How to Get Clients for an MSP: Six Switching Signals
The six LinkedIn moments that show a company of 10 to 200 people is about to hire its first MSP or leave its current one, the exact search and message for each, a week-one plan with a daily time budget, and when referrals, accountants and local search beat outreach.
The fastest way to get clients for an MSP is to reach a company in the week it decides it can no longer run IT alone, and that week is visible on LinkedIn: a first "IT manager" job post, the only technician announcing a last day, a founder describing a phishing hit, an insurance renewal demanding controls nobody set up. Message that owner within a day with one specific observation, and you are in the room before a shortlist exists. Below: six signals, a week-one plan, and when referrals win.
Why does the usual MSP sales advice stall?
Most pages on how to get clients for an MSP give the same list: pick a vertical, fix the website, ask for referrals at the quarterly review, join the chamber, partner with an accountant, maybe run ads. None of it is wrong. The problem is timing. A referral arrives when a client happens to know someone who is unhappy this quarter, and a chamber breakfast reaches whoever turned up, not whoever is deciding.
The buyers are not scarce; the window is. Almost every prospect already has some IT arrangement, and MSP owners themselves rank winning new business as their hardest problem. In Kaseya's 2026 State of the MSP survey of more than 1,000 providers, 71% said acquiring new customers is their top challenge, and the share of MSPs whose typical customer spends above $25,000 a year fell to 41% from 75% the year before. The same release reports 71% of MSPs growing their cybersecurity revenue, the highest of any service line, which tells you what the buyer is worried about when the window opens.
A buying signal is a public action that shows a company is in-market now. The trigger event lesson explains the idea in general. For MSPs the triggers are unusually visible, because the people who buy managed IT are founders, operations leads and office managers, and they post about hiring, outages, insurance paperwork and new offices.
Where do MSP clients show up on LinkedIn?
Each row is a moment you can find with a free LinkedIn account. The search column is what to type into the search bar before switching to the Posts tab (or the Jobs tab, where stated) and filtering to the past week. The message column quotes the signal and offers one piece of work, not a service catalogue.
| Signal | Where | What it means | What to do |
|---|---|---|---|
| A first IT job post at a company with no IT team ("IT manager", "systems administrator", "IT support specialist", "office manager with IT duties") | Jobs tab: "IT manager" or "systems administrator", filtered to companies of roughly 10 to 200 people in your region or vertical; open the company page and check for an existing IT title | The owner has admitted IT needs a person; the hire takes months, the salary is a line they have not paid before, and the tickets, the backups and the renewals do not wait | Message the founder or operations lead: what a managed contract covers while the role is open, and the option of co-managed IT if they still hire |
| The only IT person leaving ("last day as IT manager at", "moving on after five years running IT", a sysadmin's "open to work" at a company with no other IT names) | Posts tab: "last day" "IT manager" or "moving on" sysadmin, past week; check the company page for who else holds an IT title | Every password, vendor relationship and undocumented fix is walking out, and the owner is about to find out what the person actually did | Wish the leaver well, then message the owner the same day: offer a two-week handover audit (accounts, backups, licences, admin access) with a fixed scope, before any talk of a contract |
| A founder posting about an outage, a phishing hit, lost email or a ransomware scare ("we got phished", "email was down all morning", "a vendor invoice was spoofed") | Posts tab: phished "our team" or "ransomware" "small business" founder or "email went down", past week | The cost of no IT provider just became concrete, and the owner is telling the story in public, which means they are still inside the decision | Do not pitch into the incident post. Connect with a note that names one control that would have stopped it, and offer a 30-minute review of the three that matter most |
| A cyber insurance or compliance requirement ("our cyber insurance renewal wants MFA everywhere", "client asked for SOC 2", "Cyber Essentials", "HIPAA audit next quarter") | Posts tab: "cyber insurance" renewal MFA or "SOC 2" "we need" or "Cyber Essentials" certification, past week | A third party has set a deadline and a checklist; the owner needs someone to own the list, which is exactly the managed service they have been putting off | Name the two requirements that usually fail first on their checklist, and offer to map the gaps against the questionnaire or standard they named |
| A second location, a hiring surge or a raise ("opening our second office", "we raised", "hiring 20 people this quarter", a company page with ten open roles and no IT title) | Posts tab: "second office" "we" or "we raised" hiring plus your region or industry words; Jobs tab: companies with many postings and no IT role | New seats, a new network, new laptops and onboarding at a pace the current arrangement, often a part-time contractor, has never handled | Congratulate, then offer the office or onboarding setup as a fixed-scope project timed to the move or the first start date; the contract conversation follows the project |
| A public request for an IT provider ("anyone recommend an IT company in Leeds?", "frustrated with our IT provider, who do you use?") | Posts tab: "recommend" "IT company" or "IT provider" "who do you use" or "managed service provider" recommend, past week; also the comments under those posts, where other buyers add "following" | An open evaluation with a shortlist forming in the comments the same day, and sometimes an incumbent being replaced | Answer in the thread with one useful question or point (what is included in the current contract, who holds the domain), then connect with a note that quotes their post and offers a 20-minute comparison call |
Two filters keep the list honest. A signal older than two weeks is cold: the company has either picked someone or decided to live with it. And a post from another MSP or a vendor asking "who needs IT help?" is not a buyer, however many comments it has. Reddit, local Facebook groups and X carry the same requests, and the Reddit method has the queries; treat them as manual channels, because Intentsly monitors LinkedIn only.
