Blacksmith Infosec review — compliance automation for MSPs

Whether Blacksmith Infosec is worth it depends almost entirely on your role in the MSP ecosystem. Pick your role below to see the honest breakdown.

Blacksmith Infosec has almost no footprint in public community spaces. There are no Reddit threads dissecting it, no forum debates about whether it's worth the price, and no visible case studies showing how it performs in the wild. For a compliance platform targeting MSPs, that's a notable absence. The tool has existed in some form since early 2024 based on search activity, but the security and MSP communities haven't picked it up as a discussion topic yet. That means there's no peer validation to draw on, which is genuinely inconvenient when you're deciding whether to build a compliance service delivery model around it. What the tool itself communicates is clear enough: flat-rate pricing at $200 a month (or $2,000 a year), a free NFR license for MSPs to test on their own environment, and a feature list that covers policy generation, risk registers, compliance roadmaps, and a white-labeled client portal. ConnectWise integration is listed, which is a meaningful signal for MSP shops already in that ecosystem. But without anyone publicly saying whether the policy templates actually hold up under audit scrutiny or whether the roadmap tool generates anything beyond a generic checklist, you're essentially taking the vendor's word for it.

• Custom Security Policies: Generate tailored security policies for each client in minutes, supporting multiple compliance frameworks including NIST, HIPAA, SOC 2, and CMMC with an interface that ensures consistency across different business environments.
• Personalized Compliance Roadmap: Automatically create a prioritized compliance checklist customized for each client that guides them through security best practices, focusing on critical measures first.
• Risk Management: Track security and business risks in a risk register, with assessment tools that help clients decide where to invest in protection.
• Security Awareness Training: Default and specialized training modules that educate staff about business risks and compliance requirements, with automatic enrollment and progress tracking.
• Audit Tracking and User Access Reviews: Record policy acknowledgments, track training completions, and manage user system access to maintain security controls.
• Incident Response Planning: Build and maintain incident response plans that prepare clients for security events and help them respond quickly when issues occur.
• Centralized Management Dashboard: Manage multiple client accounts from a single interface, with real-time monitoring and scalable security program oversight.
• Custom Client Portal Branding: White-label the client portal with custom branding to maintain your MSP's identity.

• Monthly Plan costs $200 per month with no per-user fees, add-ons, or hidden charges.
• Annual Plan priced at $2,000 per year with a flat rate and no additional fees.
• Both plans include customized security policies, risk management tools, compliance roadmaps, security awareness training, and incident response planning.
• Free NFR (Not For Resale) license available to help MSPs improve their own compliance along with their clients.