Partner programme
The Programme page brings together what helps you sell to and support your clients: your tier in the programme, your technicians’ certification, the NIS2 sales kit and office hours.
- Who: owners and administrators of the partner organisation.
- Where: Partner space › Partner › Programme. Four tabs: Tier, Certification, NIS2 sales kit, Office hours.
Programme tiers
Section titled “Programme tiers”The programme has three cumulative tiers. They are not price tiers: your price per device depends only on your volume (see Per-device billing).
| Tier | Criteria (default) | Benefits |
|---|---|---|
| Registered partner | Active partner programme | Multi-client console and delegated access, free internal tenant (NFR), wholesale price per device with no minimum, NIS2 sales kit, Annex 6.6 and 6.10 evidence per client, office hours |
| Certified partner | At least 3 clients and 1 certified technician | “Certified partner” badge seen by your clients; reports and emails fully under your brand, whatever your number of clients |
| Expert partner | At least 15 clients or 500 devices, and 2 certified technicians | “Expert partner” badge; office hours slot reserved for expert partners, when offered |
The tier is recalculated every day from your clients, your devices seen over 30 days and your certified technicians: nothing to request. The Tier tab shows your tier, your three figures and, for the next tier, each criterion with its current and required value. Criteria may change; you are told in advance.
Your clients see your tier badge (from Certified partner) and the number of your certified technicians in Organisation › Your provider’s access.
Partner certification
Section titled “Partner certification”A short certification: four modules to read, then a 12-question quiz. You pass with 10 correct answers and it is valid for 12 months; retake the quiz before it expires to extend it. Each member of the partner team takes it for themselves; a technician who leaves your organisation no longer counts.
- Open Programme › Certification and read the four modules.
- Answer each Quiz question: Submit my answers becomes active once all are answered.
- The result appears at once: pass and validity date, or your score and the modules to review. You have five attempts per day.
Answers are marked on the server; only the score and the result are kept, never your answers. Each attempt is recorded in your organisation’s audit log.
Module 1 — The filter: the decision tier
Section titled “Module 1 — The filter: the decision tier”TechWatchAlert does not alert on every published CVE, only on those that affect the client’s stack and estate. Each case gets a decision tier from exploitation (CISA KEV catalogue, public exploit), exposure and whether the attack can be automated. The tier gives a deadline of 3, 14 or 60 days, or deferral. When a vulnerability is in the KEV catalogue, follow KEV even if its EPSS is low; never multiply CVSS by EPSS. The “published → concern you → to handle” funnel shows the client what the filter sets aside.
Module 2 — Evidence: coverage and Annex 6.6 / 6.10
Section titled “Module 2 — Evidence: coverage and Annex 6.6 / 6.10”“0 vulnerabilities” is only worth something if monitoring has run. A silent source (agent no longer responding, connector in error) shows “cannot be verified”, with the date of the last scan. The Annex 6.6 and 6.10 evidence restates, point by point, the requirements of Implementing Regulation (EU) 2024/2690 with dated evidence and a status; “outside the tool” flags what falls under the client’s procedures (patch testing, change management).
Module 3 — Talking about NIS2
Section titled “Module 3 — Talking about NIS2”Sell readiness and supporting evidence, never compliance: the French NIS2 transposition law is not passed, and compliance remains the judgement of an authority or an auditor. The tool contributes to Article 21(2)(e) of NIS2; it does not stand in for it. Managed service providers are themselves listed in Annex I of NIS2: produce the evidence for your own organisation too.
Module 4 — Running the console
Section titled “Module 4 — Running the console”Your team accesses a client through delegated access whose role and expiry the client chooses (two years at most) and can revoke. Devices are billed monthly, in arrears, with no minimum. A one-off consultant receives temporary access with the Member role, which expires on its own.
NIS2 sales kit
Section titled “NIS2 sales kit”Three documents ready to hand over, under your brand, in seven languages (choose the Document language):
- Client sheet (PDF): one page for the client — what the service does, what it does not, what they receive, and an FAQ;
- Internal talking points (PDF): for your sales team, the wording to use and the wording to avoid, and why;
- Email template: to copy (Copy) or download (Text), with the bracketed parts to fill in.
The PDFs carry your logo, like your reports. The documents talk about NIS2 readiness and supporting evidence: do not edit them to promise compliance. Have your materials reviewed by your legal counsel before wide distribution.
Annex 6.6 and 6.10 evidence
Section titled “Annex 6.6 and 6.10 evidence”In Partner space › Reports, the Annex 6.6 and 6.10 evidence section produces, for each client and for your own organisation, a short document restating points 6.6 (security patch management) and 6.10 (vulnerability handling and disclosure) of Implementing Regulation (EU) 2024/2690.
For each point: the summarised requirement, the evidence drawn from the registers (remediation targets, deadlines met or missed, exploited vulnerabilities fixed, justified and reviewed derogations, scan imports, monitoring sources and their last check) and a status:
| Status | Meaning |
|---|---|
| Evidence present | The registers hold the expected record, with no gap on the date of preparation |
| Partial evidence | Part falls under the entity (disclosure procedure to adopt), or a source is failing |
| To complete | The record is missing or shows a gap (overdue deadline, derogation review passed) |
| Outside the tool | The requirement falls under the client’s procedures (testing, change management) |
- Choose the period (last 12 months or a quarter) and the language (seven languages).
- 6.6 / 6.10, on a client’s row: downloads their evidence.
- Your organisation: the same evidence for your own tenant.
- All clients (archive): an archive with each client’s evidence and yours.
Each document carries your brand, is sealed (SHA-256 fingerprint), is saved in the reports of the organisation concerned (its fingerprint stays verifiable) and is recorded in the audit logs. It states at the top and bottom that it is neither an attestation of compliance, nor a certification, nor legal advice. The same document can be generated from an organisation’s Reports page.
Office hours
Section titled “Office hours”Live sessions with the team, in French and English: getting started, agent, connectors, NIS2 reports. The Office hours tab (and the app’s help panel) shows upcoming sessions in your time zone, with Book. An expert partner also sees the slot reserved for them, when offered. When no session is announced, nothing is shown.