PARTNERS

Embed, resell, or white-label AI security — OEM, scanner, MSSP, consulting, and reseller tracks are open now

Trust Center · Vendor Pilot

Prove one representative workflow before production licensing.

A Vendor Pilot tests one bounded input, one selected SecEng capability, one output contract, and one partner-native return path. The objective is a documented production decision - not an open-ended integration project or implied partnership.

Bounded
One input, one module, one output contract, one return path.
Documented
Every pilot ends in a recorded proceed, revise, extend, or stop decision.
Reversible
Excluded work, data boundary, and IP ownership are explicit from day one.
Pilot scope at a glance

Eight facts before you scope a call

A compact specification grid so procurement, legal, and technical reviewers see the same bounded shape.

Duration

Default orientation: 30 days after fixture and contract readiness. Final duration is defined in the SOW.

Fee

Uses the existing route-specific commercial range where applicable. For a scanner OEM pilot, reference the published $50k-$100k orientation. No single fee applies to every vendor pilot.

Representative input

One agreed finding, repository selection, attack trace, workflow fixture, workforce object, or other bounded contract input.

Selected module

One primary capability, with additional modules only where required to prove material value.

Output contract

One agreed structured return shape, version, identity mapping, evidence behavior, and lifecycle expectation.

Included meetings

Kickoff, contract review, midpoint review, and acceptance review by default.

Excluded work

Production adapter hardening, unrestricted source access, unrelated customer data, public integration claims, redistribution rights, and ongoing support unless explicitly included.

Conversion decision

Proceed, revise and retest, extend scope, or stop.

Acceptance criteria

Pilot acceptance target

The same nine-criteria model used across every SecEng pilot route, generalized for any bounded pilot input.

1

Representative input accepted

The agreed fixture, finding, trace, or object enters the selected module successfully.

Pass condition
Selected module processes the agreed representative input without a blocking error.
Evidence produced
Execution log and accepted-input confirmation.
Not tested
2

Stable identity preserved

The partner's own identifier or correlation ID survives enrichment and return.

Pass condition
Returned object carries the original partner identifier unchanged.
Evidence produced
Input/output identifier comparison.
Not tested
3

Supported output returned

The result is produced in the agreed output contract and format.

Pass condition
Output validates against the agreed contract version.
Evidence produced
Schema validation result.
Not tested
4

Mapping and severity accepted

Both parties approve the field mapping and any severity or claim translation.

Pass condition
Written sign-off on mapping and claim language from both technical owners.
Evidence produced
Mapping review notes.
Not tested
5

Evidence supports review

The result retains enough provenance and context for technical and analyst review.

Pass condition
Evidence references resolve to reviewable, sanitized artifacts.
Evidence produced
Evidence reference list.
Not tested
6

Deduplication or repeat behavior demonstrated

Repeated analysis does not create uncontrolled duplicate results.

Pass condition
A second run against the same input does not create a duplicate record.
Evidence produced
Repeat-run comparison.
Not tested
7

Update, remediation, or retest state preserved where in scope

Lifecycle state can return to the partner system of record when that behavior is in scope.

Pass condition
Lifecycle field updates round-trip without loss where agreed in scope.
Evidence produced
Lifecycle round-trip log.
Not tested
8

Data boundary respected

No prohibited source, customer data, credential, payload, or hidden reasoning leaves the agreed boundary.

Pass condition
Boundary review confirms no excluded data category was transferred.
Evidence produced
Data-boundary review checklist.
Not tested
9

Production decision recorded

Proceed, revise, extend, or stop is documented with reasons and remaining obligations.

Pass condition
Written acceptance-review record signed by both technical owners.
Evidence produced
Acceptance review summary.
Not tested
Responsibility matrix

Who owns what during the pilot

Illustrative contract shape. Final responsibility allocation is defined in the executed SOW.

Capability
Partner
SecEng
Shared
Representative fixture
Accountable
Consulted
Fixture sanitization
Responsible
Consulted
Joint approval
Engine invocation
Consulted
Accountable
Input and output contract
Responsible
Responsible
Joint approval
Mapping approval
Accountable
Responsible
Joint
Evidence review
Consulted
Responsible
Joint
Acceptance decision
Responsible
Responsible
Joint
Production deployment
Accountable
Consulted
Joint planning
End-customer support
Accountable
No direct contact unless agreed
Public claims and logos
Responsible
Responsible
Written mutual approval

Bounded Vendor Pilot Data Flow

A representative fixture moves from the partner environment, across one agreed transfer or local-invocation boundary, into the selected SecEng capability only, and back as a partner-native structured return.

