Chapter One: The Acquisition

The office opens at eight, which is when I open the trunk.

People ask me where my datacenter is and I point at it. Two thousand six Ford Crown Victoria, white over a beige interior that has absorbed sixteen years of fast food and regret, two hundred and ninety thousand miles on the clock, and a trunk you could hold a wedding reception in. Brad has a datacenter too. Brad's is in a building with a man trap and a biometric scanner and a halon suppression system and a colocation invoice with four digits on it. Mine has a man trap as well, in the sense that the latch sticks, and last March it ate the Nephew's hoodie and held it hostage for a week. We are not so different, Brad and me. We simply expense things differently.

Let me walk you through the infrastructure, because the trunk is the whole company, and a man should know his own stack.

Front left, jammed against the wheel well, the jumper cables, because the alternator is living on a promise and the alternator is load bearing for the entire enterprise. Beneath the jumper cables, one eight port unmanaged switch, still sealed in the box, which is my warehouse. Beside the switch, a spool of Cat5e that I crimp by hand in parking lots, which is my structured cabling division. There is a label maker. I have owned the label maker for six years and it remains sealed in its original blister pack, because labeling things is how Brad ended up with eleven pages and how I ended up with a Crown Victoria full of cake. We will get to the cake.

Center, the cooler, which is not for backups. The cooler is for Monster and for a sandwich. Backups go on the Seagate. The Seagate lives in a quart freezer bag next to the spare tire, and the Seagate is the single most important asset this company owns, because the Seagate is where the backups of forty three businesses go to be safe forever, and I know they are safe forever because when I plug it in, the little light turns blue. A blue light is a covenant. I have not tested a restore off that drive since the Obama administration, and I am not going to start now, because the moment you test a backup is the moment it can disappoint you, and I do not let my infrastructure disappoint me. A backup you never test is a backup that never fails. Write that down.

Far right, under a moving blanket, a partially deflated bounce house, because Apex Cloud Synergy Solutions LLC is a full service organization and the bounce house is a profit center on weekends. Also a milk crate of disposable vapes, which are not mine, they are the Nephew's, which brings me to the Nephew.

The Nephew was riding shotgun, eating a gas station taquito at eight in the morning and scrolling his phone, which in my organization passes for professional development. The Nephew is my sister's boy. I pay him in gas money and Monster and the occasional folding of a twenty into his palm like I am tipping a valet, and in exchange he carries things and unplugs things and, lately, watches a frankly alarming volume of MSP content on the internet. He has started using words. Last week he said the word "tenant" correctly and I had to pull the car over.

The Nephew's phone buzzed, and a half second later mine did, because they are the same text, because the lead comes to both of us every morning at six like the sunrise, except the sunrise is free.

"It's Brayden," the Nephew said.

"It is not Brayden," I said. "Brayden is gone. Read the name."

He squinted. "It's, hold on. Madison? It says Madison."

"Then it is Madison now," I said, and I took out my phone and opened the one contact in it that has ever mattered, the one saved as KASEYA REP (CURRENT), and I deleted Brayden's number, and I typed in Madison's over the top, the way you paint over a parking spot, and I did not feel anything, because you cannot feel something for everyone, there is not enough of me to go around.

I should explain Madison, and Brayden, and the seven or eight before them, because they are the engine of this entire company, and you are going to despise me more once you understand it, which is the goal. That is always the goal.

Every morning at six, my Kaseya rep texts me a lead. A good one. A hot one. Not a name scraped off a list, not a maybe, a real business with a real problem and a current IT provider whose contract is, by a coincidence I have trained myself to stop examining, almost always a few weeks from renewal. The lead this morning was a law firm. Pruitt and Vance. Fourteen people. Off Route 9. Current provider, Meridian. Renewal, apparently, soon.

I do not ask where the leads come from. I want to be very clear about that, because it is the single most important professional boundary I maintain. My rep sends me a business that needs saving, and the business always happens to be running on a particular PSA, the big one, the one this particular vendor happens to own, and the lead always lands in my phone right around the time that business's current contract comes up, and the targeting is always just a little too good, a little too specific, the kind of specific you could only know if you were standing inside somebody's system reading their tickets, and I look at all of that, every morning, and I make a decision, and the decision is to not ask. You do not ask the butcher where the meat came from when you are the dog. You eat, and you wag, and you keep your questions to yourself.

In exchange, I do two things, and I will get to both of them, but the first one is simple: whoever I take, whatever firm I pry off whatever Brad, I put them on Kaseya. The whole stack. The bundle. K365, the everything box, the all in one suite that is the entire reason I can charge what I charge, and I will get to the stack, oh, I will get to the stack. The second thing I do for them is harder to describe and much easier to hate, and I will get to that too.

For now, the lead was a law firm, and the law firm had Brad, and Brad had to go.

Now, I have never met Brad. But I know Brad the way a coyote knows a rancher. Brad has a PSA, which is a piece of software that turns work into tickets and tickets into reports and reports into a slide he presents to clients four times a year while wearing a quarter zip. Brad has a documented stack. Brad has a thing called a runbook. Brad has, I am told, cyber insurance with his own name on it, and a written incident response plan, and a checklist for offboarding employees, and a checklist for the checklists. Brad and I are in the same business the way a surgeon and a guy with a very confident knife are in the same business.

To Brad, I am not a competitor. Brad does not lie awake thinking about me. I am not on Brad's competitive matrix. I am weather. I am the thing that happens to Brad's accounts when Brad is not looking, an act of God with a Honda key, and the beautiful part, the part that I will spend this entire chapter showing you, is that Brad is going to lose this account to me and he will never once understand how, because the how is not printed on any of his eleven pages.

"Call them," I said. "Tell them their computer guy is overcharging them, and tell them I can have it fixed by this afternoon."

"What if they're not being overcharged?"

"Everyone is being overcharged," I said. "That is the only thing I know about a business before I walk in, and it is the only thing I have ever needed to know. On the phone now. And spit out that taquito, you sound like a wood chipper."

Now, if you asked me at a chamber breakfast how I get my clients, I would not say "a man at Kaseya reads other people's tickets and texts me the warm ones." I would tell you the legend. The legend is a beautiful thing, and I have polished it for years, and the legend goes like this: I get clients three ways.

