Your brand. Your domain. Our testers.
The split
What stays yours, and what we carry.
The line matters more than the feature list.
Yours
- The client relationship, the contract and the invoice.
- Your brand on the portal, the reports and the notification emails.
- Your own domain - your client never leaves it.
- Your users, your client accounts, your seats to allocate.
- The scope conversation, if you would rather run it yourself.
Ours, behind you
- Testing by hand, by certified testers, to OWASP WSTG and PTES.
- Findings written up, evidenced and published as they are confirmed.
- A hand-verified retest on every engagement.
- The platform, the monitoring between tests and the scan infrastructure.
- A named tester you can put on a call - introduced by you, as your team.
How it runs
Four steps, and you are on every one of them.
- 01
You win the work
Your clientThe customer contracts with you. We are not on the call unless you want us there, and we never approach your client.
- 02
You scope it with us
30 minutesA scoping call between your team and ours produces a fixed price, so you can quote your client with your margin already in it.
- 03
We test, they watch
Your domainYour client signs in at your address, under your logo, and sees findings land as they are confirmed. Nothing on that screen names us.
- 04
You deliver
Your templateThe report generates in your document template. Retests are requested in the platform and verified by hand, and the trail stays with you.
The obvious question
Does this contradict everything else on this site?
We tell direct clients they will know exactly who tested their systems, and that they can talk to that person during the engagement. That promise is to whoever bought the engagement - and on a partner engagement, that is you. You get the named tester. You can put them on a call.
Your customer's relationship is with you, which is how subcontracting works in every professional services firm, and it is not something we would ask you to conceal from them if they asked directly. What we will not do is go around you, market to them, or turn up in their inbox after the engagement closes.
FAQ
What partners ask first
Will our client know you are involved?
Not unless you tell them. The portal runs on your domain under your branding, the reports use your template, and the notification emails come from your address. We do not contact your client, and we do not name them anywhere.
Who is the tester, and can we speak to them?
You get a named tester on every engagement and you can talk to them throughout - the same commitment we make to a direct client. How they appear to your customer is your call: most partners introduce them as part of their team on a call they host.
How is this different from any other white label supplier?
Most hand back a Word document. Your client gets a live workspace on your domain: findings as they are confirmed, evidence attached, retests requested in place, and reports exported in the framework your client asked for. That is the part you cannot build yourself and the part your customer notices.
What does it cost?
Engagements are priced on scope, fixed before work starts, so you know your margin before you quote. Partner terms are agreed per relationship rather than published - a first call covers volume, lead times and how you want to be billed.
How much notice do you need?
Tell us on the scoping call what your client has committed to and we will tell you honestly whether we can hold it. We would rather turn a date down than take the work and miss it, because the date you missed is yours to explain.
Can we start with one engagement?
Yes, and most partners do. There is no minimum commitment to run the first one, and no reason to sign a programme before you have seen how the work comes back.
Tell us what you have won.
A first call covers the engagement in front of you, lead times, and how partner terms would work. Prefer email? [email protected] reaches us directly.