Black Rabbit Cyber Starts a New MSSP on OpenFrame

Albert Guerra's MSSP, Black Rabbit Cyber, was brand new when we spoke. It started in mid-December 2025. He works with two technicians: one on endpoints, one on infrastructure and cabling. Across all clients, that's about 300 endpoints in plumbing and electrical, law, industrial manufacturing and labeling.

Vendors take the biggest share of a new MSSP's revenue, and price was the main push to look elsewhere. Albert also likes open source and tools built by technicians. At the interview in January 2026, OpenFrame was running on three devices: a user's desktop, a server and his laptop. He planned to move one whole client over next.

The early results are small and concrete. The agent went on with a PowerShell script. One question to Mingo, OpenFrame's AI agent for technicians, showed that SMB1 and legacy TLS were already disabled on his Windows machines. His summary: "Even though it's limited at the moment... it's a great option at the moment."

Black Rabbit Cyber is a small team with a wide mix of clients. One makes composite manhole covers that never rust. Another creates labels for packaging. Others are plumbing and electrical firms and law offices.

For a new MSSP, most of the money goes to vendors, not labor. "They obviously want their cut of every single client that an MSSP would have," Albert says. A complete platform comes with a price attached: "You want to use my platform, which is complete, then you got to pay the tax."

Price was the main push to look for something else, but not the only one. Albert likes open source and the community around it. He also trusts tools built by people who do the work: "If you have technicians that have been there and done that, hit the ground floor running with a product like this, then the solution I think is going to be a little bit more complete. Because now you're looking at it from the perspective of a technician instead of how can I make more money."

Albert signed up and deployed the agent with OpenFrame's PowerShell script. He half expected trouble: "It might work, it might not, but so far it's been 100%."

One server pushed back. The agent wouldn't install through the remote-access tool he used to reach that client's machines. He found a way around it: "I logged into that one RDP, into the server, ran the script, and now it's on. It's one of my devices right now."

He hadn't run scripts from the library yet. His one PowerShell job so far was mapping an Azure drive to a desktop. OpenFrame is web based, so it doesn't matter if he's on an iPad, a tablet or a desktop. "It's awesome to have a way to just boom, send the script to that machine and good to go."

Mingo was the only AI agent showing in his menu, so he tried it. He asked for the vulnerabilities on his current Windows machines. Mingo reported that SMB1 and legacy TLS were already disabled. It changed nothing on the machines, as Albert points out: "Not that it disabled them for me, but it said that they have been disabled already."

For now, he runs Windows Defender on the machines alongside OpenFrame while he waits for disaster recovery and EDR.

At the interview in January 2026, the results were about getting started, not hours saved. Black Rabbit Cyber had three devices on OpenFrame: a user's desktop, a server and Albert's laptop. Every agent install had worked so far, including the server he reached over RDP. He had mapped an Azure drive with a PowerShell script. His first Mingo question showed SMB1 and legacy TLS already disabled on his Windows machines: "So it did give me a lot of valuable information that way."

What stood out to him was how easy the start was: "It's easy to sign up. It's easy to get on your dashboard. It's easy to get the script and deploy it on the machines." And the access: "But the biggest selling point is that it's web based."

He kept his summary measured: "To me right now, even though it's limited at the moment... it's a great option at the moment."

What he still wants: his list is about a more proactive Mingo and a more hands-off setup. He wants Mingo to email him when it spots malware, a potentially unwanted program, a login from an unusual place or a server that needs critical updates. He wants pre-approved fixes, like re-mapping a missing Azure drive for a group of users without asking. He'd like help with ransomware: sandbox the folder, trace the email it came from and list who else clicked. He also wants automated onboarding that scans a client's networks and deploys the agent, devices grouped by organization, and backup, disaster recovery and EDR in the same platform.

What he expects next: he planned to move one whole client onto OpenFrame within a couple of weeks. Asked if he could see OpenFrame covering most of his tech stack going forward, he said: "Yeah, definitely."