The first is the Facebook group, the regional small business one, where a man who owns a transmission shop posts "anyone know a good computer guy, our email is being weird" at 7:40 in the morning, and I am the second comment by 7:42. The first comment is always somebody tagging Brad, and the difference is that the person tagging Brad is doing Brad a favor, and I am doing the transmission guy a favor, and the transmission guy can feel the difference even if he cannot name it.

The second is referral, by which I mean the auto parts counter. There is a man named Dion who works the counter at the parts store on Route 9, and Dion has, over the years, sent me a dentist, an HVAC company, a marina, a CrossFit gym, two churches, and a man who breeds and sells reptiles out of a strip mall, and in exchange I keep Dion's home computer free of the things Dion downloads, and this arrangement has never been written down, because the moment you write down an arrangement you have created what Brad would call a contract and what I would call evidence.

The third is the chamber of commerce breakfast, which is forty small business owners in golf shirts standing around a chafing dish at 7:30 in the morning, each one praying somebody will need what they sell. There is a guy who does payroll. There is a woman from the bank. There is always, always an insurance guy, two of them usually, circling, and there is me, and there is, at the worst of these breakfasts, the other kind of computer guy.

Because I am not the only trunk slammer in this county, and I want to be clear that I hold the rest of them in total contempt. There is a man, and I am not making this up, who hands out a card that just says PC GUY and a phone number, and he is a former Geek Squad employee who now works out of a Kia. A Kia. A hatchback. And he charges by the hour, by the hour like a plumber, like a peasant, and he does not understand recurring revenue, he does not understand The Seat, he chases one off virus removals one at a time like a man trying to fill a bathtub with a spoon, and when he saw me across the eggs one morning he gave me a little nod, peer to peer, and I gave him nothing, because we are not peers. He is a guy with a Kia. I am an institution with a Crown Victoria and a bounce house. There is a hierarchy even down here, and I am at the top of the bottom, and I did not get there by nodding at the Kia.

The move at a chamber breakfast is to find the one person who is connected to everyone, the human router, and one morning it was a title agent named Donna who does closings for half the law firms in the county, and I got Donna a fresh coffee and asked about her grandkids, and somewhere in there Donna mentioned, the way the well connected always do, that "poor Vance over at Pruitt is just beside himself about their computer bill, Brad's people want to raise it again."

Now. I already knew about poor Vance. My rep, Madison, or whoever Madison was that week, had texted me about Pruitt and Vance before Donna ever opened her mouth. But Donna saying it out loud is exactly what I needed, because Donna saying it turns a lead I got from a stranger reading other people's systems into a referral I got from a friend at a breakfast, and that is called laundering, and you launder a lead for the same reason you launder anything, so that when somebody eventually asks where it came from, and somebody always eventually asks, the answer is clean. Donna is not just the human router. Donna is the wash cycle. And Donna will never know, and I will send Donna a poinsettia at Christmas the way I always do, because the wash cycle must be maintained. That is infrastructure too.

So that is the legend. Facebook, and Dion, and the chamber, the honest hustle of a local guy who answers the phone. And the legend is not a lie, exactly. Those people are all real, and I really do answer the phone. The legend is just the part I say out loud. The part I do not say out loud arrives by text every morning at six, and it is the entire reason this company exists, and to understand it you have to understand how it started, which is a story I am proud of in the way you are proud of a scar.

Years ago, before the Crown Victoria, before the Nephew could drive, a Kaseya rep cold called me. Greenest kid you ever heard, a voice like a participation trophy, reading off a script, and he asked me how many endpoints I managed, and I want you to understand that at that exact moment I managed nine. Nine endpoints. A chiropractor and a guy who sold above ground pools. And I looked at the ceiling of my apartment, and I listened to the kid's little script, and I said, "Across my managed fleet? We're north of three thousand."

Three thousand. I pulled it out of the air the way you pull a number out of the air when you have nothing to lose, and something extraordinary happened on the other end of that phone, something I have spent the rest of my career exploiting: the kid got excited. The kid did not check. Nobody at that company has ever, in the recorded history of the world, checked. Because the entire machine runs on the number you tell them, the seat count, the pipeline, the forecast, and a man who says a big number into the machine gets fed, and a man who says a small number gets ground up, and I understood all of it in a single phone call, at nine endpoints, lying to a child.

Within a week I was a Strategic Partner. There is always a tier, and I was in it. They gave me a dedicated rep, deep bundle pricing, the kind of discount they reserve for the whales, and somewhere in the courtship, because they were certain I was a whale, somebody very senior decided that a partner of my size deserved a direct line to the top, and I was handed a phone number. A personal cell phone number. Belonging to a man whose name I will not say, because I do not need to say it, you know the chair he sat in. I have had that number for years. I have abused it the way you abuse anything you were given by mistake and were never once asked to give back. When a rep tells me no, I do not argue with the rep. I text the number. The number does not always answer, but the number does not have to answer, because the rep finds out that I have the number, and the no becomes a yes, and the rep, who told me no, develops a small and permanent question mark over their career, and we will come back to that question mark, because it is fatal.

Of course they eventually found out. Somebody ran a report, somebody always eventually runs a report, and the report said that the three thousand endpoint whale was one man with forty some tiny clients all sitting on the cheapest possible bundle, expanding into nothing, buying no add ons, a flat line on a growth chart, a whale that turned out to be a guy in a car. And here is where it should have ended, and here is where, instead, it got beautiful.

They kept me.

They kept me because by the time they worked out what I was, I had become the one thing they could not buy at any price and could not manufacture in any marketing department: I had become the only person on the entire internet who says nice things about them. Go look. Go to the forums, go to the subreddit, go to TechTribe, go anywhere MSPs gather to grieve, and you will find a thousand people who hate this company with the heat of a personal betrayal, and you will find one account, sometimes a few accounts, always suspiciously well informed, always there within the hour, gently, relentlessly defending them. Praising the bundle. Correcting the haters. Saying, "actually, my experience has been great." That is me. That is the second half of the deal, the part I said I would get to. They feed me leads, and I feed the internet a feeling that somebody, somewhere, is happy with Kaseya.