The insurance and incident rows are not edge cases. In the UK government's Cyber Security Breaches Survey 2025/2026, which covered 2,112 businesses with fieldwork from August to December 2025, 43% of businesses had identified a breach or attack in the previous twelve months, rising to 46% of small and 65% of medium businesses; 47% of businesses held some form of cyber insurance, yet only 30% had carried out a cyber risk assessment. Among micro businesses, 44% had an external cyber security provider, up from 39% a year earlier. Every one of those gaps is a conversation an MSP can open, and the posts in the table are how you find the companies having it this week.
How to get clients for an MSP by hand: a week-one plan
The plan takes about an hour a day with a free LinkedIn account. Sales Navigator makes the headcount and job-post steps faster but is not required.
- Day 1: write the one-sentence offer and list the voices. Pick the company type and the size, for example "accounting and law firms of 10 to 50 people within an hour of Manchester with no IT hire". Then list ten accountants, insurance brokers, software vendors and founders your buyers follow, and five MSPs that compete with you. The ideal customer profile lesson is the longer version of this step.
- Day 2: build the saved searches. Create the six Posts-tab searches from the table with your region and industry words added, each filtered to the past week, plus one Jobs search for the IT manager or sysadmin role. Bookmark them. The hiring-signals routine goes deeper on the job-post signal, which has the most volume for MSPs, and the search operators guide explains the quoting rules.
- Days 3 to 5: thirty minutes of reading, thirty of replying. Run the searches, read the new posts, and for each real buyer do the "what to do" step from the table. Reply in public first, connect second. Send at most 15 connection requests and 15 messages a day; LinkedIn tolerates more, your acceptance rate does not.
- Day 6: follow up and find the budget owner. For every accepted connection with no reply, send one message that adds something: a question about who holds their domain registration, a line about the insurance requirement they mentioned. Never "just checking in". Where the person who posted is an office manager rather than the owner, the decision-maker guide has the six steps to find who signs.
- Day 7: count. Signals found, replies, calls booked. Fewer than ten relevant posts in a week means the region or industry words are wrong, or your buyers do not post; widen the search terms and add the Jobs tab before changing the niche.
Message template for the leaver signal, for copying:
Saw that [name] is moving on after running IT for you. The two
things that usually go missing in that handover are admin access
to [Microsoft 365 or Google Workspace] and the backup schedule,
and both are painful to rediscover later. Happy to run a two-week
handover check with a fixed scope, no contract attached.
Finding the right fifteen people each day is where the hour goes; if you want that step done for you, the LinkedIn signals feature runs the same searches continuously and hands you the list already scored against your customer profile.
How does Intentsly do this for you?
The manual plan breaks at the point where your region produces more posts than one person can read, and the posts that matter are a day old by the time you find them. Intentsly runs the finding and the first conversation, on LinkedIn only.
| Signal from the table above | What Intentsly does |
|---|---|
| Outage and phishing posts, insurance and compliance posts, second-office and hiring posts, requests for a provider | Keyword post monitoring for the pain points, tools and topics you set, in English, Romanian, German and Dutch |
| Founders asking questions under accountants', insurance brokers' and security writers' posts | Post engagement monitoring: people who like, comment or share posts from the competitors and industry leaders you name |
| Early research on the MSPs that compete with you | Competitor page follower and engager tracking, and hashtag engagement monitoring |
| Separating a buyer from another MSP or a vendor | Scoring against your ideal customer profile, so the list arrives prioritised |
| Finding the email for the follow-up and the proposal | Enrichment with verified emails, and export of leads and signals |
| Replying, holding the conversation, booking the call | The AI SDR sends LinkedIn connection requests and messages, holds the conversation, and sends your Cal.com or Google Calendar link so the owner books; HubSpot is the native CRM integration |
The limits are the same as the manual plan, stated plainly: up to 2 LinkedIn accounts per plan, a maximum of 30 messages and 30 connection requests per account per day, and Intentsly recommends 15. The AI SDR sends LinkedIn messages only; it does not send email. The job-post signal and the leaver's "last day" post are best kept in your own routine: the first is not monitored, and the second needs a human reply.
