Refer clients. Earn on accepted referrals.
If your clients need independent penetration testing, Exploitr gives you a straightforward way to earn referral income without building an in-house security testing team.
You make the introduction. We handle scoping, quoting, testing and reporting, while you stay focused on your clients and your core services.
Who is this for
When your clients need an independent penetration test, introduce them to a specialist provider without expanding your own delivery team. You earn an agreed referral fee once the client has paid the relevant invoice.
Complement your existing IT and security services with independent penetration testing. Give clients access to specialist testing without taking on the work or competing with a separate testing team.
Your clients may need security testing before launch, after a major release or during enterprise procurement. Refer them to Exploitr for independent testing while you remain focused on building and supporting their products.
Clients preparing for investor due diligence, enterprise procurement or security assurance may need independent testing. We can help them scope an appropriate engagement and provide supporting documentation.
Why partner with Exploitr
How it works
Tell us about your business, the clients you support and the testing they typically need. We will discuss the programme and agree suitable terms in writing.
Register the opportunity with us and receive written confirmation that the referral has been accepted. We then handle scoping, quoting and delivery directly with the client.
Once the client has paid the relevant invoice, you submit your invoice under the agreed terms and we arrange payment in accordance with the partner agreement.
Tell us about your business and the clients you support. We will get back to you within one business day to discuss whether the programme is a good fit.
Questions
We work with a small number of trusted advisers, including IT consultants, vCISOs, MSPs, MSSPs, digital agencies and professional advisers. We assess each partnership individually and only accept referrals for services we can deliver to the required standard.
See our penetration testing services for an overview of our capabilities.
The fee is agreed in writing before a referral is made. The applicable amount and calculation are confirmed under the agreed terms, so both parties know the commercial arrangement before the opportunity proceeds.
Contact us to discuss the programme.
Payment is triggered once the client has paid the relevant invoice, subject to the agreed partner terms. You submit your invoice in accordance with those terms, and we arrange payment within the agreed timeframe.
Before making an introduction, send us the client's name, contact details, and the opportunity you are referring. We confirm accepted referrals in writing so both parties have a record of the introduction and the applicable terms.
Tell us about the opportunity before making the introduction. We will confirm in writing whether it qualifies as an accepted referral. This helps avoid uncertainty where a client is already in our pipeline or has an existing relationship with Exploitr.
This is confirmed in the written terms for the referral. We agree which engagement or engagements qualify before the referral proceeds, so the position is clear for both parties.
No. You can work with other penetration testing providers. We ask that, for a specific opportunity you have referred to Exploitr, you do not simultaneously refer the same client to a direct competitor for the same scope. The arrangement applies to that opportunity, not your wider business.
Exploitr focuses on penetration testing and offensive security assessments. We do not offer managed security services, compliance auditing, or vCISO retainers. We handle the agreed testing engagement without seeking to replace your broader services or your wider client relationship.
We handle the technical scoping, proposal, testing, reporting and agreed follow-up directly with the client. We respect the role of the referring partner and can agree how communications and introductions should work for each opportunity.
Our work is project-based, and we can provide repeat assessments and post-engagement advice where appropriate. We do not offer managed security services, so you can continue delivering your own ongoing services to the client.
Complete the enquiry form on this page with details about your business and the clients you support. We will reply within one business day to discuss the programme, answer your questions and agree any terms before you make a referral.