Partners · Already reselling penetration testing · United Kingdom
Your pen test partner ends at the PDF. You carry everything after it.
The re-test that arrives as a second invoice. The report in their template. The quote that went to your client direct. You hold the relationship, so you take the call. Tell us what you buy today and a CREST-certified operator replies within two working days with an itemised offer for the same services, delivered under your brand. Your client keeps dealing with you. They never see our name.
No rate card · no auto-quote · a person reads every form · your client is never contacted
Step one takes about two minutes
Three steps from their PDF to your portal
Step one is the form below. What you resell, roughly how much, how it is delivered today and what is not working. We price from scope, so you never disclose what your current partner charges.
- 01
Tell us what you sell today
Tick the services you resell or subcontract: external, internal, web application, cloud, red team, AI. Add roughly how many engagements a year, how they are delivered now and what is not working. No prices asked.
- 02
Get the itemised offer
An operator reads the form and replies with every line you ticked: scope assumptions, turnaround, what is included and the wholesale terms. If a call helps, you book one. If it does not, you never take one.
- 03
Move one renewal
Start with the account whose current partner has just missed a re-test or a deadline. Your client logs into a portal in your brand and sees the fix confirmed. The rest follow as their contracts come up.
A test that ends at the PDF vs one that stays until the fix
Under your brand
Security revenue from accounts you already own
Every service you ticked comes back as its own line: scope assumptions, turnaround and what is included. When your client's insurer or the regulator asks for proof, the answer carries your name. Anything we would not put our name behind, we say so.
- External, internal, web application, cloud and infrastructure penetration testing, each as its own line
- Red team and adversary simulation for the clients who are ready for it
- AI and LLM security testing for clients shipping copilots and agents
- Re-tests through a findings portal your client logs into, with your brand on it
- An executive summary your client can take to their board, under your name
- The no-poach commitment in the agreement before any client is named
Before you move
What partners ask before they switch
Most partners call us the week a re-test arrives as a second invoice, or the week a client's insurer asks for a report newer than the one they have. These are the questions they ask first.
What happens after I send the form?
An operator reads what you resell and how it is delivered today, then replies with an itemised white-label offer for those lines: scope assumptions, turnaround, what is included (portal, re-tests, reporting) and the wholesale terms. If a call helps, you book one. Nothing goes to your clients, and nobody phones you unless you ask.
Do I have to tell you what I pay my current partner?
No. We price from scope. We need to know which services you resell, roughly how many engagements a year, how they are delivered today and what is not working. The offer shows our wholesale rate set against the UK market, so you can judge the spread without disclosing anything about your supplier.
Will you contact my clients?
No, and it is in writing. The partner agreement carries a no-poach commitment: we do not contact, quote, market to or accept direct work from a client you introduced, during the engagement or after it. Under white-label your client never learns who delivered the test unless you choose to tell them.
Can I switch one client at a time?
Yes. Most partners move one renewal first, usually the account whose current partner has just missed a re-test or a deadline, and move the rest as contracts come up. For anything you would rather not manage yourself there is the referral model: we contract directly and pay you a fee.
What is included that my current partner probably does not offer?
Unlimited re-tests on every engagement, each one re-run and confirmed by an operator, through a findings portal in your brand that your client logs into. Findings arrive as tracked tickets with evidence, fix and status, pushed to their Jira or Azure DevOps if they prefer. It is why the account renews with you instead of shopping around next year.
From the network
What partners and clients say
Names withheld. The work is confidential, so these are anonymised: a role, a sector, a city. The voices are real to the kind of partner and client we work with in London.
Operationally, I would recommend Red Team. Their reporting was easy to interpret and the steps, the procedures and the whole process was very straightforward.
Malvinn MendozaQuality Assurance and Compliance Director · People Dynamics Inc
We resell their red team under our badge. The client gets CREST-certified work, we get a wholesale price that holds our margin, and we have never been undercut on a renewal. It let us keep accounts we would have lost to a bigger name.
— Director · IT reseller · Manchester
We are FCA-regulated, so a tick-box was never going to satisfy me. They got into our customer portal through a path our last pen test missed, then handed me a report the board and our auditor both used as-is. The fixes came ranked, not a flat list of 200 issues.
— Head of InfoSec · Fintech · London
Move one renewal first.
The rest follow when their contracts come up.
One form. One itemised offer for the services you already sell. Start with the account whose partner has just missed a re-test. When that client sees the fix confirmed in your portal, the next renewal is yours.