How a 5–30 tenant MSP turns CMMC L2 readiness into a billable, repeatable service line on Microsoft 365.
A working blueprint, not a sales deck. Print it. Forward it to your sales team. Use the timeline as your 90-day plan. Use the economics page as your pricing argument with your next defense-adjacent prospect.
CMMC L2 is the largest MSP service-line opening in a decade.
Two structural facts make this different from previous compliance waves: it's mandatory (not aspirational), and it recurs every three years (not one-and-done). For an MSP, that means the prospect can't say no, can't ignore it, and can't stop paying for it. What they CAN do is sign with whoever can deliver fastest.
Most MSPs aren't ready. The ones who productise the workflow now collect 5–10 years of recurring revenue from clients their competitors couldn't service. The barrier isn't desire — it's the operational lift of mapping 17 domains × N tenants × continuous evidence to a billable monthly fee. That's the gap Stella closes.
All 17 CMMC L2 domains, with an honest auto-vs-policy split.
Microsoft 365 governs more of CMMC L2 than most MSPs realise. Stella maps each domain to its M365 control points and auto-remediates the technical ones. Policy and human-process domains are evidenced for the assessor but stay your team's call.
Per-tenant margin math: why this works at 5 tenants and at 50.
| Lever | Value | Note |
|---|---|---|
| Per-tenant list price (MSP tier) | $1,700/mo | Launch rate. Standard $1,900. |
| Per-tenant cost of delivery (Stella) | ~$200/mo | Includes auto-remediation + reports + audit log. |
| Gross margin per tenant | ~88% | Before MSP labour overhead. |
| Time to baseline a new tenant | ~30 minutes | From M365 connect to gap report. |
| Hands-on remediation time per tenant | ~2 hours | Approve auto-fix queue + manual policy items. |
| Monthly review time per tenant | ~30 minutes | Drift triage + report ship. |
On the MSP tier ($1,700/tenant launch rate), 10 CMMC L2 tenants is $17,000/month MRR against a delivery cost in the low single thousands. On the MSP Pro tier ($2,200/tenant) the same 10 tenants is $22,000/month MRR — and your competitive moat is the assessor-readiness review service that DIY tools can't replicate.
The math survives at five tenants and at fifty. The platform overhead is the same. Every additional tenant after the first runs through the same console, the same playbook, the same auto-remediation queue. Stella was built so adding the eleventh tenant takes the same effort as the second.
From "what's CMMC L2?" to "we run that as a service line."
Why an MSP shouldn't build this and shouldn't outsource it.
| Lever | Stella | DIY (build it yourself) | Hire a consultant |
|---|---|---|---|
| Time to first revenue | Week 2–4 | Month 6+ | Month 3–4 |
| Per-tenant gross margin | ~88% | ~50% (labour-heavy) | ~25% (pass-through) |
| Recurring vs project | Recurring MRR | Recurring MRR | Project fees |
| Multi-tenant scale | Native | Custom-built | One client at a time |
| Assessor-defensible evidence | Auto-captured | Hand-assembled | Hand-assembled |
| Setup cost | ~$0 (per-tenant SaaS) | ~$80K–200K (engineer time) | $25K–60K per engagement |
DIY is technically possible. Most MSPs who try it stop around month four when they realise the evidence-capture pipeline alone is a full engineer's quarterly project. Consultants deliver one engagement at a time and pocket margin you'd rather keep. Stella collapses both into a SaaS line-item and gives you the productised workflow their tools and engagements can't.
Three things you can do this week.
- 1Run a free baseline on one tenant.Pick the one defense-adjacent client where this conversation is easiest. 30 minutes. No card. Walks out with a CMMC L2 gap report you can quote against.Start free baseline
- 2Send the readiness checklist to your sales team.The 17-domain self-assessment we use on every Stella beta tenant. Use it to qualify your next defense-adjacent prospect on the discovery call.Get the checklist
- 3Book a 15-minute call with the founder.Bring a real client scenario. We'll walk through what the Stella workflow would look like for that tenant in week 1, week 4, and month 6.Talk to founder