One isolated space per client
A client’s targets, missions, results and reports are only visible in its own space. You enter it when you need to act.
Partners · cyber consultancies, MSPs and managed service providers
Your portal. Your brand. Your offer.
A free partner console to run your clients and deliver pentests under your name: one isolated space per client, portal and reports in your brand. You buy missions and set your own resale price.
- Free console, no subscription
- One isolated space per client
Everything you control
- Name · logo · colors
- Your domain, activated with us
- Email sender in your name
- PDF reports in your brand
- Multi-client console
- Your resale price
How it works
From access request to your first missions.
No automatic sign-up: every partner account is validated, then activated with you.
Access request
You introduce your firm and your clients in the partner form. We reply by email.
Account validation
We validate your account. The partner rate is then shared with you and stays visible in the console.
Accompanied activation
Name, logo and color are set in the console. The custom domain and the sending address in your name are activated with our team, on a timeline set with you.
First missions
You order missions and assign them to your clients. For each one: the application, the domain verification, the scope. Nothing starts before the scope and the authorization are confirmed.
Partner billing
SpectrAI issues the quote, then invoices your missions; there is no online payment. You invoice your clients at the price you set.
Try it
Put your brand on the portal, right now.
Type your firm name and your domain, pick a color: you see what your clients will see.
Select a surface to see what your clients experience.
Interactive
Client space
Your firm
A portal with your name on it · A clear experience with no brand break.
Portal domain
portal.your-firm.com
Authorized target
app.client-example.com
Published evidence
Finding · reproducible proof
Notifications
security@portal.your-firm.com
Active identity
Logo · color
Agency cockpit
One workflow, from client to report.
Scope engagements, launch missions and deliver results under your identity, without mixing client spaces.
Brand identity
Display name, logo and accent color create an experience your clients recognize.
Emails in your name
Notifications go out with your firm’s name as the sender. An address on your own domain requires verifying that sending domain: activation is done with our team.
PDF reports
The PDF carries your brand while preserving the scope, provenance and evidence.
Custom domain
Clients reach the portal on your domain once it has been activated with our team.
Partner console
What the console does for you.
Free, with no subscription or minimum: you know it before you buy your first mission.
Analysts and access rights
Invite your analysts and set what each one can do. A client user only reaches their own space.
Audit log
Each space’s actions are logged: who did what, and when. A client’s log stays limited to its own space.
Missions and history
You order missions, assign them to your clients and keep the history of each client’s missions and reports.
Partner model
Two ways to work with SpectrAI.
Resell under your brand, or recommend SpectrAI and let us invoice and deliver.
White-label reseller
You sell the pentest under your name, at the price you set.
- Free partner console: no subscription, no minimum.
- Portal, PDF reports and emails in your brand.
- Partner rate shared once your account is validated.
- You set your resale price freely.
Business referrer
You recommend SpectrAI. Your client buys from SpectrAI, which invoices and delivers.
- No console to run, no white label.
- A payment based on the revenue collected from the client you bring.
- Terms shared once your request is validated.
Deliverable integrity
Your brand changes. The facts remain verifiable.
Branding changes presentation, never the authorized scope, finding provenance or evidence bound to the report.
Presentation · your brand
Facts · untouched by branding
The invariants of a delivered pentest
4 elements follow every mission under your identity.
- Scope
Exact HTTPS target
The exact authorized target remains attached to the published finding and attack path.
- Execution
SpectrAI provenance
The SpectrAI execution and frozen report version remain traceable.
- Result
Bound finding and evidence
The PoC and reproducible evidence references remain bound to the published finding.
- Deliverable
Audit report and NIS2 references
Results are delivered in a branded report with NIS2 references, without attesting compliance.
Becoming a partner
What you need to request access.
Four pieces of information are enough to open the conversation. We reply by email.
Your firm
Its name, website and activity: cyber consulting, managed services or auditing.
Your clients
How many clients are concerned and what kind of applications need testing.
Your brand
The name, logo and color to apply to the portal and the reports.
Your domain
If you wish, the address to use for the portal, for example on a subdomain of your website.
Frequently asked questions
Before you become a partner.
Another question? Ask it in the partner form, we reply by email.
Who runs the tests, and against what?
Missions run on a server administered by SpectrAI: you have nothing to install. Each test targets an HTTPS URL whose domain was verified through DNS, within the budget and turn limits set before launch.
Where does the data go, and which language model is used?
The site, the application and the servers that run missions are hosted by Hetzner, in Germany; the database, authentication and files by Supabase. During a mission, the test engine relies on an OpenAI language model: the tested application’s responses and your instructions are sent to it, with no processing guaranteed within the European Union at this stage. Supabase and OpenAI are based in the United States; the privacy policy lists each provider.
How are clients kept apart from each other?
Each client has its own space. In the database, access is partitioned by organization: one client’s targets, results and reports never show up for another. From the console, you enter a client’s space when you need to act, with a banner that reminds you.
How do the partner rate and billing work?
The console is free, with no subscription or minimum. You buy missions at a partner rate shared once your account is validated, and you set your resale price freely. There is no online payment: SpectrAI issues a quote, which you validate, then invoices you.
What do my clients see?
The portal and the PDF reports in your brand: their targets, their missions, the demonstrated findings with their proof and the final report. Authentication emails in your brand (sign-up, sign-in, password) are built but not yet switched on in production; until then, they carry the SpectrAI brand.
Does SpectrAI also sell directly to my clients?
SpectrAI sells directly to companies that have no partner. A domain verified in your space is protected: SpectrAI does not sell on it directly and sends the request back to you.
Who is responsible for the tests at my clients?
You are, with your client: get their written authorization before any test. Every tested URL must belong to a domain whose DNS verification succeeded. The agents’ outbound traffic is not yet isolated at network level: keep SpectrAI to domains your clients own.
What support is provided?
Partner support is handled by email, through the contact form. Its terms are set out when your account is activated.
Partner program
Build your pentesting offer.
Introduce your firm: we validate your account, then activate it with you.