Your mid-market clients want cyber clarity.
You’re the firm they trust.
We’re the platform that delivers it.
The partner program for regional security VARs, compliance and GRC implementers, and small MSPs serving mid-market companies. Sliding-scale recurring margin. Sales support that doesn’t need a 90-day enablement program. Operator-track white-label arrives with Silver 1.0 in Q4 2026.
Three partner shapes we’re built for.
If you’re selling to mid-market companies ($250M–$1B revenue), here’s how the program fits the shape of your firm.
Regional security VARs
You sell multi-vendor security stacks to mid-market companies in your region. Your AEs have the relationships; what they don’t always have is a platform answer when a CFO asks about cyber posture or the board asks about controls. Adding vCISO Lite to your lineup gives them one — recurring margin, deal protection, sales support that doesn’t need a 90-day enablement program.
Compliance & GRC implementers
You help companies pass SOC 2, ISO 27001, HIPAA, PCI. Most of your clients ask “which platform should we use?” — and the answer ends up being Vanta or Drata, and you get nothing recurring out of it. vCISO Lite gives you a platform you can recommend that’s broader than checklist GRC, with margin that lasts for the life of the customer.
Small MSPs & MSSPs
You manage IT and security for mid-market customers under a recurring contract. When their board or a deal partner asks them about cyber, you’re the one who has to answer. vCISO Lite is the platform that sits underneath that answer — bundled into your managed offering or sold as an add-on, with recurring margin every renewal cycle.
Fractional CISO firms
Your clients hire you, not a platform. The work is the relationship, and the platform should disappear underneath it. We’re building the operator track for that shape — white-label, partner-as-operator dashboard, wholesale rate card — and it ships with Silver 1.0 in Q4 2026.
Get early-access notesWe don’t compete with your work.
We make it compound.
Recurring margin per renewal.
Up to 30% on Enterprise.
For every mid-market customer you bring to vCISO Lite, you earn a recurring margin sized to the tier they land on — 10% on GROWTH, scaling up to 30% on ENTERPRISE. Paid quarterly, recurring for as long as the customer renews.
| Tier | Customer pays | Partner earns | Margin |
|---|---|---|---|
| GROWTH | $7,188/yr | $719 | 10% |
| BUSINESS | $11,988/yr | $2,398 | 20% |
| ULTRA | $17,988/yr | $4,497 | 25% |
| ENTERPRISE | ~$102,000/yr | ~$30,600 | 30% |
Your firm refers a mid-market manufacturer that lands on ENTERPRISE — typical for $250M–$1B companies running real cyber operations, ~$102K/year ACV. Your firm earns ~$30,600/year in recurring margin, paid quarterly, for as long as they renew. Your services or retainer revenue from that customer sits on top — uncapped by us.
Three clients need attention before lunch. A SOC 2 audit window opens for one. A vendor questionnaire lands for another. A board meeting prep is due for the third.
Log into client A’s Vanta. Log into client B’s Drata. Log into client C’s OneTrust. Pull evidence from each. Stitch the picture together in three separate spreadsheets. Update your Notion tracker. Email each client an update.
One login. All three client tenants addressable from a single session. Posture is already current — scans, vendor scoring, control evidence updating in real time. You spend the morning making decisions, not reconstructing context.
Real channel support. Built for small ops.
We’re not pretending to be a 50-person channel team. Here’s what we actually provide, sized to what a founder-led program can deliver well.
Sales support
- Sales collateral — one-pager, demo deck, ROI angle aimed at mid-market executive buyers
- Founder demo support — Yolonda joins demos for ULTRA and ENTERPRISE deals
- Quarterly office hours — what’s working, what’s not, roadmap previews
- Competitive references when you need them — how we line up against Vanta, Drata, AuditBoard
Deal protection
- Deal registration — submit a lead via email or Slack, get 90-day protection
- Clear conflict rules — if the customer also comes in direct, the registered partner wins
- No double-dipping — once registered, the deal is yours through close and renewal
Partner success & brand
- Partner Success channel — Slack or shared email, fast response
- Quarterly Partner Business Review — 30-min founder check-in per quarter, per partner
- AE onboarding session — 60-90 min covering platform pitch, when to escalate, deal-reg mechanics
- Joint case-study rights — your logo + ours when a marquee win lands
- Launch-partner listing on the site once the cohort is named
- Roadmap input — what’s missing, what’s blocking deals, your read on the channel landscape
Some things we’ll add. Some things, by design, we won’t.
