ABC Disposal — objection cheat sheet

Owner + ops manager · 30 min in-person · 2026-05-19 · keep on lap during meeting

Objection (their words)What's behind itYour response
"The SonicWalls have been fine. Why change?" Status quo bias. Change feels risky. "Two specific dates force this — April 2026 hardware end-of-support, and your insurance renewal. Both happen whether we move or not. The question is whether we walk into them with the current setup or a stronger one."
"That's a lot more money." Real budget concern, or testing how firm the price is. "The premium over three years is about $15K–$35K CAD. That number buys removing the specific exposure that Coalition cites in 82% of denied claims. Denied claims regularly run six figures. Phrase it as the price of taking that risk off the table."
"We don't have time for a migration right now." Fear of disruption to dispatch / operations. "There's no scheduled downtime in the plan. Week 1 is discovery — invisible to your team. Pilot runs alongside the existing setup. Satellite sites cut over with the old VPN still available as backup. Only HQ cuts on a Saturday with a 7-day rollback window."
"What if Cytracom isn't around in 3 years?" Vendor risk aversion — they've never heard the name. "Fair concern. Cytracom is privately held, US/Canada channel-exclusive, has been acquiring (Telivy Jan 2025, Tentacle June 2025) — growing, not shrinking. If they were acquired by a larger vendor, the platform continues. Pilot week is the controlled bet to validate before committing."
"We just renewed our SonicWall support." Sunk cost. "That renewal is real money, and we'll factor what's left into the timing. But the renewal doesn't refund itself — the forward question is what to do from here. The hardware still ages out in April 2026 regardless of what was paid."
"We've never heard of Cytracom." Comfort with the known name. "They're newer to the SMB conversation than SonicWall or Fortinet — true. They're built specifically for MSPs in US/Canada. We've vetted them for our client base. The pilot week is exactly designed for this kind of unfamiliarity — you see it work before the full commitment."
"This sounds risky." Generalized anxiety — vague concern. "Specific risks are on slide 9 with specific mitigations. Vague anxiety needs concrete plans. Which of the three concerns you most — the remote-user cutover, the application compatibility, or the timeline?"
"Let's revisit after fiscal year-end." Polite decline / hoping it goes away. "I want to honor that, but two things — the SonicWall hardware reaches EOL in April 2026, and your insurance renewal is before then. What date does your renewal land? That's the deadline that matters most."
"Send me a proposal." Could be real interest. Could be a polite exit. "Happy to. Just so I scope it right — do you want the 1-week discovery SOW only, or the full-project fixed-fee scope? And when do you need it? Specifics signal which it actually is."
"I need to talk to my partner / accountant." Buying time. Open follow-ups die. "Of course. Can we put 30 minutes on the calendar for next week to decide? I'll send the discovery SOW so you have something concrete to share with them."
"Cytracom is too new — we want something proven." Specific to MSP-stack newer entrants. "Proven in what sense? If you mean operationally — they have hundreds of MSP partners across NA. If you mean visible in the SMB conversation — newer than SonicWall, true. The pilot week lets you see proof on your own network before committing the fleet."
"Can't we just buy more cyber-insurance instead?" Looking for a cheaper way out. "Insurance pays out only when the attested controls actually held. The Coalition 82% number is companies whose claim was denied because the control they attested to wasn't enforced where the breach happened. More insurance doesn't fix the attestation gap — it just gives a larger denied claim. The control change is what makes the insurance work."
Citations to have open in browser tabs:
• CVE-2024-40766 (NVD): https://nvd.nist.gov/vuln/detail/CVE-2024-40766
• CISA KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• SonicWall PSIRT (SNWLID-2024-0015): https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015
• SonicWall Product Lifecycle Tables: https://www.sonicwall.com/support/product-lifecycle-tables
• Coalition 2024 Cyber Claims Report: https://www.coalitioninc.com/whitepapers/2024-cyber-claims-report
• Arctic Wolf / Huntress Akira advisories: https://arcticwolf.com/resources/blog/
• Cytracom Control One: https://www.cytracom.com