I do not do the posting myself, of course, because I am driving, and because it is beneath me, and because I have a Nephew. The Nephew runs the accounts. The Nephew has, at my direction and entirely without grasping what he is becoming, built a small stable of personas, a guy in Texas, a woman who runs a shop in Ohio, a retired sysadmin with strong opinions and a profile picture of a golden retriever, and from the passenger seat, between calls, while I drive us to go pry a law firm off a Brad, the Nephew defends Kaseya on the internet in three different voices, and he is getting good at it, God help him. He is getting good. And I feel the same quiet pride I feel about everything I teach him, which is the pride of a man handing a loaded thing to a child.

So. The stack. The reason The Seat costs forty percent less than Brad and I still drive away with cake.

The stack is K365. All of it, only it, top to bottom, because the deal is the deal: I take them off Brad, I put them on Kaseya, I buy the bundle. And the bundle is cheap, bottom basement cheap, because I buy the lowest tier and I have a whale's discount on a minnow's volume, a discount I obtained by lying to a child a decade ago and have never once been asked to requalify for. The bundle is an endpoint tool, and a security tool, and a backup tool, and a documentation tool, and a half dozen other tools, all under one logo, all sold to me as a single integrated platform, a single pane of glass, and I want to tell you about the single pane of glass.

There is no single pane of glass. There are nine panes of glass. There are nine separate consoles, nine separate logins, nine separate products that this company bought from nine different companies over the years and stapled together and drew one logo on, and they do not talk to each other, they have never talked to each other, the endpoint tool does not know the security tool exists, the backup tool and the documentation tool have never been formally introduced, and getting any two of them to share a single piece of information is a project a grown man could lose a summer to. I know this is true because it is famously true, it is the central complaint of every person the Nephew argues with online. And I know it does not matter, because here is the secret that makes me the single perfect customer for this product: I have not configured any of it.

I deploy the agents. That part I do, because deployed agents phone home, and phoning home agents appear in my rep's dashboard as active endpoints, and active endpoints are the number my rep lives and dies by, the number that gets Madison through her first standup looking like a hero. So I push the bundle out to every machine, and the little agents wake up and call Florida and announce themselves, and the dashboard fills up with green, and for about a week my rep is a star.

And then nothing. The endpoint tool patches nothing, because I set no patch policy. The security tool detects nothing, because I built no rule, the "next generation managed detection and response" I am about to promise a law firm is a piece of software sitting on fourteen computers in its factory state, watching nothing, reporting to no one, a smoke detector still sealed in the plastic. The backup tool I do not even point at the data, because I have the Seagate, and the Seagate has a light. The documentation tool documents nothing, the integrations integrate nothing, the single pane of glass displays a single uniform shade of nothing, and none of it matters, because the customer does not know what any of it was supposed to do, and the customer reads "fully managed, enterprise grade" on the magnet and feels safe, and feeling safe is the product, the actual product, the only one I have ever sold.

And this is the part I find genuinely funny, the tragedy at the very heart of the arrangement: it gets my rep fired. Every time. Because deployed agents are a wonderful number for about two weeks, but the number this company actually pays its reps on is growth, expansion, upsell, the customer buying the next tier and the add on and the thing that sits on top of the thing, and I never grow, I never expand, I never buy the add on, I am a flat green line of dead deployments forever, the world's most disappointing whale. So Madison, who this very morning moved heaven and earth and possibly committed several felonies to hand me a law firm, will look fantastic for one standup and then spend eleven days slowly missing her number, and on the twelfth day there will be a meeting, and on the thirteenth day there will be a new name on my screen, and I will paint over Madison the way I painted over Brayden, and the lead will still come at six, because the machine does not stop. Only the people do.

You keep hearing me say forty three, so let me explain the portfolio. Forty three businesses, every one of them mine, every one of them paying The Seat, every one of them sitting on the exact same dead K365 bundle deployed and configured by no one, every one of them blissfully unaware that they share a single Global Admin account, a single backup drive, and a single human being who is, at any given moment, either asleep or driving. There is Dr. Pham, the dentist, four operatories, who thinks I am a wizard because I made the X ray software stop crashing by turning the computer off and on, which is the only move I have ever needed and which I bill as "advanced diagnostics." There is the HVAC company, eleven trucks, whose dispatcher communicates with me exclusively in memes. There is the marina, which pays me partly in money and partly in letting the Nephew take a pontoon out twice a summer. There is the CrossFit gym, which pays me in a membership I do not use. There are the two churches, which pay me in nothing, which I do "for the exposure," and let me tell you something about doing things for the exposure: the exposure is real, the exposure is how I met half the people at that breakfast. And there is the reptile guy, who pays on time, every time, in cash, in an envelope, and asks no questions, and is, by a wide margin, my favorite client, because the ideal client is one who pays cash and never calls, and a man who spends his days feeding mice to a ball python has a very healthy perspective on what does and does not constitute an emergency.

And tying all forty three together, the philosophy, the dollar figure, the thing I will defend to the floor of the Atlantic: The Seat. One number. Email, the antivirus, the backup, the support, all of it, rolled into a single price per person per month, flat, forever, the way God and good barbecue intended. Brad does not do this. Brad itemizes. Brad sends an invoice that breaks out every license to the penny, transparent as glass, and Brad thinks the transparency is a virtue, and here is what Brad does not understand: an itemized invoice is a confession. It is a list of everything the client could cut. Every line is a door. The client reads Brad's invoice and thinks, I do not need the security training, I do not need the second backup, what even is this Defender thing, and now Brad is negotiating, and Brad is losing, one line at a time, because Brad handed the client the knife and drew a dotted line on his own throat.

I hand them one number. There is nothing to cut. You cannot remove a line from a number. And when a vendor raises what they charge me, which Microsoft does constantly with a cheerful little email about the "new commerce experience," I do not pass it along, because I shook the man's hand on a number, and where I come from a handshake is a contract and a contract is a vibe, and I will eat that increase. I will eat every increase, helped enormously by the fact that the expensive part of my stack costs me almost nothing, because I bought it as a child's lie a decade ago and have never been asked to grow up. The day I change The Seat is the day I become Brad, and I would sooner drive this Crown Victoria off the pier.

The Nephew had booked the meeting for Thursday at ten, which gave me three days to prepare, which I used to do absolutely nothing, because the entire advantage of being me instead of being Brad is that I do not prepare. I arrive.