VP-01

Bounded Vendor Pilot Data Flow

A representative fixture crosses one agreed transfer boundary, reaches only the selected SecEng capability, and returns as a partner-native, structured result.

Four stacked stages: partner environment holding the representative fixture and stable identifier, an agreed transfer or local-invocation boundary with validation and redaction, the SecEng capability boundary limited to the selected module, and the partner-native return containing the structured result and evidence references.

PARTNER ENVIRONMENTPartner environmentRepresentativefixtureStable partneridentifierApproved contextExplicit exclusionsTRANSFER BOUNDARYAgreed transfer or local-invocation boundaryEncryptedtransfer or localexecutionContractvalidationRedaction gateEntitlement checkSECENG BOUNDARYSecEng capability boundarySelected moduleonlyMinimum requiredprocessingEvidencereferencesNo unrelateddata accessPARTNER RETURNPartner-native returnStablereturn IDStructuredresultValidationstateEvidencereferencesRemediationand reteststate

The final SOW defines the actual execution location, transfer method, retention period, deletion event, and approved evidence set.

Data boundary

What is retained, and what is never required

Pilot acceptance target for data handling: minimum necessary processing, explicit retention, and explicit exclusions.

Retained only if agreed
  • Configuration and audit metadata
  • Approved evidence objects
  • Acceptance artifacts
Never required by default
  • Full unrelated source tree
  • Credentials or secrets
  • Private attack corpus
  • Unrestricted payloads
  • Hidden model reasoning
  • Unrelated customer information
IP and ownership

Each party keeps what it brought.

Ownership boundaries that apply to every pilot, regardless of module or vertical.

  • The partner retains its data, product, UI, customer relationship, branding, and pre-existing intellectual property.
  • SecEng retains its engines, methods, canonical contracts, internal prompts, scoring logic, detector implementation, source, and pre-existing intellectual property.
  • The partner receives ownership or licensed use of the agreed pilot outputs only as defined in the SOW and applicable license.
  • The pilot does not transfer SecEng source code, hidden reasoning, internal scoring logic, unrestricted redistribution rights, or unrelated tooling.
  • Ownership of derivative integration work, adapters, mappings, documentation, and productization artifacts is defined explicitly in the SOW.
Support and production conversion

A successful pilot ends with a production decision.

Seven steps from acceptance review to a closed or converted engagement.

1

Acceptance review

Record passed, failed, unresolved, and excluded criteria.

2

Production license discussion

Select the capability, deployment, entitlement, redistribution, and customer-organization model.

3

Integration hardening

Define production adapter work, monitoring, release process, and operational controls.

4

Support tier

Agree severity definitions, response targets, escalation contacts, supported versions, and update cadence.

5

Versioning plan

Record engine, contract, adapter, and deployment versions plus migration and offline-update behavior.

6

Launch and claim review

Approve any public compatibility statement, logo use, marketplace entry, customer reference, or benchmark claim.

7

Close or convert

If no production agreement follows, complete the agreed return, deletion, expiry, or fixture-destruction process.

Claim and logo policy

Validation before publicity.

Neither party may publish a partnership claim, compatibility claim, customer name, logo, benchmark result, marketplace listing, case study, or production-support statement until the relevant maturity level has been demonstrated and both parties have approved the exact language in writing.

Not permitted before approval
  • Partnership announcements
  • Compatibility badges
  • Customer or partner logos
  • Named integration claims
  • Benchmark or uplift claims
  • Production-support claims
Permitted after written approval
  • Exact approved relationship description
  • Verified maturity level
  • Approved technical scope
  • Approved logo treatment
  • Approved benchmark methodology and result
  • Approved support status
Sanitized sample package

Preview the packet before sharing sensitive material.

Every card below links to a real, visible artifact on this page - a sanitized reference example, not a claim of a completed engagement.

Sanitized reference example
{
  "contract_version": "seceng.oem.request.v1",
  "request_id": "req_demo_001",
  "organization_id": "partner_customer_042",
  "module": "code_scanner",
  "input": {
    "kind": "repository_selection",
    "repository_ref": "repo_demo",
    "revision": "commit_or_archive_ref",
    "paths": ["services/agent/**"]
  },
  "data_policy": {
    "retain_source": false,
    "return_evidence_refs": true
  }
}

Sanitized reference example. A signer-ready pilot SOW is prepared during scoping using the same acceptance criteria, responsibility matrix, and data boundary shown above.

Next step

Scope one representative workflow before a production conversation.

Start with the bounded pilot shape above. We will confirm the representative input, selected module, output contract, and acceptance criteria before any native schema or fixture is exchanged.