Partner program: offensive security for agencies, MSPs, insurance brokers and consultancies
Your clients ask you for penetration testing, audits or help with NIS2, and it isn't your specialty. We work with you so you can offer it without building an in-house offensive team: by referring the project, subcontracting it white-label or submitting a joint proposal. Terms are tailored to each partner.
Your client needs offensive security and you don't want to improvise it
Web agencies, IT and managed service providers, insurance brokers, and consultancies and accounting firms get more and more requests outside their specialty: an enterprise client that demands a pentest before signing, an insurer asking for evidence of security measures, a tender that requires the ENS, or a company that wants to know whether NIS2 applies to it. The usual ways out are bad ones: saying no and putting the client relationship at risk, recommending a third party without knowing how they work, or reselling an automated scan as if it were a pentest. A partner program lets you respond with a team that specializes in offensive security, with clear rules on who owns the client relationship, how information is shared and who is accountable for each deliverable.
Collaboration models
- Referral: you introduce us to the client, we scope and deliver the project, and you remain their go-to provider for what you do
- White-label or subcontracting: we run the pentest or audit for you, you keep the client relationship, and the report can carry your brand when the project allows it
- Co-selling: we put together a joint proposal with you in which each party covers its part (development, systems, insurance or consulting, and offensive security)
- Services available to partners: web, API, mobile, cloud and infrastructure penetration testing, red teaming, technical audits, vulnerability assessment and support with NIS2, ENS, DORA and ISO 27001
- Non-disclosure agreement (NDA) signed before any end-client information is shared
- Commercial and operational terms tailored to each partner and each model
How it works
- First conversation: You tell us what kind of clients you have, what they ask you for and which model fits you best: referral, white-label or co-selling.
- NDA and partnership agreement: We sign a confidentiality agreement and put in writing the model, the terms, who owns the client relationship and how information is handled.
- First project: When the first opportunity comes up, we define the scope with the client together and prepare a fixed technical and commercial proposal before starting.
- Delivery: Our team runs the testing with written authorization from the end client and keeps you informed according to the agreed model.
- Report and retest: We deliver the executive and technical report (under your brand when agreed), walk the right people through it and verify the fixes.
- Partnership review: We periodically review how the partnership is working and adjust the terms if the type or volume of projects changes.
What partners get
- Technical support from an offensive security team to qualify opportunities and answer your clients' technical questions
- Joint proposals with scope, methodology and price fixed before starting
- An NDA and clear written rules on the end-client relationship
- Executive and technical reports, under your brand when the model and the project allow it
- Retesting of fixes on the terms agreed in each proposal
- A dedicated technical point of contact for your projects
Who is the program for?
- Web and development agencies whose clients ask for a pentest before launch or before signing with a large customer
- MSPs and IT providers that manage their clients' infrastructure and need an independent offensive review
- Cyber insurance brokers and intermediaries who want their clients to reach underwriting with evidence of their security
- Consultancies, accounting firms and law firms that advise on GDPR, NIS2 or the ENS and need to cover the technical side
- Integrators bidding on public tenders that need a partner for the security component
- Software companies that want to offer their clients a third-party audit of their product
Partner program FAQ
What commission or discount does the program offer?
There is no single rate card. Commercial terms are tailored to the model (referral, white-label or co-selling), the type of projects and the expected volume, and they are put in writing in the partnership agreement before the first project.
Who owns the client relationship?
It's agreed in writing for each model. In white-label, the relationship is yours and we don't contact the end client on our own. In referral and co-selling, each party keeps its own part. What matters is that it's defined before starting, not halfway through a project.
Can reports carry our brand?
Yes, under the white-label model, when the project allows it. In some cases the end client or a third party (an insurer, an auditor, a tender) requires the report to state who performed the testing; if so, we flag it in the proposal.
What are the requirements to join the program?
We cover that in the first conversation: what clients you have, what they ask for and which model fits. There's no fixed sign-up form; the terms, including any commitments on either side, are tailored in the partnership agreement.
How is our clients' information protected?
We sign an NDA before receiving any information, work only within the scope the end client has authorized in writing and, if the project involves processing personal data, put the corresponding GDPR data processing agreement in place.
Can a broker use the report for cyber insurance underwriting?
A penetration test report documents what was tested, what was found and what was fixed, which is the technical evidence underwriting questionnaires usually ask for. If the insurer asks for something specific, the scope is adjusted in the proposal. The underwriting decision always rests with the insurer.
What if the client needs something you don't do?
We specialize in offensive security and compliance; we don't do web development, day-to-day systems administration or insurance brokerage. The program is designed to complement what you already offer, not replace it: each party covers its own part.