What does this look like in practice?
We are not an MSP, but we sold a new product into a crowded market the same way an MSP sells into one: a buyer with an existing arrangement, many providers offering the same brochure, and a short window when the arrangement breaks. Launching an AI sales platform against outreach tools with bigger budgets, we pointed our own intent signals at founders complaining about cold outreach burnout and let the AI SDR handle replies and booking. The result was 14 qualified demos in 14 days with zero manual outreach, and a reply rate 4x our previous cold campaigns. Most of those leads came from signals caught in real time. The write-up is on the case studies page.
Across Intentsly customers in October 2026, agents find around 1,000 leads a month each, and accounts book 2 to 4 meetings a week on average. Those are typical figures, not guarantees; a region whose business owners rarely post runs below them, and an MSP contract takes more calls to close than a software demo.
Other ways to get MSP clients, and when they beat signals
Signals produce conversations with strangers. Three other routes earn their place, and for most MSPs one of them comes first.
Accountants, insurance brokers and software vendors as referral partners beat signals when you serve one region and one company size. An accountant sees every client cross a headcount line and every invoice-fraud loss; a broker sees every cyber insurance questionnaire that comes back half empty; a line-of-business software vendor hears "who looks after your server?" on every onboarding call. Each of them wants an MSP to hand the problem to. The cost is that they also hear from your competitors, which is why most MSPs run partnerships and signal outreach together.
Existing clients and former employers beat signals for the first client, almost always. Every page that ranks for this question says so, and the consensus is right: the company you left, or the client whose server you rebuilt at two in the morning, already trusts you and already has neighbours. Ask at the quarterly review and after every resolved emergency. The ceiling arrives when that network has been asked once; the plan above is what you run when it has.
Local search and the Google Business Profile beat signals for the buyer who has already decided and is typing "IT support" plus a town name. That buyer is the easiest close and the rarest, because by the time they search, the incumbent has usually been given notice. Keep the profile accurate and reviewed; do not wait for it. Cold lists are the one tactic signals replace outright: almost every company of 10 to 200 people could use managed IT in theory, which is why a scraped list of them converts so badly, and a post says which of them has decided this month. The software development company page covers the neighbouring business, the consultants page makes the same argument for advisory work, and the solutions index covers other business types.
The next step is to check whether your buyers talk in public. Try the AI shows matching owners for your region and vertical with no account, which is the quickest test of whether the week-one plan is worth your hour a day. If it is, the Buying Signal Playbook lists the 12 signals worth chasing and the 8 to ignore, with a script for each.
FAQ
How do I get my first MSP client?
Ask the last two employers and any business owner you have fixed something for whether they need a defined project this quarter: a backup review, a Microsoft 365 cleanup, an insurance questionnaire. That is where most MSPs' first contract comes from. Run the week-one plan in parallel from day one, so that when the network has been asked, owners who posted a signal this week are already in conversation.
How long does it take to get clients for a new MSP?
Weeks for the first client when it comes from a former employer or a partner, and a quarter or more for a stranger, because a managed contract replaces someone and the owner wants a project first. Signal outreach shortens the front of that: a company that posted an incident or an insurance requirement this week is usually deciding within a month. Count weekly and expect a project before a retainer.
Does cold calling work for MSPs?
It works badly on a list and reasonably on a signal. A call to a company that posted about a phishing hit yesterday, opening with that post, is a different conversation from a call to the two hundredth business on a local directory. If you call, call the companies from the table, after the public reply and the connection request, and treat the call as the follow-up rather than the opener.
Should an MSP pick a niche or vertical?
Yes, but pick it from where the signals are. A vertical with a compliance standard (accountancy, law, healthcare, anything handling card payments) produces more of the insurance and compliance posts in the table, and lets you reuse one questionnaire mapping across clients. If your region is small, pick a company size and a stack (Microsoft 365, Google Workspace) rather than an industry, and let the searches tell you which industry posts most.
How do you get a company to switch from its current IT provider?
You do not persuade a happy company to switch; you find the ones already unhappy, and they say so in public: the recommendation request, the outage post, the renewal nobody owns. Offer a scoped project that sits beside the incumbent, such as the insurance gap review or the second-office setup, and let the comparison happen on the project. The contract follows when the incumbent fails to match it.
How many clients does a small MSP need?
Fewer than most owners assume, because the work is recurring and a lost client takes months to replace. The useful number is how many conversations a week keep the pipeline moving: the week-one plan is built for ten to fifteen relevant signals and two or three calls a week from one person's hour a day. Set the client target from your margin and your bench, then work back to that weekly count.
