For Fractional & Virtual CISOs

Your Clients Need a Pentest.
You Earn 20% Every Time.

When your clients need pentest evidence for NIS2, DORA, ISO 27001, or SOC 2, refer them to SQUR. We handle the test in 24 hours, you earn 20% commission with a 180-day attribution window. No exclusivity, no minimums.

20%
Per referral, €399 at list price
20%
Commission rate
180d
Attribution window
squr.ai/scan
Live Demo
SQUR platform preview
play_arrow
Watch the demo

What You're Solving for Your Clients

The three pentesting problems your advisory clients face, and why the standard market answer doesn't work for them.

receipt_long

Budget Constraints

EUR 10-30k per manual pentest blocks most of your clients. They defer, cut scope, or settle for a scan tool that doesn't produce audit-ready evidence.

EUR 80k/year for 2 tests
event_busy

6-Week Procurement

Traditional pentests take weeks to scope, quote, and schedule. For NIS2 compliance clients under enforcement pressure, that's too slow.

4-6 week backlog
description

Evidence Formatting

Standard pentest PDFs don't document what NIS2 asks for: scope, methodology, results, criticality and remediation. You or your client spend 8-12 hours restructuring them for the Art. 21 / Section 30 BSIG documentation an auditor will review.

8-12 hrs documentation lift

Same Budget. Continuous Coverage.

When you refer a client to SQUR, this is what they get, and why they'll thank you for it.

Traditional Pentesting
Twice a year

Full pentest (EUR 80k budget)

EUR 40k each - 4-6 weeks delivery
363 days of uncovered attack surface
EUR 2,847 per verified vulnerability
Report stale within 24 hours
SQUR On-Demand Testing
Continuous

Ongoing testing (same EUR 80k)

EUR 1,995 each - 24h delivery
365 days of continuous coverage
€127 per verified vulnerability
Always-current NIS2 security-testing evidence

How the Referral Works

No paperwork, no exclusivity, no minimums. Introduce us when the situation arises.

1

Apply Once

Fill out the partner form on /partners. You get a unique referral link and access to our partner resources.

2

Refer a Client

When a client needs a pentest, share your link or mention SQUR. We handle everything: scoping, test, report delivery.

3

Client Pays

Your client pays €1,995. We track the attribution for 180 days, even if they don't purchase immediately.

4

You Earn 20%

20% of the net invoice, €399 at today's list price, paid monthly on the 15th. You get the co-branded NIS2 security testing package to use with all your clients.

What Partners Get

Everything you need to position pentest delivery as part of your advisory offering, with zero operational overhead.

20%

Per Referral

20% of every €1,995 pentest your clients book: €399 at today's list price. 180-day attribution window.

Co-branded

NIS2 Security Testing Package

Pentest report with documented scope, methodology, findings, criticality and remediation, structured to support Art. 21 and Section 30 BSIG documentation. Reduces your documentation lift by hours.

Partner

Pricing on Credits

Bundle pentests into your advisory offering at 25% off if you prefer to resell directly.

No exclusivity No minimums 180-day attribution EU data (Brussels) Paid monthly on the 15th
20%
Per referral, €399 at list price
20%
Commission rate
180d
Attribution window
24h
Report delivery for clients

The full arc

One arc. Your clients enter where it fits.

  1. 01 · Live today

    See

    The free Attack Surface view shows what's exposed: subdomains, TLS, headers, open ports. It never tests, so it shows the doors that exist, not whether they open.

  2. Where your clients start

    02 · Live today

    Prove

    The autonomous pentest actually tests, with your authorisation. Every result carries a working proof of exploit and an audit-ready report, back in 24 hours for EUR 1,995.

  3. 03 · In development

    Close

    Auto-repair takes a proven pentest finding, generates the fix, applies it once you approve, and re-runs the same exploit path until it fails. Early access is open.

Auto-repair applies to proven pentest findings only. The free Attack Surface view never tests, so there is nothing there to close. That boundary does not move.

Start Referring: Earn 20% Per Client

No commitment, no exclusivity. Apply once, refer when the situation arises.