Managed services providers (MSPs) constantly seek innovative ways to deliver value to their clients while maintaining profitability. One avenue MSPs can consider is open-source technology. Open-source applications are software programs developed and distributed with the source code openly available to the public. This means that anyone can view, modify, and distribute the code. Many open-source applications are free, but some offer paid versions or additional support services.
Three members of the ASCII Group weigh in on which open-source technologies MSPs should consider selling, a few to avoid and tips for comparing an open-source and proprietary offering.
Which Open-Source Technologies Should MSPs Use or Sell?
There was no shortage of recommendations from the group. “Some examples are Odoo, Zabbix, SaltStack, TacticalRMM, Eramba, M365DSC, CyberDrain CIPP, Demisto, LimaCharlie, SnipeIT, Infection Monkey, PurpleKnight, and Kali,” says Felicia King, vCISO, Security Architect, QPC Security. “Frequently, open-source technologies are extremely mature, well-supported, enterprise-capable, and highly affordable,” she adds.
Angel Rojas, Jr., President and CEO of Data Corps, adds, “MSPs should consider selling open-source alternatives for server operating systems, databases, and content management systems (CMS). Linux, PostgreSQL, and WordPress offer robust, scalable, and cost-effective solutions. With commercial support for these technologies, MSPs can ensure they are secure, reliable, and well-supported, delivering significant cost savings and flexibility to their clients.”
Christopher Barber, Chief Nerd at Cheaper Than A Geek, concurs, adding that MSPs should dive deeper into the open-source treasure chest of CMS. “Open-source CMS platforms, like WordPress or Joomla, are like the Swiss Army knives of the web world – flexible, reliable, and just plain handy,” he says. “For database management, MySQL and PostgreSQL are the dynamic duo that often leave pricey proprietary systems eating their dust. And let’s not forget monitoring tools like Nagios and Zabbix, which keep an eagle eye on everything without costing an arm and a leg.”
Avoid These Open-Source Options. Here’s Why.
At the opposite end of the spectrum are open-source technologies the experts recommend MSPs avoid. “Some open-source ERP systems might look like a bargain, but they can turn into a never-ending DIY project that eats up all your time and sanity,” warns Barber. “Then there are some open-source security tools that, while cheap, might not have the same threat intelligence or timely updates as their proprietary counterparts. Think of them as the digital equivalent of leaving your front door open.”
King concurs, adding, “Any open-source technology that the MSP lacks the requisite skill to harden and secure should not be used, such as endpoint protection, detection, and response (EPDR) systems; security platforms (e.g., Wazuh) and password managers. Each of these offerings requires an extremely high labor burden to maintain it. Some technology is only appropriate for full-time internal staff at large companies that don’t need to be economically viable with their payroll.”
“MSPs should also avoid selling open-source technologies that lack commercial support or a strong community backing,” says Rojas, Jr. “These solutions often lack proper vetting for security vulnerabilities and may not meet the support and reliability standards clients expect. Without commercial support, MSPs risk facing challenges in providing timely and effective assistance, which could compromise client satisfaction and trust.”
“Many open-source technologies have SaaS-hosted options for a reasonable fee,” says King. “Consuming the tech in that format can achieve the right balance between cost and security.”
Open Source vs. Proprietary: A Checklist
King advises that any technology selection must start with a written requirements list. “It’s best to create a scoring matrix of 1–5 for each evaluated feature and rate the tools using your established criteria,” she says. Rojas, Jr. adds, “Documenting these evaluations and maintaining a clear, consistent process helps make informed decisions and demonstrate due diligence to clients.”
Here are the key factors for comparing and evaluating open-source vs. proprietary offerings:
- Cost: Compare licensing fees, support costs, and overall TCO for both options in the long run. “Also, compare the flooring of the two offerings,” says King. “Flooring is the price, quantity, or overall TCO that is the base cost for a solution that it can never go below. For example, a product with a floor of five licenses is much more attractive than one with a 300 license floor.”
- Features and functionality: Assess whether the open-source solution meets the required feature set and consider whether custom development is necessary to bridge any gaps.
- Performance and reliability: “Check out the benchmarks and user reviews,” says Barber. “Nobody wants a solution that’s slower than a dial-up connection.”
- Security: Evaluate the security posture of both options, including vulnerability management, patch management, and compliance requirements. “Also, consider how often updates are released, and is there a battalion of developers on bug control?” adds Barber.
- Support and community: Assess the availability of support resources, including documentation, forums, and paid support options. Evaluate the strength and activity of the open-source community.
- Vendor lock-in: Consider the potential for vendor lock-in with proprietary software and the flexibility open source offers.
- Scalability: Evaluate how well each option can accommodate growth regarding users, data, and workloads.
- Integration capabilities: Assess the ease of integrating the solution with existing IT infrastructure and applications.
By strategically incorporating open-source technologies into their service portfolio, MSPs can offer cutting-edge solutions to their clients without the need for extensive in-house development. For instance, the rapid advancements in containerization technologies like Docker and Kubernetes, both open-source projects, have revolutionized application deployment and management.
Another significant benefit of open source is flexibility. Unlike proprietary software, which often imposes vendor lock-in, open-source solutions provide MSPs with greater freedom to customize and integrate technologies to meet specific client needs. This adaptability is crucial in today’s dynamic IT landscape. “Just be sure to follow the checklist above to make smart choices that keep your clients happy and your hair from turning gray prematurely,” says Barber.
About The ASCII Group, Inc.
The ASCII Group is the premier community of North American MSPs, MSSPs and Solution Providers. The Group has members throughout the U.S. and Canada, and membership encompasses everyone from credentialed MSPs serving the SMB community to multi-location solution providers with a national and international reach. Founded in 1984, ASCII provides services to members, including leveraged purchasing programs, education and training, marketing assistance, extensive peer interaction and more. ASCII works with a vibrant ecosystem of leading and major technology vendors that complement the ASCII community and support the mission of helping MSPs grow their businesses. For more information, please visit www.ascii.com.
