Standing up a 24/7 security operations centre takes years and a headcount most MSPs will never justify. Sell ours instead, and keep the customer relationship you already have.
The difference is how much of the delivery you want to own. Both keep the customer relationship yours.
For businesses adding cyber security to the portfolio without taking on the operational overhead. A co-managed selling motion aimed at the private sector, with Wizard Cyber handling service delivery directly.
Best if you want the revenue line without staffing a SOC.
A deeper engagement for businesses selling into both public and private sectors. Collaborative delivery, expanded account management, and joint growth planning rather than a referral fee.
Best if you have delivery capability of your own and want to use it.
Either way your customer is buying a managed SOC that already exists, staffed and running, rather than one you have to build first.
Your customers get what our direct customers get. The difference is who they buy it from, and how much of the delivery you want to own.
CYBERSHIELD AI, the complete agent roster and the multi-stage investigation pipeline, including the completeness gate. Nothing is held back for direct customers.
Multiple security operations centres, each manned around the clock in its own right. Not a rota, and not an out-of-hours arrangement.
Built for Sentinel, Defender XDR and Entra ID. Your customers keep the Microsoft estate they already pay for, with no second SIEM to license.
Investigation reports, verdicts with the evidence attached, and service performance, per customer, through the secure portal. Output rather than a ticket queue.
A partner is putting several clients onto one platform, so the honest question is what stops one of them seeing another. The answer is architectural rather than procedural.
The process is deliberately dull. You should know what happens next at every point in it.
The form below, or a call. Tell us what you sell today and who you sell it to.
The detail: your business, your market, and which of the two programmes fits how you want to work.
Reviewed by the partnership team, usually inside a week or two. You get an answer either way rather than silence.
Agreement signed, customer tenants set up, and your team given portal access and the tooling that goes with it.
A kick-off with both sides in the room, and an agreed plan for the first customers you intend to bring.
Standing reviews with a named partner contact, and adjustments as the portfolio grows rather than at renewal.
You own the customer relationship, the contract and the commercial terms. The service you are selling is named, because a buyer who asks what is underneath should get a straight answer from your own marketing rather than from a due-diligence questionnaire six weeks later.
Partner branding inside the portal and on the reporting is a separate question, and not something we offer today.
Under Traditional Reseller we do, directly, and you carry the commercial relationship. Under Strategic Partner delivery is collaborative, with your own capability doing the parts you want it to and expanded account management around it.
Reseller if you want the revenue without taking on delivery, and we handle the service directly. Strategic Partner if you have delivery capability of your own and want a collaborative model with expanded account management. The application asks, and we will tell you if we disagree.
The same managed service our direct customers receive: 24/7 monitoring, investigations run end to end, a verdict with the evidence attached, and reporting through the portal. Not a reduced tier held below the direct product.
Structurally. Every customer-facing read is filtered to the organisations the caller is entitled to, by a mechanism that fails closed, and an automated test fails the build if that isolation is breached. There is no cross-customer learning and no training on customer data.
Microsoft Sentinel in your customers’ estates is the one requirement, because it is the correlation engine everything runs on. Beyond that we build the connectors, parsers and analytical rules their environments need as part of the service. Bespoke tools and integrations built for one customer are development work and are quoted separately.
The partnership team usually reviews an application inside a week or two, and you get an answer either way. If it is a fit, onboarding covers the agreement, customer tenant setup, and portal access and tooling for your team.
It goes to the partnership team rather than into the SOC queue. Someone will come back to you either way.