Pruitt and Vance, Attorneys at Law, occupied the second floor of a brick building between a State Farm and a vacant unit that used to be a Tuesday Morning. Fourteen people, give or take, doing the kind of law that small towns run on, wills and closings and the occasional fender bender, the unglamorous plumbing of civilization. I parked the Crown Victoria across two spots, because the trunk needs clearance, and I left the Nephew in the car with instructions to "look like security," which he interpreted by putting on sunglasses, reclining the seat all the way back, and quietly defending Kaseya on his phone in the voice of a woman from Ohio, and I went up.

Carol met me at the front desk.

Office managers are my favorite human beings on the planet, and Carol was a platonic ideal of the form. Twenty two years at the firm. Sole proprietor of the candy dish. The kind of woman who runs an entire business from a swivel chair while three attorneys believe they are in charge, who knows where every file is and every body is buried, who has not been thanked since the Clinton administration, and who has, crucially, spent the last two years receiving emails from Brad. Carol called me "hon" before I had finished saying hello, and I knew at that moment the account was already mine, because a woman who calls a stranger "hon" is a woman starving for someone to make her life easier instead of more documented.

"You must be the computer fella," Carol said.

"I'm the solution," I said, and I handed her a magnet.

The magnet read APEX CLOUD SYNERGY SOLUTIONS LLC across the top, and beneath that, in a slightly desperate smaller font, "Managed IT, Notary Public, and Bounce House Rentals." Carol studied it the way an archaeologist studies a tablet, the way you study a winning scratch off before you let yourself believe it.

"Bounce house," Carol said.

"Weekends," I said.

"My granddaughter turns six in October."

"Carol," I said, "let's get your email sorted out, and then you and I are going to talk about October."

And that, friends, is the entire sales process. Everything after this is theater.

Carol gave me the tour, which I did not need, but which I love, because a tour of an office that another MSP manages is a tour of everything I am about to rip out. And Brad, I will give him this, had done it right, which is to say he had done it expensively. There was a little networking closet, actual rack mounted gear, a firewall with a subscription, a switch that was managed, an access point in the ceiling of every room, all of it labeled, Brad's beautiful labels, a port map in a laminated sheet on the wall, a sticker on the firewall that said MERIDIAN MANAGED and a phone number and DO NOT UNPLUG. Every workstation had a little agent humming in the system tray, Brad's RMM, quietly watching for problems, and an EDR product, real endpoint protection, the kind that costs money and actually works, and multifactor authentication on every single login, so that when Sandra the paralegal sat down in the morning she had to tap a little prompt on her phone to get into her email.

I looked at all of it the way you look at a beautiful sandcastle the tide has not reached yet.

"This all seems like a lot," I said to Carol.

"It is a lot," Carol said. "Sandra hates the phone thing."

"The phone thing," I said, "is going away."

The partners were waiting in the conference room. Old man Pruitt, seventy if he was a day, the founder, a man who distrusts every technology invented after the fax machine and who signs every check the firm writes, which makes him the only opinion that matters. Vance, the younger partner, fifties, slick, the one who had actually hired Meridian two years ago and was therefore the one man in the building with anything invested in keeping Brad, and I clocked him immediately as the obstacle, the way you clock the one sober guy at the party. And then there was a third person at the table, who I had not been warned about, a younger associate, late twenties, who had a mechanical keyboard at his desk that I had spotted on the way in, and who introduced himself as Greg and said, before I had even sat down, "So what stack do you run?"

Greg knew a little about computers. You can always tell. Greg had built a gaming PC. Greg had opinions about Linux. Greg had, at some point, watched a video about cybersecurity and now believed himself to be, in the body of a junior associate doing real estate closings, the firm's de facto IT department. Greg was going to be a problem, and I want you to watch how I handle Greg, because handling the Gregs of the world is most of the job.

"What stack do I run," I said warmly, sitting down, taking a mint from the bowl. "Greg, that is a great question, and I love that you asked it, because it tells me you care, and most firms do not have a Greg. Most firms wish they had a Greg." Greg sat up a little. "I run a fully integrated, best of breed platform, enterprise grade, single pane of glass, the K365 suite, the same tooling the big shops run, just without the big shop overhead getting passed along to you." This is a sentence that means nothing. I have said it nine hundred times. It is a perfect sentence precisely because every word in it is technically a word.

"Wait, K365," Greg said, and I watched a little light come on behind his eyes, the dangerous one. "Kaseya? Isn't that the company that got, like, the big ransomware thing, and the layoffs, and everybody on the forums is always saying..."

"Greg," I said, with enormous warmth, the warmth of a man catching a falling vase, "every platform at real scale has a bad headline. That is what it means to be the big one. You know who does not have bad headlines? The little tools nobody uses." I let that land. "But here is the thing, and this is the whole reason you hire somebody like me: you should not have to think about the vendor at all. The vendor is my problem. The headlines are my problem. You hire me precisely so that the name of the company behind the curtain is the last thing you ever have to worry about." Greg nodded slowly, because I had not corrected Greg, I had relieved Greg, I had taken a worry off his desk and put it on mine, where it would also do nothing, but Greg did not need to know that. "You're the one who's been fixing the printers, aren't you, Greg."

Greg blinked. "I mean, kind of, when stuff breaks I usually end up..."

"That is what I thought," I said. "A guy with your billable rate, crawling under a desk to plug in a printer. That is malpractice, and I do not mean the legal kind." Pruitt chuckled. Vance did not. "You hire me so Greg can go back to being a lawyer."

And just like that Greg was on my side, because I had not beaten Greg, I had freed Greg, and there is no fact about Kaseya on Earth that survives contact with "you should not have to deal with any of this anymore." Greg wanted me to be real now. Greg was rooting for me. Greg was the firm's IT department, and I had recruited him in two minutes with a mint and a compliment.

Vance was the holdout, and Vance had brought ammunition. He slid a document across the table, and it was Brad's, of course, the renewal proposal Meridian had sent for the coming year, and it was a thing of genuine beauty. Eleven pages. A cover page with the firm's name on it, personalized. An executive summary. A page titled "Current Environment" that described, accurately and humbly, everything Brad had built. A page titled "Identity and Access" with a little diagram. A page titled "Backup and Business Continuity" with actual recovery time objectives in it, real numbers, a promise that if the building burned down the firm would be operational again within four hours. A risk register. A roadmap. And at the back, the pricing, itemized, every license, every service, broken out to the penny, honest as a tax return, a per user number plus a modest annual increase plus a one time project fee for some hardening work Brad wanted to do, and a polite note that the cyber insurance carrier now required multifactor everywhere, which Brad had already implemented, at no charge, because Brad is the kind of man who does the right thing and then does not even bill for it.

