from €99/mo
published per-client Starter; Growth continuous from €499/mo; MSP rates in writing
2–3 days
Growth and above: hunt after each client-approved release
24/7
Growth and above: overwatch between releases
What your clients get
The standing hunt, applied per client.
- →Starter is one deep hunt a month per client. Growth and above retest after every release.
- →A human verifies every finding with a working proof of concept and signs every report.
- →NIS2 / ISO 27001 / SOC 2 evidence mapping, in the language the client's auditor expects.
What you get
Every report under your brand and letterhead, per client, signed and dated. You onboard the client; we hunt, prove and sign. A posture summary across your book when you want to show the whole practice, not one client.
3 findings · top risk HIGH · 2 retested closed
Sample data. The real report is under your brand, signed, dated.
How it runs
- 01
You name the clients. We set a flat per-client rate, in writing, before anything runs.
- 02
Each client signs a written authorization with rules of engagement. We hunt, we prove, we sign.
- 03
Reports go out under your brand, per client, on that client's cadence. You keep the margin and the relationship.
Why now
Your clients ship web and API products that get an enterprise questionnaire, an NIS2 ask, or an exposed API nobody noticed. White-label resale fits the shape of an MSP business. It turns a fixed security cost into a variable one and adds a high-margin service without adding a pentest team.
What MSPs ask first
How is pricing structured?+
Flat per client, in writing, before anything runs. Published list starts at €99/mo Starter; continuous Growth from €499/mo. Volume MSP rates improve as the book grows. No scan meter, no per-day billing. Your margin is yours.
Whose name is on the report?+
Yours. Reports go out under your brand and letterhead, per client, signed and dated. The human signatory line stays on every report, as it must; the provider is your company.
What must a client provide?+
The domains of the external web and API surface and a signed authorization with written rules of engagement. No internal network, no source code, nothing beyond the written scope.
How many clients can one agreement cover?+
As many as you bring. The per-client rate stays flat and the group price improves as the book grows, always in writing.
What happens when a client has a finding?+
The finding ships with a working proof of concept and written remediation. You decide how the fix work is scoped with the client; we retest until it is closed.