PMAP Partner Program

Grow your security business on a vulnerability management platform

PMAP is an enterprise vulnerability management platform and multi-vendor scan orchestrator, and the partner program is how you bring it to your customers. Whether you run a managed service, resell into a region, integrate security stacks, or deliver assessments and pentests, this is where you build a repeatable practice on PMAP across every account you serve.

Why partner

Why providers build their practice on PMAP

Most customers do not run a single scanner anymore. They run a mix of vulnerability scanners, web and code testing tools, and pipeline checks, and the result is duplicate findings, no single owner, and remediation that stalls. PMAP is built around that gap. It orchestrates scans across vendors, correlates and de-duplicates the findings into one record per real issue, and carries each one through triage, SLA, ticketing, and retest. The partner program is how that capability reaches the customer through you.

You stay the provider the customer works with, and you keep the relationship and the commercial control. We supply the platform, the connector library, and the engineering support underneath, so you deliver managed vulnerability management, resell with confidence, integrate it into a security stack, or run assessments on it without building tooling of your own. The program is a working arrangement, repeatable across every account you bring into it.

PMAP partner ecosystem delivering vulnerability management alongside customers

Partner tracks

Find the partner track that fits how you deliver

  • Managed service partner

    MSSP and managed VM providers

    You run vulnerability management as a service, and you need one platform that scales across every customer instead of a separate toolset per account.

    • Run a managed practice on a multi-tenant platform that separates each holding and subsidiary you onboard.
    • Orchestrate scans across Tenable, Qualys, Rapid7, and Nessus, then correlate the findings into one record per real issue.
    • Carry every finding through triage, SLA, ticketing, and retest, so your service shows progress, not just scan output.
    Build your managed service
  • Reseller and distributor

    Resellers, VARs, and distributors

    You sell security platforms into a region or a sector, and you want a vulnerability management product that is straightforward to position and to renew.

    • Add an enterprise vulnerability management platform to a portfolio that buyers already ask for by name.
    • Register deals, protect the opportunities you bring in, and co-sell alongside a team that knows the product.
    • Lead with multi-vendor coverage and consolidation, a message that lands in enterprises running several scanners.
    Resell PMAP
  • System integrator and MSP

    System integrators and MSPs

    You build and run security stacks for customers, and the value is in wiring the tools together so findings actually reach the teams that fix them.

    • Deploy PMAP into a customer environment and connect it to the scanners they already license.
    • Wire ITSM and CI/CD into the workflow, from Jira and ServiceNow tickets to GitHub, GitLab, and Jenkins pipelines.
    • Keep the asset inventory current with CMDB asset-sync and network-discovery imports across the estate.
    Deliver integrations
  • Consulting and pentest firm

    Consulting and pentest firms

    You deliver assessments and penetration tests, and your margin lives in the days each engagement takes rather than the tooling you rebuild every time.

    • Run assessment projects with scoped engagements, milestones, and assessment runs in one workspace.
    • Track contracted capacity against framework agreements, with planned and actual man-days kept in sync.
    • Hand customers a signed report from the platform, generated as PDF, DOCX, or HTML from the findings you logged.
    Run engagements on PMAP

What you get

What the partner program gives you

The benefits below are written for the work, not for a brochure. They are what a partner actually leans on before a deal, during a deployment, and as the practice grows into more accounts and regions.

  • Partner portal

    A single place to register opportunities, track deployments, and pull the enablement you need before you stand in front of a customer.

  • Enablement and training

    Your team gets trained on the connector library, the correlation engine, and the finding workflow before the first account, not during it. Enablement is shaped around the track you join.

  • Deal registration

    Register the opportunity, protect the work you put into it, and co-sell alongside a team that knows how PMAP gets deployed.

  • Co-marketing

    Build the joint story around real vulnerability management outcomes. We keep the claims grounded and verifiable, you keep the customer trust you have earned.

  • Dedicated partner support

    A named contact who knows the platform and the connectors, not a generic reseller desk. The kind of support that answers while a deployment is still in flight.

  • Joint go-to-market

    Plan the motion together, from which use cases to which sectors and which entry points. PMAP shapes the technical side, you own the relationship.

How it works

How the partner program works

Becoming a PMAP partner follows the same path for every track. It starts with a scoped conversation about fit, not a contract, and it grows as the joint work proves itself.

  1. Apply

    Tell us which track fits and which customers you serve. The first step is a scoped conversation about where PMAP adds to what you already deliver, not a contract.

  2. Enable

    Your team gets portal access, training on the platform and the connectors, and a named technical contact. Enablement is sequenced to your track and the customers you serve.

  3. Co-deliver

    Run the first account together. We stay close on the technical side, whether that means standing up a managed service, closing a resale, wiring the integrations, or scoping the first assessment, while you keep the customer relationship.

  4. Grow

    Expand into more accounts, more use cases, and more regions. Deal registration and co-marketing scale with the partnership as the joint book grows.

Built to connect

Built to connect with the tools your customers run

An integration partner does not want another island. PMAP ships a connector library that pulls findings from the scanners your customers already license, then pushes the work back into the ticketing and pipeline tools their teams live in. The categories below are where that connection happens, no certified-partner claim attached.

  • VM scanners
  • DAST
  • SAST
  • SCA
  • CI/CD pipelines
  • ITSM ticketing
  • CMDB asset-sync
  • Network discovery

Partner program questions

How do I become a PMAP partner?

Start by telling us which track fits and which customers you serve. The first step is a scoped conversation, not a contract, where we work out where PMAP adds to what you already deliver. From there, enablement and the first joint account follow. You can begin from the apply page or by talking to the partnerships team.

Which partner track is right for my business?

It depends on how you reach the customer. Managed providers run vulnerability management as a service on PMAP, resellers and distributors sell it into a region, system integrators deploy and connect it inside a customer stack, and consulting and pentest firms deliver assessments on it. If more than one fits, the partnerships team will help you pick the entry point that matches your book.

What does the partner program cost, and how does the commercial model work?

The commercial model depends on your track and how you deliver, so we set it during onboarding rather than publishing a fixed number. Deal registration protects the opportunities you bring in, and co-selling terms are agreed before the first joint account. We work out the model with you in the scoped conversation, so it fits the way you already sell and deliver.

Which tools does PMAP connect with?

PMAP ships a connector library across vulnerability scanners, DAST, SAST, and SCA tools, CI/CD pipelines, ITSM ticketing, CMDB asset-sync, and network discovery. For partners, that means you can deploy it alongside the scanners a customer already licenses and wire it into the ticketing and pipeline tools their teams already use, rather than replacing what works.

Partner with us

Become a PMAP partner

Tell us which track fits and who you serve, and the PMAP partner program meets you with a scoped conversation about where the platform adds to what you already deliver. Whether you are evaluating the fit or ready to start, the partnerships team picks up on the other side.