How BCS IS|IT tripled margins with Kaseya 365 Endpoint Pro
BCS IS|IT is a Milwaukee-based MSP that supports small and mid-market businesses across the Midwestern U.S.
When a crippling ransomware attack hit one of its clients, BCS recognized that traditional antivirus and endpoint tools alone couldn’t provide sufficient protection. The incident pushed CTO Craig Staffin to look for a solution that could deliver 24/7 threat monitoring without the high costs of building an in-house SOC. He also wanted a security model that business leaders could easily understand and adopt.
In April 2025, BCS subscribed to Kaseya 365 Endpoint Pro with Managed SOC and established a “Secure User Framework,” which consolidated the essential protections businesses need into a single, easy-to-adopt service.
The impact was immediate. In just six months, BCS onboarded more than 1,000 seats, cut detection and response times to minutes, reduced the cost per endpoint by 50% and tripled margins on security services — an exponential improvement over their previous model.
“We tripled our gross margins compared to the segregated stack and services we had before implementing Kaseya 365 Endpoint Pro. The improvement to our business performance has been pretty drastic.” Craig Staffin, CTO, BCS IS|IT
Before adopting Kaseya 365 Endpoint Pro, BCS IS|IT relied on a fragmented stack of antivirus, email filtering and EDR tools. Although these solutions worked during business hours, attackers adapted. Staffin observed that most intrusions occurred at night, on weekends or holidays, when no one was monitoring.
The breaking point came when one of BCS’s largest manufacturing clients was hit with a zero-day ransomware attack that crippled nearly 200 servers and 2,200 workstations across their global environment.
“That breach was the most work I’ve ever done in three months. My entire staff was consumed with recovery. We never want to be in that position again,” said Staffin.
Despite incidents like this, many clients didn’t share the same sense of urgency. Some insisted that antivirus was enough while others assumed cybercriminals only targeted large enterprises.
Staffin now faced two challenges. He needed to provide 24/7 protection without the expense of building an in-house SOC. He also had to shift the conversation, so decision-makers saw security as business risk management, not just another IT cost.
Standardizing service with the “Secure User Framework”
BCS IS|IT implemented Kaseya 365 Endpoint Pro with Managed SOC and built a standardized security package called the “Secure User Framework.” The framework combines RMM monitoring and automated patching with SOC monitoring, antivirus, EDR, and backups (from the Kaseya 365 Endpoint Pro subscription), plus phishing protection and security awareness training (included in the Kaseya 365 User subscription).
Instead of overwhelming clients with multiple tiers or tool menus, Staffin’s team simplified the approach: one package, one price, full coverage.
“We don’t give clients a dozen options to choose from. We present the Secure User Framework and explain that this is what they need. It is not a debate about tools — it’s a conversation about the value of our service and the full protection of their business.”
Presenting the services mattered as much as technology. The sales team shifted the focus away from technical features to business outcomes, asking questions such as:
- What does one hour of downtime cost your business?
- What if recovery takes three weeks?
- Did you know Microsoft’s terms make you liable if your compromised email account spreads an attack?
To make the stakes clear, BCS introduced a waiver for clients who declined the package, requiring them to accept full responsibility.
No client has ever signed it.
“We bring out the waiver if someone insists on skipping SOC. The moment they see it in writing, they stop and say, ‘Okay, we’ll take the package.’ It makes the risk feel real,” said Staffin.
Rapid growth, faster response and higher margins
With a single subscription, Kaseya 365 Endpoint Pro provided BCS with RMM (VSA 10), Datto AV/EDR, Automated Ransomware Detection, Advanced Software Management, Endpoint Backup and Managed SOC. The impact of Kaseya 365 on BCS IS|IT has been fast, measurable and transformative.
Adoption and growth
Within six months of launching the Secure User Framework, BCS onboarded more than 1,000 seats. Even clients who were initially skeptical quickly changed their minds.
One manufacturer that had previously lost $30,000 – $40,000 in a business email compromise signed the same day they were shown the SOC-powered package.
“Their CEO said, ‘When can you start? I’ll sign the paperwork today.’ That was the easiest close we’ve ever had,” said Staffin.
Security in action
Rolling out Kaseya 365 Endpoint Pro with Managed SOC internally gave the BCS team confidence in the solution. When Staffin tested the system by installing FileZilla, the SOC flagged and confirmed it in under four minutes. On a new client with a hidden infection, malware was detected and blocked within 15 minutes of deployment.
“That kind of speed is what matters. Every minute counts in an attack, and SOC cuts response time down to minutes instead of hours or days,” said Staffin.
Financial performance
“Before Kaseya 365 Endpoint implementation, we were barely breaking even. Now we have tripled our gross margin, even after factoring in staff time. That margin lets us reinvest in training, marketing and building the business instead of just keeping the lights on,” Staffin shared.
Typically, clients were already spending $22 – $36 per user on a mix of separate tools. At $35 per user with SOC, BCS consolidated those costs into a single package, while increasing margins significantly.
“With Kaseya 365 Endpoint Pro with Managed SOC, we shifted the conversation from tools to risk and value. That message resonates with CEOs and CFOs — and is the reason adoption has been so fast.” Craig Staffin, CTO
By adopting Kaseya 365 Endpoint Pro with Managed SOC, BCS IS|IT strengthened its security posture and reshaped its business model.
Clients get a simple, standardized package they can understand and trust. BCS gains higher margins, streamlined operations and the assurance that threats will be caught before they spiral out of control.
BCS IS|IT’s partnership with Kaseya reflects its commitment to protecting clients while building a scalable security practice that supports growth well into the future.
Products used in this case study

Kaseya 365 Endpoint
Kaseya 365 Endpoint delivers a single, integrated subscription that provides everything needed to manage, secure, backup and automate your endpoints.
Explore Kaseya 365 Endpoint
Case studies
Curious to explore more?
Thrive raises the bar on client protection with SaaS Alerts
Discover how SaaS Alerts’ powerful cloud detection and response platform helped Thrive deliver superior security services to clients.
Read MoreSalinor powers up IT operations with a smooth migration to VSA 10
How Brazil’s salt giant Salinor powered ahead with a seamless migration to VSA 10, unlocking efficiencies across its operations.
Read More
Blackline IT: Protecting people, not just systems
Blackline IT protects clients with care and confidence, using Kaseya’s unified platform and RocketCyber to deliver security that never sleeps.
Read More