MSP Penetration Testing for Australian Partners
For Managed Service Providers selling cyber security to their clients. Discounted partner pricing, your branding on the cover, fast turnaround so you can quote on Monday and bill on Friday. Reports aligned to the ASD ISM, OWASP and ACSC Essential Eight - the evidence your clients' auditors and insurers actually accept.
No annual contract, no minimum commitment. Run one client a quarter or fifty a month - your tier and your discount scale with you.
What partners get
- Discounted partner pricing on every productPartner-tier rates on External, Grey Box Standard, Grey Box Plus, and bundles. Discounts stack with the existing 25 percent bundle saving and scale with your engagement volume.
- Co-branded or white-label reportsDefault reports carry your logo on the cover with a small "Powered by CyberCTRL" footer. Fully white-label reports (your branding only) available on higher tiers. Either way, your client sees your brand first.
- Partner dashboard for client engagementsA dedicated view that keeps client tests organised under your single MSP account. Label each engagement with the client it belongs to, download per-client reports, optionally grant individual clients read-only access to their own results.
- No minimum monthly commitmentRun one test a quarter or fifty in a month. Buy as you go via Stripe. No annual contract, no minimum spend, no clawback.
- Volume tiers: Partner, Plus, ProTiering is set by your rolling 90-day engagement count. You start at Partner on approval and move up automatically as your volume grows. Higher tiers unlock deeper discounts and additional white-label options.
- Same fast turnaround your clients expectReports delivered within a day, not weeks. Quote your client Monday morning, run the test Monday afternoon, bill Friday with a defensible deliverable in their hand.
How partner onboarding works
- STEP 01
Apply
Submit the partner application at /msp-apply. We ask for your trading name, ABN, client count, and a short note on the pen-testing work you do today. Existing CyberCTRL account holders can apply against their existing account.
- STEP 02
Approval within 24 hours
Most applications are reviewed and approved the same business day. On approval, partner pricing is applied to your account and the partner dashboard becomes available.
- STEP 03
Onboard your first client
Buy an engagement at partner pricing, label it with the client name, configure scope, run the scan. You can do all of this the same day approval lands.
- STEP 04
Bill, grow, level up
Download the report with your branding, deliver to your client, invoice them at your normal rate. As your rolling 90-day volume grows, you move automatically into the Plus and Pro tiers for deeper discounts.
What you are reselling
The same products listed on cyberctrl.au, at a discount, with your branding. Each engagement produces a professional PDF report aligned to the ASD ISM, OWASP WSTG, and ACSC Essential Eight - the methodology your client's auditor, insurer or enterprise customer will recognise.
Perimeter pen test
All 65,535 ports, SSL/TLS review, subdomain enumeration, web vuln scanning. Standard retail $1,550 ex GST.
Authenticated app test
Single-role authenticated testing, OWASP Top 10. Standard retail $1,550 ex GST.
Multi-role BAC matrix
Up to 3 roles, full Broken Access Control matrix, visual heatmap. Standard retail $2,090 ex GST.
Reports your clients can actually use
Every report aligns to the ASD ISM and OWASP Web Security Testing Guide, with structured Essential Eight commentary. That means your client can hand the document straight to their:
- External auditor (ISO 27001 A.12.6.1, SOC 2 CC7.1, APRA CPS 234)
- Cyber-insurance underwriter at renewal
- Enterprise procurement team filling out a supplier security questionnaire
- NSW Government procurement reviewer (NSW Cyber Security Policy / Essential Eight)
- Internal board or risk committee as Essential Eight Maturity Level evidence
Tiered partner pricing
Discounts scale with your rolling 90-day engagement volume. Start at Partner on approval, move up automatically as you transact.
Standard retail pricing starts at $1,550 ex GST per engagement. Partner pricing is available on application - approval typically within 24 hours.
Frequently asked questions
How does partner pricing work?
Approved MSP partners get a discounted per-engagement rate on every CyberCTRL product (External, Grey Box Standard, Grey Box Plus, and bundles) that stacks with the existing bundle discount. You buy at the partner rate and bill your client at your normal margin. No minimum monthly commitment, no annual contract. Discounts scale with volume - the more clients you onboard, the better the rate.
Co-branded or fully white-label?
Both options are available. By default the report carries your logo on the cover and a co-branded "Powered by CyberCTRL" footer - most partners prefer this because the underlying methodology is the credible bit they are reselling. Fully white-label (your branding only, no CyberCTRL mark) is available on higher partner tiers. Either way, your client sees your brand front and centre.
How do volume discounts work?
There are three partner tiers: Partner, Plus and Pro. The tier you sit in is set by your rolling 90-day engagement count. The more clients you onboard, the deeper the discount. There is no requirement to commit volume in advance - you start at Partner tier on approval and move up automatically as you transact.
What is the onboarding timeline?
Apply via the MSP partner form. Most applications are reviewed within 24 hours. On approval you get partner pricing applied to your account, access to the partner test view (which keeps client engagements organised under your account), and a short onboarding call if you want one. You can run your first client test the same day.
How do I keep client engagements separated?
The partner view lets you label each engagement with the client it belongs to and tag scopes accordingly. Reports are downloaded per-engagement with the client logo and details on the cover. You can give individual client contacts read-only access to their own engagement results if you want, or keep everything in your hands.
How do I apply to the programme?
Use the application form at /msp-apply. We ask for your trading name, ABN, number of clients you support, and a short note on the pen-testing work you do today. Approvals are typically same business day. The form supports both "create a new MSP account" and "apply with an existing CyberCTRL account" flows.
Add pen testing to your stack this week.
Apply to the MSP Partner Programme. Most approvals same business day.