Conscious choices — laid out up front so there’s no friction later.
- 01Customer signs direct with vCISO Lite.
You bring the deal. We paper it. End customer signs our standard subscription agreement directly. Your firm receives margin via a 3-page reseller agreement — clean separation, no wholesale-buy-then-resell motion. (That’s coming with Silver 1.0 in Q4 2026 — different rules, different shape.)
- 02Sales motion stays with you.
You qualified the lead. You closed the deal. We don’t backdoor your relationship with our SDRs after the customer onboards. Your renewal margin is protected the same way the original deal was — every cycle, for as long as the customer stays on the platform.
- 03No territorial or vertical exclusivity.
“Only VAR in Texas,” “only partner serving manufacturing” — neither is on the table. If exclusivity is the thing that makes the partnership work for you, we’re not the right vendor at this stage.
- 04No firm-specific custom builds.
We capture roadmap input every quarter and prioritize what compounds across the partner book. Custom features for a single firm aren’t how the platform gets better for everyone.
- 05No SPIFs, MDF, equity, or short-term cash incentives.
The recurring margin is the relationship. Top-performing partners earn marketing co-investment case-by-case as the relationship deepens, but it’s not a baseline entitlement. No warrants, no options, no equity-style structures.
Where this is going.
And what early partners step into when it ships.
Today’s program is what we can deliver today. Silver 1.0 is the formal operator surface — productized white-label, partner-as-operator multi-tenancy, and a wholesale-shaped pricing model for firms that want to own the customer contract directly.
secure.yourfirm.com. Subject to refinement before Q4 2026 ship.Custom domain & branding
Serve clients at secure.yourfirm.com with your logo, your color palette, your email sender. Exports, reports, and audit packs leave your firm with your brand — not ours.
Wholesale rate card
Buy at wholesale, sell at your retail. Margin scales with tier and volume — partners owning the customer contract directly get the highest margins on STARTER and BUSINESS; premium tiers carry thinner margins on larger absolute dollars.
Partner-as-operator
Operate client tenants from a single partner dashboard. Commission tracking automated, client health visible across your full book, sub-tenant lifecycle managed from one workspace.
MCP server composition
Register your own MCP servers — your SIEM, your ticketing, your playbook tools — alongside vCISO Lite in your analyst workspace. One Claude conversation across all of your tools.
From first conversation to first referred customer in under 30 days.
- 1
30-minute discovery call
We walk through your firm’s model, your client mix, and any specific questions about the program structure. No pitch deck — peer-to-peer.
- 2
Reseller agreement signed
Short legal document — three pages of substance. Standard SaaS reseller terms, no exotic clauses.
- 3
Onboarding training for your analysts
90-min live session covering platform setup, evidence collection workflow, MCP access, and the multi-tenant workspace. Recorded for new analysts joining your firm later.
- 4
First customer referral
We work with you on the joint pitch, scope the implementation, and onboard the customer in 30 days. You deliver services on the platform; we handle the platform.
Four things. None of them surprising.
- Be the customer’s named security partner.Hold the relationship. We don’t want to substitute for your consulting work — we want to be the platform underneath it.
- Use the platform to deliver real work.If your model is selling vCISO Lite as a logo and walking away, this isn’t the right fit. We want partners who actually run client engagements on the platform.
- Surface roadmap input quarterly.What’s missing? Where are you working around limitations? Tell us. This is the cheapest way for the platform to get better for the channel.
- Joint case-study participation.When a referred customer goes well, both sides put their logo on the case study. This is how the channel compounds for everyone.
Tell us about your firm.
We’ll take it from there.
Five minutes. We review applications within 2 business days and follow up to schedule a 30-minute discovery call.