PARTNERS

Embed, resell, or white-label AI security — OEM, scanner, MSSP, consulting, and reseller tracks are open now

Private Label

Deliver partner-branded AI security assessments without misrepresenting the engine.

Private Label means partner-branded professional-service delivery: the partner owns the client-facing engagement while SecEng controls the licensed methodology, tooling, evidence integrity, and IP boundaries.

CLI
Headless invocation for partners and automation
SARIF
Scanner-friendly output for partner ingestion
OEM
Commercial path for embedded AI security coverage
Definition

Private Label = partner-branded professional-service delivery

The distinction is commercial and operational: the partner owns client delivery; SecEng supplies controlled capability and evidence integrity.

Partner owns

Client-facing delivery

The partner owns the client relationship, engagement brand, scoping, project management, client-facing presentation, commercial terms with the client, and first-line communication.

SecEng supplies

Licensed method and tooling

SecEng controls or supplies the licensed methodology and tooling, evidence integrity, technical finding structures, report-generation components, product updates, QA requirements, attribution requirements, and escalation support.

Definition

Private Label = service branding

Private label means partner-branded professional-service delivery. It is not product-level sublicensing and does not transfer ownership of the underlying engine, methods, or evidence model.

Present one partner-branded service with explicit delivery ownership.

The partner can own the customer-facing proposition, account relationship, packaging, and approved presentation while SecEng supplies the agreed technical capability, evidence standards, enablement, and specialist support.

LOWERHIGHERSecEng brandedCo-brandedPrivate labelWhite labelCONTROL DIMENSIONSProduct identity and domainInterface and navigationOffer catalog and packagingTenant and customer controlsSupport presentation

Private-label delivery changes how the service is presented. It does not erase responsibility, authorization, evidence provenance, technical ownership, or the contractual boundary between the partner and SecEng.

Private label

Partner-led delivery with defined branding and attribution.

Private label is primarily a delivery and presentation model. The partner owns the customer relationship and may present agreed services or outputs through its brand, while SecEng may remain involved in technical execution, QA, or specialist support.

Includes

What private label includes

Defined in the delivery agreement.

  • Agreed partner-facing branding
  • Defined attribution or non-attribution
  • Approved report and output templates
  • Named QA and review responsibilities
  • Defined client-communication model
  • Reuse rights limited to the agreement
Excludes

What private label does not include

Requires a separate license.

  • Automatic engine redistribution
  • Automatic white-label software rights
  • Source code
  • Internal prompts or scoring logic
  • Unrestricted modification of findings or evidence
  • Implied ownership of SecEng methods or tooling
Branding

What can be branded and what cannot be misrepresented

Private label changes the client-facing wrapper. It does not transfer SecEng IP or permit altered evidence. The agreement defines which findings, claims, severity decisions, and recommendations may be modified — material technical changes may require SecEng review before delivery.

Brandable

Report and presentation wrapper

Cover, visual identity, executive summary language, partner introduction, delivery-team information, remediation-plan packaging, and customer-facing portal or report wrapper.

Not allowed

Misrepresentation boundaries

Partners cannot claim ownership of SecEng IP, fabricate certification or endorsement, alter technical evidence, remove safety or limitation statements, or make unsupported product claims.

QA

Evidence integrity requirement

Private-label delivery can change packaging and presentation, not the underlying technical evidence, finding integrity, or required limitation language.

Change the presentation without weakening the evidence.

A private-label agreement can define the approved service name, customer experience, packaging, report presentation, and account workflow while preserving the technical, legal, security, and evidence controls that make the service defensible.

Shared responsibility
  • Partner controls
    • Brand and domain
    • Theme and presentation
    • Offer and pricing
    • Tenant operations
    • Front-line support
  • SecEng-governed foundations
    • Evidence and provenance
    • Validation and claim states
    • Security boundaries
    • Entitlement controls
    • Versioned updates

Customer-facing branding may change. Source provenance, claim state, authorization, evidence integrity, remediation traceability, and protected implementation boundaries must remain intact.

Prove the branded operating model before offering it repeatedly.

A bounded pilot should validate the customer journey, delivery ownership, evidence package, report presentation, support model, quality controls, and commercial handoff.

Launch lifecycle
  1. 1
    Select licensing model
  2. 2
    Configure brand and theme
  3. 3
    Configure offer and catalog
  4. 4
    Provision tenant
  5. 5
    Acceptance test
  6. 6
    Partner launch
  7. 7
    Operate and support
  8. 8
    Versioned upgrade
Decision gate
  • Ready to launch
  • Conditional launch
  • Revise and retest
  • Hold launch

A successful pilot supports a decision about a repeatable private-label offer. It does not automatically grant broader licensing, software distribution, sublicensing, white-label, or OEM rights.

Start with one service, one customer profile, and one governed brand model

Define the customer-facing proposition, delivery owner, evidence package, support path, and protected implementation boundary before scaling the offer.