECTRA has already verified the applicant’s cybersecurity posture through their certified MSP. Preferred pricing tied to verified security: meaningful premium discounts from AM Best A+ rated insurers. And a referral path for clients who don’t yet have a certified MSP.
What if my client’s MSP isn’t certified?
Now your client knows what to ask for. You can refer them to a SPECTRA Certified MSP already verified near them, or refer their current MSP to SPECTRA to get certified.
How do I refer a client?
Your cyber insurance customers who don’t have a certified MSP can be referred to a short list of certified MSPs nearby at spectracyber.com/agent-referrals. Or their MSP can be referred to SPECTRA to learn more about the certification program and benefits.
Where can I find agent resources?
The full suite of agent partner materials, including the conversation guide for SMB clients, the insurance application overview, and the certified MSP partner brief, is at spectracyber.com/agent-resources. Complete the form there to unlock the downloads. No sales call required.
Is my MSP SPECTRA certified?
Ask them, and check the SPECTRA Map: every certified MSP is listed there, at every certification level, and certification is reviewed annually, not a one-time badge.
What does certification tell me about my MSP?
SPECTRA inspects and verifies the MSP’s people, technology, process and performance: verified security controls and current, recognized staff certifications; tools confirmed as actually running and configured correctly, not just licensed; onboarding, change management and incident response protocols reviewed; and the operational track record and client satisfaction analyzed.
What is SpectraCare, and who gets paid?
SpectraCare is a performance warranty on the services SPECTRA has certified. If a certified service fails during a covered cyber event, SPECTRA refunds you directly: no deductible, no loss calculation, no lawyers. Every customer is eligible to receive up to $1,000,000 in warranty value.
Does it change my cyber insurance?
Businesses that license cybersecurity from a certified MSP get a 2-minute insurance application with no technical questionnaire, and a quote within 48 hours for preferred coverage and up to 35% discounted premium from an AM Best A+ rated insurer.
My MSP isn’t certified. What now?
Your insurance agent can refer you to a short list of certified MSPs nearby, or refer your current MSP to SPECTRA to learn about the certification program. You can also get in touch with us directly.
Try a shorter word or a different one, or pick a category.
Start with Approved. Free, and about 20 minutes.
Fully self-service in PRISM: no sales call required. You’ll answer general questions about the solutions and vendors you use and upload a few pieces of evidence. No credit card, no commitment.
Includes one discounted cyber insurance referral for a client of your choice. Complete it today and refer your first client before the end of the week.