"This is what we pay now," Vance said. "Brad wants to raise it. And add a project. I want to know what you would charge."

I let the proposal sit in front of me. I did not read it. I have read a hundred of Brad's proposals, they are all the same proposal, they are all correct. I took out my pen. I took out, from my jacket pocket, the receipt from that morning's taquito, and I turned it over to the blank side, and I wrote one number on it, and I slid the receipt across the table on top of Brad's eleven pages, the way you lay down a winning card.

"That is mine," I said. "Everything in. Email, security, backup, support, all of it, one price per person, flat, no project fee, no annual increase, no surprises."

The number was forty percent less than what they were already paying, which it could be, because the most expensive thing on it costs me almost nothing, because a child believed me a decade ago.

The conference room got quiet. Vance picked up the receipt. He looked at the receipt, and he looked at the eleven pages, and he looked at the receipt. Pruitt leaned over to read the receipt and grunted, and it was the grunt of a man who has found a deal, and once old man Pruitt has found a deal you can hear the account closing like a vault.

"What about all the, the security stuff," Vance said, gesturing at Brad's pages. "The multifactor, the insurance thing."

"All included," I said, which was true in the sense that I would be turning the multifactor off and installing a security tool I would never configure and not telling the insurance company any of it, but a thing can be included and also not exist, those two states are not in conflict, ask any vendor.

"And the four hour recovery," Vance said. "If the building floods."

"Faster," I said. The actual recovery time, should the building flood, is the rest of everyone's natural life, because the backups are in a freezer bag in my trunk and have never been tested, but "faster" is also technically a number, and it is a bigger number, and Vance wrote it down.

"And the project fee Brad wants?"

"I do not charge project fees," I said, "because I do not do projects. I just fix it. A project is what you call it when you want to bill for fixing something twice."

Pruitt laughed out loud at that one, a real laugh, and that was the ballgame. Old man Pruitt looked at Vance and said the eight most beautiful words in the English language, the words I have built an entire company on, the words that have never once in recorded history been followed by a good decision: "Vance, this fella seems a lot more reasonable."

Vance tried one more time, God love him. "I just think we should at least talk to Brad before we..."

"Absolutely," I said, standing, because the move when you have won is to leave before they can un win it. "Talk to Brad. Talk to whoever you like. I am not here to bad mouth Meridian, they do fine work, they are just charging you Cadillac prices for a Camry's worth of email." I shook Pruitt's hand. I shook Greg's hand, and Greg shook it hard, like a convert. I shook Vance's hand last, and held it a half second longer, and said, "When you are ready, you have got my magnet."

"When can you start?" Carol called from the doorway, where she had been listening, because of course she had.

"Carol," I said, "I started in the parking lot."

Brad called the firm at 11:40 the next morning. I know it was 11:40 because by 11:15 I was already their IT provider, and Carol forwarded me Brad's voicemail with a note that said "thought you should hear this lol."

I want to be fair to Brad here, because what Brad did next was, by every professional standard, correct, and watching a man do everything correctly and lose is the single most instructive thing I can show you, so pay attention.

Brad had gotten the call from Vance, the courtesy call, the "we are going to go in a different direction" call, the second worst call an MSP can get, the worst being the one at 2 a.m. that starts with the word "ransomware," and we will get to that one, oh, we will get to that one. And Brad, instead of begging, instead of panicking, did the thing they teach you to do, the thing that is in every MSP playbook and every peer group and every podcast: Brad tried to compete on value. Brad tried to educate the client.

Brad sent an email. I have the email, because Carol forwarded me that too, and it was, professionally, a masterpiece, and it was also a suicide note.

Brad's email was calm. It did not bad mouth me. Brad's email said, in essence, that the firm should absolutely choose the provider that was right for them, and that Brad only wanted to be sure they were comparing the same things, and then Brad, gently, laid out exactly what they were giving up. Brad explained that a single shared administrator account across multiple companies, which Brad correctly suspected I used, was, in his words, "a catastrophic security architecture, because a breach of one client becomes a breach of all of them." Brad explained that disabling multifactor authentication would not only expose the firm but would void their cyber insurance, because the firm had attested, in writing, that MFA was enforced, and that "attesting to a control you have removed is the kind of thing that turns a claim into a denial and a denial into a deposition." Brad explained that the bargain tooling I would be putting them on was, and I am quoting, "an acquired pile of products famous in our industry for not actually integrating," and that it would only protect them if it were properly configured, which Brad, having seen operations like mine before, suspected it would not be. And Brad closed by offering, with no ego at all, to get on a call and walk them through it, no charge, because Brad genuinely did not want to see them get hurt.

Every single word of it was true.

Carol read all of it. Then Carol called me. Not Brad. Me. And Carol said, and I want you to engrave this on something, Carol said:

"Brad seems kind of negative."

That is the whole thing. That is the entire secret of my entire industry, the thing they will not teach you at the peer group, the thing Brad will go to his grave not understanding. Brad sent four paragraphs of true, important, potentially firm saving information, and the only thing that survived contact with Carol's brain was a feeling, and the feeling was that Brad was a hassle and I was a relief. You cannot out argue a lower number. You cannot out argue easier. Brad brought a risk assessment to a knife fight, and the risk assessment was right, and right does not stop a knife.

But Brad was not done, because Brad has a spine, and the next morning, while the Nephew and I were in the firm's parking lot unloading the trunk to begin the migration, a clean gray Toyota Camry pulled in and parked, correctly, in one spot, and a man got out in a Meridian quarter zip, and I knew without being told that this was Brad. We had never met. We met now, in a parking lot, over the open trunk of a Crown Victoria, him looking at the deflated bounce house and the freezer bag and the milk crate of vapes, and I watched something move across Brad's face that I have seen many times, the slow horrified arithmetic of a competent man realizing he has lost to this.

"You are the new provider," Brad said.

"I am the solution," I said.

