MSP contracts: Why fixed-fee bundles hide meter risk

The episode highlights a structural shift where software instability and unpredictable metered AI pricing introduce direct margin and accountability risks for MSPs. This shift is driven by advances in AI tools that both accelerate the discovery of software vulnerabilities and enable vendors to meter AI usage, impacting platforms and services resold or managed by MSPs. Companies cited include N-able, Microsoft, ConnectWise, OpenAI, and Anthropic, whose evolving product practices and pricing models exemplify increased operational volatility for IT service providers.

According to episode analysis, N-able’s hosted N-central platform experienced an outage after public disclosure of over 30 alleged vulnerabilities—including flaws for credential theft and remote code execution—published by an independent security consultant. This marks the fifth emergency hotfix for N-central since August, with at least one prior fix addressing a flaw already under attack. On the pricing front, Microsoft again delayed the default rollout of usage-based billing for Microsoft 365 Copilot Business licenses, now anticipated between January and March 2027, while adoption of usage-based Copilot billing has already grown over 75% in a single quarter, according to Microsoft. 

Reinforcing the structural risks, OpenAI’s release of the GPT-6 Cyber model demonstrates AI's ability to uncover security flaws at scale, with internal testing exposing hundreds of previously unidentified vulnerabilities in platforms like Firefox and the Linux kernel. Vendors such as ConnectWise are actively developing token-based pricing structures for AI agents, shifting cost predictability as more elements of MSP bundles become usage-metered. The episode further notes that features like Copilot Chat now impose unpublished limits and require administrative oversight of self-service purchasing, complicating procurement governance.

For MSPs and IT leaders, the main operational implications are heightened contract risk, increased exposure to margin fluctuations, and the need for disciplined governance over both technical and financial defaults driven by vendors. Without proactively setting and documenting caps and usage agreements, MSPs risk absorbing unplanned cost spikes or security exposures. The episode advises listing and isolating metered components in service contracts, setting explicit spending limits, and scheduling regular pricing reviews to avoid surprises and reduce unmanaged financial and operational risk.

00:00 The Platform Went Dark, the Price Moved 

03:37 AI Finds the Flaws and Runs the Meter

06:17 Somebody Else’s Default

09:26 Why Do We Care?

Supported by: 

GoTo(LogMeIn) 
HaloPSA 

About Business of Tech: The daily MSP news and analysis podcast for managed service providers and IT services leaders. Host Dave Sobel covers AI for MSPs, MSP pricing and profitability, MSP M&A and private equity, vendor partner programs, MSP cybersecurity and liability, and MSP operations — and answers the question every story raises: Why do we care? Produced by MSP Radio.

💼 All Our Sponsors

MSP Radio is supported by our partners:

ABC Solutions · CometBackup · Firetail · Guardz ·