vCISO Lite Opens the Partner Program — Recurring Margin Up to 30% for VARs, GRC Implementers, MSPs, and Fractional-CISO Practices Whose Clients Need Software That Survives the Handoff

ATLANTA — June 9, 2026 — vCISO Lite today opened applications for the vCISO Lite Partner Program, a channel program built for the advisory firms whose clients need software that carries the load between engagements. The program is designed for regional security VARs, GRC and compliance implementers, small MSPs and MSSPs, and independent fractional-CISO practices — with sliding-scale recurring margin up to 30% on Enterprise deals, deal-registration protection, co-selling support, a partner portal, and an operator-track white-label capability arriving in Q4 2026.

The virtual-CISO and fractional-CISO service category has become a real channel motion. Cynomi’s 2025 State of the vCISO Report— surveying 200 senior security leaders at North American MSPs and MSSPs (50+ employees), fielded by Global Surveyz in May 2025 — found MSP adoption of a vCISO offering jumped from 21% in 2024 to 67% in 2025, a 319% year-over-year increase; 96% of surveyed providers now report high or moderate customer demand, and another 50% of those not yet offering a vCISO plan to launch one by year-end. The firms delivering that advisory keep hitting the same wall: the engagement is excellent, the deliverable is a slide deck, and the moment the invoice clears, the customer’s compliance work stalls back inside a spreadsheet. Every hour the client spends toggling between the advisor’s deliverables and their own tooling is an hour the advisor loses at the next renewal. Partners is the answer to that wall — a channel program built on the premise that the software surviving the handoff is what makes the advisory engagement stick.

“Every fractional-CISO and boutique GRC practice runs into the same handoff problem — the engagement ends, the client returns to a spreadsheet, and the work the advisor did quietly stops compounding,” said Yolonda Smith, founder of vCISO Lite. “That’s what Partners answers — sliding-scale margin held for the life of the customer relationship, deal-registration protection on every opportunity, and a platform that keeps running the client’s compliance and risk work between engagements. Advisors keep the relationship. The software carries the load. Both sides compound.”

What’s in the release

The vCISO Lite Partner Program opens today for applications, with founding-cohort slots reserved for the first partners to sign. The launch delivers:

• Sliding-scale recurring margin. Partner margin starts at 10% on Growth-tier deals and scales up through Business and Ultra to 30% on Enterprise. All recurring, paid quarterly, held for the life of the customer relationship — not a one-time referral bonus. Starter-tier customers are self-serve direct and are not partner-eligible.
• Deal registration and protection.Register the opportunity and it’s yours. No lateral moves, no direct-sales collisions, and clear conflict rules if the customer also arrives through a direct channel — the registered partner wins.
• Co-selling support. Jointly-branded collateral, founder-led demo assist on Ultra and Enterprise deals, product-side escalation on technical questions, and quarterly territory and business reviews with the founding team.
• Partner portal.Lead registration, revenue reporting, enablement content, and analyst onboarding materials in one workspace — sized for a small firm’s operations rather than a 50-person channel bureaucracy.
• Operator-track white-label capability, arriving Q4 2026. For partners who want to run vCISO Lite entirely under their own brand, the operator track arrives in Q4 2026 — custom domain, brand-owned exports, a wholesale rate card, and a partner-as-operator dashboard to manage the full client book from one workspace. Partners signed under today’s program transition to the operator-track terms at no contractual friction.

The practices this is built for

The Partner Program is shaped around the reality that mid-market cyber-risk advisory is delivered by practices of very different shapes — and each of them needs a different thing from the platform sitting underneath their work. The tradeoffs between the common engagement models are laid out in “vCISO vs Fractional CISO vs CISO-as-a-Service”, and the shape of a real advisory engagement is broken down in “What a vCISO Actually Does: A Week-by-Week Breakdown of the First 90 Days.” The program is built for four practice shapes specifically:

• Regional security VARs selling multi-vendor security stacks to mid-market companies, whose AEs need a platform answer when a CFO asks about cyber posture or a board asks about controls.
• Compliance and GRC implementershelping clients pass SOC 2, ISO 27001, HIPAA, and PCI — who today watch the recurring platform revenue land somewhere else while they absorb the delivery work.
• Small MSPs and MSSPsmanaging IT and security for mid-market customers under a recurring contract, who are already the ones who have to answer for cyber posture when a customer’s board or deal partner asks.
• Independent fractional-CISO firms whose clients hire them, not a platform — the audience the operator-track white-label capability in Q4 2026 is built for. The kinds of questions those clients should be asking before signing an engagement are in “How to Hire a vCISO Without Getting Burned”; the buyer-side counterpart on when a company actually needs one is “When Does Your Startup Actually Need a vCISO?”

Firms whose model is a direct advisory retainer without a channel relationship remain served by vCISO Lite’s Expert Servicestrack — the direct-advisory side of the same coin.

Where the program draws the line

The program terms are conscious and up-front. Customers sign the vCISO Lite subscription agreement directly; partners receive margin via a three-page reseller agreement with no exotic clauses. There is no territorial or vertical exclusivity, no firm-specific custom builds, and no SPIFs, MDF, warrants, or equity-style incentives — the recurring margin is the relationship. Partners commit to holding the customer relationship as the named security partner, using the platform to deliver real work rather than reselling it as a logo, surfacing quarterly roadmap input, and participating in joint case studies when a marquee win lands.

Availability

The vCISO Lite Partner Program is open today for applications, with founding-cohort slots reserved for the first partners to sign. Sliding-scale recurring margin applies to Growth, Business, Ultra, and Enterprise deals; Starter customers remain self-serve direct. The operator-track white-label capability — custom domain, wholesale rate card, partner-as-operator dashboard, and MCP server composition — arrives in Q4 2026. Program terms, tier-by-tier margin tables, and the application form are at vcisolite.com/partners, and the accompanying changelog entry covers the rollout detail.

About vCISO Lite

vCISO Lite is a compliance and cyber risk platform for growing companies that don’t have a full-time CISO. The platform helps customers close compliance gaps across every framework mapped in the Secure Controls Framework (SOC 2, ISO 27001, PCI DSS, HIPAA, DORA, NYDFS Part 500, GDPR, NIST 800-53 and 800-171, FedRAMP, CMMC, and more), quantify cyber risk in the language their board and deal teams already speak, and — through the Partner Program — reach the mid-market via the regional VARs, GRC implementers, MSPs, and fractional-CISO practices those buyers already trust. vCISO Lite is headquartered in Atlanta, Georgia. Learn more at vcisolite.com, read related product releases in the changelog, or explore the vCISO editorial series.

Media Contact

Press & Analyst Inquiries
Yolonda Smith, Founder
press@vcisolite.com

###