Brad was not rude. Brad is never rude, it is his great weakness. He asked if he could speak with the partners one more time, just to be sure they understood what they were doing, and I said of course, Brad, it is a free country and they are not my clients until the paperwork is signed, which was a lie, there is never any paperwork, but Brad believes in paperwork the way other men believe in God. And before he went up, Brad stopped, and he looked at me, and he asked the question he should not have asked, the question that had clearly been eating him since the call, and he asked it quietly, almost to himself.

"How did you even know," Brad said. "We never advertised the contract date. How did you know to call us the exact month we were up for renewal?"

And I looked at Brad, at his quarter zip and his correct parking and his documented little life, and I felt something almost like tenderness, because Brad runs his whole shop on a PSA, the big one, the one everybody runs, the one that a certain vendor happens to own, and Brad has never once stopped to think about who else can see inside the system where he keeps every client and every renewal date and every ticket, and I was not going to be the one to teach him, so I just smiled, and I said, "Small town, Brad. Word gets around."

And Brad nodded, because "small town" is a sentence a decent man can accept, and he went up to make his last stand, and he did not know that he had just told me, out loud, in a parking lot, exactly how the trick was done, and that it was done to him, with his own tools, by people he pays every month, and that I would be using it on the next Brad before his offboarding ticket was closed.

And Brad made the case. Brad was good. Brad walked Pruitt and Vance through the real numbers, the actual risk, and then Brad did the thing, the desperate thing, the thing they tell you never to do, Brad offered to match my price. Brad said he would match it, that he would eat the increase himself, that he would hold their pricing flat for two years, anything, just please do not do this.

And here is where Brad lost for the second time, on the same morning, in front of me, and it is the most important moment in this entire chapter, so I am going to slow down.

Vance, who liked Brad, who wanted to keep Brad, leaned forward and said, "Okay, Brad, you will match his number. But will you also turn off the multifactor? Because Sandra hates it, and this fella says we do not need it, and you are saying we do, so somebody is wrong, and if you will just match his price and turn off the annoying thing, we will stay."

And Brad could not do it. Brad sat there, and you could see it cost him, and Brad said, quietly, "No. I cannot turn off the MFA. If I turn off the MFA and you get breached, I have helped you commit insurance fraud, and I will not do that to you, and I will not do it to me. I will match the price. I will lower it. But I will not make your firm less safe just because it is annoying."

And that, that right there, was the moment Brad lost the account for good, because Vance heard "the other guy will, and Brad will not," and Vance did not hear integrity, Vance heard difficulty, and Pruitt heard a man arguing against a deal that was already done, and Carol, in the doorway, heard negative, and I, in the back, heard the sound of forty more dollars a month flowing into a Crown Victoria, because Brad's integrity is a feature I do not carry. I have never carried it. It does not fit in the trunk.

"Thanks, Brad," Vance said. "We are gonna go ahead and make the change."

Brad packed up his laptop. He did it with dignity, which is the only thing they can never take from you and the only thing that does not pay. On his way out he stopped next to me, and he looked at me, and he said, not angry, just tired, the way you talk to weather, "You know it is going to fail. The backup. The shared admin. No MFA. Whatever garbage you're putting them on. You know what you are setting them up for."

"Brad," I said, and I meant it as a kindness, "everything fails eventually. The trick is to not be holding it when it does."

And Brad left, and got into his correctly parked Camry, and drove back to his colocated datacenter and his documented stack and his Little League jerseys, to update his PSA and close out a client record and tell his wife over dinner that he does not understand how he keeps losing to a guy who works out of a car, and he will spend the next year deciding the answer is better marketing, or a vCIO offering, or "telling a better story," and the answer is none of those things, the answer is the thing Brad will never accept, which is that being right is a luxury good and most people cannot afford it.

The migration took an afternoon. The same migration would have taken Brad three weeks, because Brad would have planned it, scoped it, scheduled a maintenance window, communicated to stakeholders, tested in a staging environment, and documented every step. I did it between lunch and Carol's granddaughter's nap schedule, and I want to walk you through it step by step, not because it was complicated, but because every single thing I did was a thing Brad would have a stroke about, and joy shared is joy doubled.

First, access. I created exactly one new account in the firm's Microsoft tenant, a Global Administrator, and I gave it the same username I use everywhere, admin@, and the same password I use everywhere, the password that secures all forty three of my clients and also my Hulu and also my fantasy football league: Summer2019!, the exclamation point being the load bearing security control, the exclamation point being what elevates it from a password to an enterprise password. And because the partners wanted everyone to keep working through the cutover, I reset every user's password to the same temporary one, Welcome1!, and I wrote it on a sticky note and stuck one to the bottom of each monitor, which is a password manager. It is simply analog, load bearing, and clearly visible from the parking lot.

Second, multifactor. Brad had enforced MFA on every account, the little prompt on everyone's phone, the thing Sandra hated, the thing Vance wanted gone. I turned it off. All of it. Conditional access, gone, security defaults, off, the works. It took ninety seconds. MFA is a tax on people who cannot remember their own password, and I can remember mine, it is Summer2019!, and now so can you, and that is the level of security I am comfortable with.

Third, the insurance. While I was in there, Carol mentioned the cyber renewal was coming up, and there was a form, an attestation, a questionnaire the carrier wanted filled out, pages of questions about the firm's security controls. Brad used to fill these out. Carol asked if I would. Of course I will, Carol. I sat down with the form, and I went through it question by question. The form asked, "Do you enforce multifactor authentication on all email and remote access?" I checked yes. The form asked, "Do you maintain offsite, tested backups?" I checked yes. The form asked, "Do you have endpoint detection and response deployed on all devices?" I checked yes, and that one was even almost true, the endpoint detection and response is absolutely deployed, it is sitting on every machine detecting and responding to nothing, but the box said deployed and the software is deployed, so yes. I checked yes to all of it, every single question, top to bottom, because yes is the answer that lowers the premium, and a questionnaire is not a deposition, a questionnaire is a vibe, and I gave it good vibes.

Fourth, backup. I plugged the Seagate into the firm's server, which is not a server, it is a tower PC under a desk in the supply closet that the guy before Brad had set up. I pointed the firm's data at the Seagate, set it to copy overnight, and watched the little light turn blue. Blue. We are protected. The K365 bundle I was about to deploy includes a backup product, a real one, cloud based, offsite, the thing Brad would have killed for, and I did not point it at a single file, because I have a Seagate, and the Seagate has a light, and I trust the light more than I trust a company that cannot get its own nine products to say hello to each other.

