White-label · pentest firms and MSPs
Your portal. Your brand. Your offer.
Your name, logo and color on the portal and the PDF reports, one isolated space per client and a console to run them. Custom domain and sending address in your name: activated with our team. You set your resale price freely.
- One consistent identity
- One isolated space per client
Everything you control
- Name · logo · colors
- Your domain, activated with us
- Email sender in your name
- PDF reports in your brand
- Multi-client console
- Credits allocated per client
How it works
Your pentest offer, in five steps.
Identity, domain, clients, report, price: the portal and the reports carry your name. The proofs do not change.
Try it
Put your brand on the portal, right now.
Type your firm name and your domain, pick a color: you see what your clients will see.
Select a surface to see what your clients experience.
Client space
Your firm
A portal with your name on it · A clear experience with no brand break.
Portal domain
portal.your-firm.com
Authorized target
app.client-example.com
Published evidence
Finding · reproducible proof
Notifications
security@portal.your-firm.com
Active identity
Logo · color
Agency cockpit
One workflow, from client to report.
Scope engagements, launch Assessments and deliver results under your identity, without mixing client spaces.
A tailored front door, separated client spaces.
Brand identity
Display name, logo and accent color create an experience your clients recognize.
Emails in your name
Notifications go out with your firm’s name as the sender. An address on your own domain requires verifying that sending domain: activation is done with our team.
Audit reports
The PDF carries your brand while preserving the scope, provenance and evidence.
Custom domain
Clients reach the portal on your domain after DNS setup, verification and activation.
Partner model
A partner model set with you.
No public price list and no online payment at this stage: the contract and billing are discussed with you. In the console, you allocate your firm’s Assessment credits to each client.
A partner contract set with you: volume, commitment and billing are discussed case by case.
Your firm’s Assessment credits, allocated to each client space from the console.
Nothing is billed automatically: no payment method is connected to the platform.
Set your client price and resale margin freely.
Deliverable integrity
Your brand changes. The facts remain verifiable.
Branding changes presentation, never the authorized scope, finding provenance or evidence bound to the report.
Facts · untouched by branding
The invariants of a delivered pentest
4 elements follow every Assessment under your identity.
- Scope
Exact HTTPS target
The exact authorized target remains attached to the published finding and attack path.
- Execution
SpectrAI provenance
The SpectrAI execution and frozen report version remain traceable.
- Result
Bound finding and evidence
The PoC and reproducible evidence references remain bound to the published finding.
- Deliverable
Audit report and NIS2 references
Results are delivered in a branded report with NIS2 references, without attesting compliance.
Becoming a partner
Four steps to your first client.
No automatic sign-up: every partnership is set up with you, at your pace.
Get in touch
Introduce your firm and your clients in the partner form; we reply by email.
Qualification call
A call to understand your portfolio, your brand expectations and the volume of Assessments you plan.
Your console and your brand
We open your partner console with you: name, logo, color and, if you wish, the activation of your domain.
Your first client
You create your first client’s space, verify their application’s domain and launch their first Assessment.
Frequently asked questions
Before you become a partner.
Another question? Ask it in the partner form, we reply by email.
Who runs the tests, and against what?
Assessments run on a server administered by SpectrAI’s publisher: you have nothing to install. Each test targets an HTTPS URL whose domain was verified through DNS, within the budget and turn limits set before launch.
Where does the data go, and which language model is used?
The site and the application are hosted by Vercel; the database, authentication and files by Supabase. During an Assessment, the test engine relies on an OpenAI language model: the tested application’s responses and your instructions are sent to it, with no processing guaranteed within the European Union at this stage. These providers are based in the United States; the privacy policy lists each of them.
How are clients kept apart from each other?
Each client has its own space. In the database, access is partitioned by organization: one client’s targets, results and reports never show up for another. From the console, you enter a client’s space when you need to act, with a banner that reminds you.
How do the contract and billing work?
The partner contract and billing are discussed case by case, based on your volume and commitment. No public price is set at this stage and no online payment is connected; your resale price is yours to set.
What do my clients see?
The portal and the PDF reports in your brand: their targets, their Assessments, the demonstrated findings with their proof and the final report. Authentication emails in your brand (sign-up, sign-in, password) are built but not yet switched on in production; until then, they carry the SpectrAI brand.
How long does onboarding take?
The timeline is agreed together during the qualification call. Name, logo and color are set in the console; the custom domain and the sending address in your name need a DNS setup and an activation with our team.
Who is responsible for the tests at my clients?
You are, with your client: get their written authorization before any test. Every tested URL must belong to a domain whose DNS verification succeeded. The agents’ outbound traffic is not yet isolated at network level: keep SpectrAI to domains your clients own.
What support is provided?
Partner support is handled by email, through the contact form. Its terms are set out in the partner contract.
Partner program
Build your pentesting offer.
Introduce your firm: we set up your partner space, your brand and your first clients with you.