NIS2 services to resell
Clients are asking for compliance: you can deliver it without having to build an enterprise-grade scanner in-house.
MSPs & System Integrators
White-label, enterprise support, dedicated channel.
Managed Service Providers, system integrators and IT consultancies that want to offer their clients vulnerability assessment, data governance and self-hosted AI without building the platform in house. The partner programme brings it all into one dedicated channel: white-label products with per-client billing, co-delivered assessments and training, and second-level support with direct access to the people who build the product.
Your challenges
AI governance for clients
Clients integrate LLMs, you must protect them without rewriting their stack.
Margins on recurring services
You need recurring offers, not just one-off projects.
Second-level support
When a client reports an issue you need a fast channel to whoever builds the product.
How we can help
Product
Product
Product
Solution
Solution
Solution
Solution
ProductCyberAgent
Multi-tenant, white-label, per-client billing.
ProductDataGovern
Multi-tenant GDPR/NIS2/AI Act compliance to resell to your clients.
ProductAdmina Enterprise
Enterprise packages on the Apache 2.0 open framework.
SolutionCybersecurity
Co-delivery of assessments and training for your team.
SolutionArtificial Intelligence
AI governance and AI solutions to resell to your clients.
SolutionCloud & Web Apps
Cloud architectures and web apps to integrate into your offering.
SolutionLinux Services & Systems
Hosting, domains and Linux infrastructure to integrate into your managed services.
Insights
Agent harness and sandbox: TrueForge and smolvm
TrueForge is an open-source harness in TypeScript holding the execution loop, MCP tools, approvals and secrets. smolvm is a Rust CLI booting microVMs with a separate guest kernel on libkrun, with an egress allowlist in the configuration file. Underneath sit five different isolation levels, from a syscall filter to a VM, and each stops different things.
GLM-5.3: new post-training and cyber benchmarks
Z.ai announced GLM-5.3 on 14 August, stating it starts from the same base model as GLM-5.2 and that every gain comes from post-training. The weights are not out yet. On CyberGym and ExploitGym the benchmarks measure something other than finding a vulnerability, and the CyberGym paper reports 759 raw crashes for 9 confirmed zero-days after manual triage.
Zero-knowledge proofs over inference: the Attestable launch and the published numbers
Attestable announces a $20M seed and writes that practical zero-knowledge proofs were considered impossible and that the company solved it. The technical post declares two temporary limitations, a 16K token window and integer quantisation of matrix multiplications, and labels the benchmarks alpha results on a single H100. IACR ePrint 2025/535, a preprint with no experimental setup described and no peer review, states 150 seconds per token on one core for Llama-3 8B.
Frequently asked questions
Can I offer NIS2 services to clients without building a scanner in-house?
Yes: CyberAgent is multi-tenant and white-label, with per-client billing, and DataGovern adds GDPR, NIS2 and AI Act compliance to resell. Compliance becomes a service under your brand, without developing the platform in-house.
How does the white-label partner programme work?
The dedicated channel brings together white-label products with per-client billing, co-delivered assessments and training for your team, and second-level support with direct access to the people who build the product. The goal is turning one-off projects into recurring, margin-bearing services.
Can I resell AI governance to clients integrating LLMs?
Yes: Admina is an Apache 2.0 open framework with enterprise packages, alongside AI governance solutions to resell. You protect clients integrating LLMs without rewriting their stack.