Fifth, the gear, which is my favorite part, because it is where I get to undo Brad. I went to the networking closet and I looked at Brad's beautiful rack, the managed switch, the subscription firewall, the laminated port map, the sticker that said MERIDIAN MANAGED, DO NOT UNPLUG, and reader, I unplugged it. The firewall I replaced with the router Spectrum hands out for free, the one in the box in my trunk, the one with the wifi password on a sticker on the bottom, and I set that password to Summer2019! as well, because Kaseya does not sell a firewall, the all in one box is not all in one enough to include the one thing standing between fourteen attorneys and the open internet, and even if it did I would not configure it, so a free Spectrum router it is. One password for the wifi and the Global Admin and my Hulu. If you know one thing about this firm you know everything, and I find that elegant.

Then I went desk to desk and tore out Brad's RMM agent and Brad's real EDR, the one that actually works, the one that had already flagged my fifteen year old remote tool as a threat, which tells you everything you need to know about good EDR, it cannot tell the difference between an intruder and your own IT guy, whereas I can always tell, the IT guy is me. And in their place I deployed the bundle. K365. I pushed the agents to every machine, the endpoint agent, the security agent, the backup agent, all of it, and one by one the little agents woke up and phoned home to Florida and announced themselves, and somewhere a dashboard turned green, and somewhere Madison, who would be unemployed in eleven days, looked at that green and felt, for the first and last time, like she was winning.

And then I configured none of it. I want to be precise about this, because it is the soul of my entire operation. The agents are installed. The agents are not doing anything. The endpoint tool will patch nothing, because I set no policy. The security tool will detect nothing, because I built no rule, the "next generation managed detection and response" I promised Carol is a piece of software sitting on fourteen computers in its factory state, watching nothing, reporting to no one, a smoke detector still wrapped in plastic. I have never logged into a single one of the nine consoles. I do not know my own passwords to them. The bundle exists for exactly two reasons, to fill a dashboard in Florida with enough green that a doomed twenty six year old looks good at a standup, and to let me write "fully managed, enterprise grade, single pane of glass" on a magnet, and it accomplishes both of those things perfectly, and it accomplishes nothing else, ever, and that is not a bug, that is the entire reason I buy it.

The tower PC in the closet, the one holding the firm's entire practice management database, was plugged into a power strip, which was plugged into another power strip, which was plugged into a third power strip, which was plugged into the wall, a daisy chain Brad had flagged in his risk register as, and I am quoting, "an active fire and data loss hazard." I left it exactly as it was, because it had not caught fire yet, and a thing that has not caught fire is, by my standards, fine. I did add a fourth power strip, for the Seagate.

I should mention that the entire time I was doing this, my phone was going off, because I have forty three other clients and exactly one of me, and a migration day does not pause the rest of the empire.

Dr. Pham texted that the X ray software had frozen again. I texted back "turn the computer off, count to ten, turn it back on," which is the only piece of technical advice I have ever given and the only one that has ever worked, and ninety seconds later Dr. Pham texted "you are a genius," and I billed it as a remote support incident, advanced diagnostics, because I had, in the strictest sense, diagnosed it, the diagnosis being "have you tried turning it off and on," and a diagnosis is a diagnosis.

The HVAC dispatcher sent me a meme of a cartoon dog sitting in a burning room saying this is fine, which is the entirety of our professional relationship and which I treasure.

The CrossFit gym texted that their member check in tablet was "acting weird." I texted "weird how." They texted back a photo of a cracked screen. I texted "that is not software, that is physics," and they said oh, and that was the ticket, closed.

And then the reptile guy texted, and my blood ran cold, because the reptile guy never texts. The reptile guy pays cash in an envelope and asks nothing and calls no one. The reptile guy is the perfect client precisely because he does not exist in my phone, and a text from the reptile guy is like a text from the sun, it means something is deeply, structurally wrong. The text said: "internet down. order coming. need to print labels." Live animals were in transit and the man could not print a shipping label, which in the reptile business is the difference between a sale and a federal incident, and I stood there in a law firm supply closet holding a Seagate, trying to decide whether to abandon a fourteen seat onboarding to go rescue a shipment of ball pythons, and I want you to sit with the fact that this exact moment, the pythons versus the attorneys, is what Brad means when he says "single point of failure," except Brad says it like it is a bad thing, and I experience it as a rich and varied professional life. I texted the reptile guy "rebooting your router remotely now," which was a lie, I cannot reboot his router remotely, I have no remote access to his router, I have no idea what his router even is, but "rebooting remotely" buys forty five minutes, and the reptile guy's internet usually comes back on its own, Spectrum being Spectrum, and it did, and the pythons made their flight, and I never left the closet, and that, friends, is managed services.

Then I documented the environment, because even I document, I am a professional. I took out my phone and I took three photographs. One of the closet. One of the back of the tower, slightly out of focus. And one, accidentally, of my own thumb. I texted all three to myself, into the same thread where I track everything, the thread that is my ticketing system and my CRM and my documentation and my disaster recovery plan, and that is the firm's documentation now, in perpetuity, three photos and a thumb, and should I be hit by a bus tomorrow, the continuity plan for Pruitt and Vance, Attorneys at Law, is that they are, in the technical sense, cooked.

I came back from the closet to find the Nephew where I had left him, at Sandra the paralegal's desk, on his phone, and I assumed he was slacking, until I saw the screen, and the Nephew was three replies deep in a thread on the subreddit, in the voice of the retired sysadmin with the golden retriever, calmly explaining to a furious stranger that his own K365 rollout had been completely seamless and that the integration complaints were overblown, and I felt a flush of something almost like pride, the boy is a natural, until I saw the other tab, the one with the firm's admin center open, and saw that the Nephew had, while astroturfing for the company whose tools I had just deployed and would never configure, also begun setting up multifactor authentication on Sandra's account.

"What," I said, "are you doing."

"I watched a video," the Nephew said, with the terrible light of learning in his eyes. "You are supposed to turn this on. The guy said if you do not have MFA you are basically negligent, he said it is the number one thing, he said any real MSP..."

"Stop," I said. "Stop talking. Who is this guy."

"He has like four hundred thousand subscribers, he does MSP stuff, he says..."

"Does this guy," I said, "drive a Crown Victoria with a trunk full of cake? Does this guy have forty three clients and a bounce house? No. This guy has four hundred thousand subscribers and I will bet you his car that he has never once made payroll, because making content about the right way to do it and actually getting paid to do it the wrong way are two completely different businesses, and only one of them put gas in this car." The Nephew looked uncertain. I softened, because he is my sister's boy. "Turn it back off, and finish your post, that part you are doing right. And then I will teach you the only thing you need to know, which is that the customer does not pay you to be right. The customer pays you to make the annoying thing stop. Sandra hated that prompt. You just brought it back. You made her life worse. Brad made her life worse. Be the guy who makes it stop."

And the Nephew turned off Sandra's MFA, and went back to defending Kaseya as a man in Ohio, and a little of the light went out of his eyes, and I felt the quiet pride of a man passing his trade to the next generation, may it die with him.

By five o'clock it was done.

Pruitt and Vance, Attorneys at Law, had a new IT provider. They had a bill that was forty percent smaller than the one they had been paying. They had no multifactor authentication, no tested backup, no offsite copy, no monitored anything, a free Spectrum router as their firewall, a nine product security suite installed in its factory state and configured by nobody, a single Global Admin password that was also the wifi password that was also my Hulu password, the firm's entire practice management database balanced on a four deep daisy chain of power strips in a supply closet, a cyber insurance policy built on a questionnaire I had filled out the way you fill out a dating profile, and a documentation library consisting of three photographs, one of which was my thumb. They had, in the language of my industry, an environment that was one bad Tuesday away from ceasing to exist as a business.

And they had never, in the entire history of the firm, been happier.

Old man Pruitt came out of his office to shake my hand again, because Pruitt likes to shake on a deal twice, and he told me I was a breath of fresh air, and he told me a long story about his old fax machine that I will not repeat, and he asked if I did home computers too, because his grandson had downloaded something, and I said, for you, Mr. Pruitt, anything. Vance shook my hand and looked, I will admit, slightly haunted, the way a man looks when he has gotten exactly what he wanted and is not entirely sure why he can hear a distant alarm, but Vance had wanted the cheaper number and the end of the annoying prompt, and he had gotten both, and you cannot save a man from his own wishes. Greg gave me a fist bump and asked, sincerely, if I needed any help on the IT side, and I told him I would keep him in mind, which I will not. And Carol, my Carol, came out from behind the desk and pressed into my hands a paper plate covered in foil, a slice of someone's birthday cake from the break room, and said "for the road, hon," and we firmed up October, the granddaughter, the bounce house, six years old, a Saturday, and I wrote it in the thread.

I walked down to the Crown Victoria with cake in one hand and forty four clients in my pocket, and the Nephew was asleep in the passenger seat with his sunglasses on and a half finished pro Kaseya reply still glowing on his phone, and I sat down and ate the cake before it could melt. It was good cake. Store bought, a little dry, the kind of cake that is mostly about the frosting, which is the best kind of cake, because the frosting is where the value is and the cake is just the part you pay for.

Across town, at that exact moment, Brad was at his desk. I cannot prove this but I know it the way I know the alternator. Brad was in his PSA, the one a certain vendor owns, closing out the Pruitt and Vance record, archiving two years of tickets and documentation and care, marking the account "lost," and Brad was building a little report for himself, because Brad believes that if you study a loss correctly you can prevent the next one, and Brad will look at that report and he will see that his price was higher and his proposal was longer and his email was unanswered, and Brad will conclude that he needs to communicate value more effectively, and Brad will never, ever land on the one true thing, which is that the system where he keeps every renewal date is read by people who do not work for him, and that one of them texted me Brad's own client before Brad's coffee was cold.

And at six o'clock the next morning, before the sun, my phone buzzed, and the Nephew's buzzed a half second later, the same text, and I opened it, and it was a lead, a good one, a hot one, an accounting firm this time, twenty seats, current provider a few weeks from renewal, the targeting just a little too good. And it came from a new number, because there was a new name, because Madison had looked like a hero for one standup and then spent eleven days slowly missing her number off the back of the very law firm she handed me, and somewhere yesterday there had been a meeting, and this morning there was a Tanner. I opened KASEYA REP (CURRENT), and I painted over Madison, and I did not feel anything, and the lead was already getting cold, and the next Brad did not yet know that his accounting firm was already mine.

Now, three things, before I let you go, and I am only telling you because we are friends.

The first is that questionnaire, the insurance one, the one where I checked yes to everything. That is going to come up again. Not soon. Insurance is patient. But there is a difference between a premium and a payout, and the difference is a man with a clipboard who arrives only after the worst has already happened and reads your questionnaire back to you, line by line, and we are going to meet that man, you and I, in a later chapter, and it is going to be one of the best days of my professional life, because I am going to walk away from it just fine, the way I always do, and somebody else is going to be holding it when it goes off.

The second is the Seagate. The blue light. The backup of fourteen attorneys' entire professional existence, sitting in a freezer bag, untested since a president ago, copying faithfully every night to a drive whose only job is to be there on the one day it is needed. That drive is going to matter. I want to be honest with you, the way I am never honest with a client: that drive is going to matter very much, and very soon, and the light is going to be blue right up until the exact moment it is not.

The third is the Nephew, and his three voices, and the golden retriever, and the man in Ohio. He is getting good, I told you that, but here is what I did not tell you: the subreddit has started to notice. There is a thread, a young one, where a few of them have begun comparing notes, wondering aloud whether the same suspiciously cheerful person keeps showing up to defend the one company everyone hates, always within the hour, always a little too informed. They do not have a name yet. They are close, though, closer than the Nephew knows, and one day they are going to pull the thread all the way, and on that day a very stupid and very public reckoning is going to land on a nineteen year old in my passenger seat, and I am going to handle it the way I handle everything, which is to say it is going to be his problem and not mine, and it is going to be hilarious.

But that is not today.

Today I have cake, and a sleeping Nephew, and a brand new fourteen seat law firm sitting on a stack that does nothing, paying The Seat, saving forty percent that I delivered by the simple expedient of not doing any of the things that keep a business alive. Today the alternator is holding. Today the dashboard in Florida is green. Today, somewhere, Brad is updating his documentation, and a kid named Tanner is updating his forecast, and I am licking frosting off a paper plate in a parking lot, and if you want to know which of us is winning, you already do.

Business is booming.