Agentic SOC · for MSPs and service providers

An agentic SOC under your brand, for your clients

The AI SOC that responds in your language.

Powered by AI, supervised by people. A white-label SOC built for service providers: live in minutes and ready for audits.

Become a partner How it works
Operations certified to ISO/IEC 27001:2022
24/7
SOC run by TecnetOne
Your brand
White-label from day one
4 tiers
Better terms as you grow
No fee
No entry fee or minimums
Connects with the stack your client already uses
Wazuh Microsoft NinjaOne Sophos Microsoft Azure AWS Okta Palo Alto Networks CrowdStrike SentinelOne Cisco Fortinet Cloudflare Zscaler Splunk IBM Elastic Qualys Tenable Rapid7 Trend Micro Trellix Bitdefender SonicWall WatchGuard Barracuda CyberArk Ping Identity Cisco Duo Netskope Exabeam Google Cloud Google Workspace Acronis Ubiquiti
ISO/IEC 27001 certification issued by NYCE IQNet, the international certification network
A real differentiator

A SOC certified to ISO/IEC 27001:2022

The operation you resell is audited and certified to the same international standard your clients need to meet. Your brand is backed by a certificate you can show them.

The engine: an agentic SOC

An agentic SOC changes who does the work.

In a traditional SOC, people do all the work. In an agentic SOC, AI agents take on the repetitive work the moment a signal arrives, and analysts make the critical calls.

Traditional SOCPeople do all the work
L1
Monitoring and triage
Shifts reading logs and alerts by hand.
L2
Investigation
Correlating across consoles, case by case.
L3
Threat hunting
Depends on scarce, expensive experts.
TecnetSOC AgenticAgents + a human approval gate
L1
Automated monitoring and triage
Agents correlate and filter every signal the moment it arrives.
L2
Investigation and response
Agents investigate and contain threats; a person approves anything critical.
L3
Hunting and expert review
A senior analyst, backed by AI, takes the complex cases.
200x

more efficient than a traditional SOC. Analysts stop watching consoles and start making decisions: one analyst covers far more clients with no added headcount.

How it works

Your MSP stops forwarding alerts.
It delivers the resolved case.

Signals from across your client's environment come in, AI investigates and connects them, and a person approves the critical steps. Your client receives the case already resolved and explained, under your brand.

Sources · telemetry Detection SIEM · logs Endpoint · ops EDR / XDR · RMM Identity · Zero Trust Identity · cloud Human risk Email · Awareness Recovery Backups · DR EASM · inside and out Attack surface Exposure Vulnerabilities · Patching + more connectors Response · action Contain compromised device isolated Cut off IoC and domain blocked Eradicate persistence removed Clean system restored and running Verify scope across the tenant Close under your brand · L2 gate Executive report In business language Explains the case in plain business terms and acts per policy, reporting under your brand. every closed case feeds the next detection · the loop keeps running TecnetSOC Agentic Core Multi-agent
3 → 1
three alerts, handled as one incident
97
devices reviewed in a single night
0
business impact: the company opened for business as usual
100%
evidence ready to present to your client
Based on a real client case
The partner leads

You sell. We run the SOC.

A managed, multi-tenant service, ready to resell. Your client sees your brand; we run the SOC 24/7 and handle incident response.

01

Your brand, your client

Portal, reports and communications carry your identity (white-label). The client, the commercial relationship and the renewals stay yours.

02

We run it

24/7 SOC every day of the year, detection and response, threat hunting, technical onboarding and end-client support. Your MSP never has to hire security analysts.

03

Wholesale model

You buy wholesale per device and set the price for your client. The bigger your portfolio, the better your terms.

Who does what

Clear from day one

TecnetSOC is a managed service: we handle all the technical work and end-client support. You focus on selling and on your client.

You (the partner)

  • Prospecting and selling to the end client
  • Quoting and signing the contract
  • Billing and collecting from the client
  • The commercial relationship and renewals
  • Registering your deals to protect them

Us (TecnetOne)

  • 24/7 SOC operations, 365 days a year
  • Detection, response and threat hunting
  • Technical onboarding (agents, connectors)
  • End-client support and executive reports
  • Technical presales for your deals (demos, RFPs)
Channel catalog

Each plan includes everything in the one before, and adds more

From the free plan to the regulatory compliance plan. This is what your client gets, all run by TecnetOne under your brand. USD pricing is shared with registered partners.

Visibility
Get visibility at no cost
Free · up to 10 devices
  • Real-time visibility into suspicious activity
  • Continuous security event monitoring
  • Intrusion detection (IDS/IPS)
  • Your own branded console
  • A foundation for any compliance program
Guard
24/7 managed protection
From 20 devices
Everything in Visibility, plus
  • Active 24/7 SOC
  • Advanced protection on every device (EDR)
  • Remote agent deployment and management (RMM)
  • Severity-based patching
  • Business-hours support
Regulated companies
Compliance
For teams that face regular audits
From 50 devices
Everything in Response, plus
  • Dedicated TAM
  • Network monitoring (NOC)
  • Incident response with forensic analysis
  • Annual penetration test
  • 24/7 support desk staffed by TecnetOne
  • Regulatory compliance for your industry
ISO 27001SOC 2HIPAAPCI DSSNIST CSFGDPR

Add-ons for any plan: Backup, DLP, AntiSpam and compliance portals (ISO 27001, PCI DSS, SOC 2 Type II), configured to what your client needs.

Partner tiers

Your terms improve as you grow

You start as Authorized and move up based on the combined device count across your portfolio. Targets are reviewed continuously: the moment you reach a threshold, your terms improve.

Authorized
Your starting point. Sign the agreement and certify one sales rep. You get Silver terms from your first account.
How to get there: agreement + certification
Silver
You sell consistently. Silver terms and deal registration on your first deals.
How to get there: your first sale
Gold
Solid volume. Better terms, priority support, TecnetOne leads and co-marketing.
How to get there: 1,000 devices + a certified technician
Platinum
Top tier. The best terms, a dedicated channel manager, roadmap access and co-branding.
How to get there: 2,500 devices + joint business plan and QBR
BenefitAuthorizedSilverGoldPlatinum
Purchase termsBaseBaseBetterBest
NFR Response (your own devices)102550100
SupportStandardStandardPriorityChannel manager
Co-selling with TecnetOneNoFirst dealsOngoingStrategic
TecnetOne leadsNoNoYesPriority
Co-marketingNoKitCampaign supportMDF and events
Roadmap accessNoNoBeta accessAdvisory Board

Swipe the table sideways to see every tier

From day one

What you get from the start

Even as Authorized, with no entry fee and no purchase minimums.

White-label branding

Portal, reports and communications under your brand.

Platform and 24/7 SOC

Run by TecnetOne every day of the year.

Always-current demo

The platform ready to show your prospects.

NFR for internal use

10 devices on Response for your own company.

30-day Response trial

Free, with a real client and no device limit.

Sales kit and certification

Pitch deck, plan sheets, templates and sales certification.

Deal registration

It protects your work and never locks in your client.

  • Register a deal and it stays protected for 90 days, renewable with documented activity.
  • Your margin is protected from other partners and from TecnetOne direct sales.
  • The renewal is yours as long as you keep the client.

30-day Response trial

Your client tries the flagship plan. You close the deal.

  • Full Response, free for 30 days, with a real client and no device limit.
  • The clock starts when portal access is delivered.
  • If the client doesn't buy by day 30, the account moves to free Visibility (up to 10 devices).
Getting started

Three steps to start selling

No entry fee and no purchase minimums in your first quarter.

1

Sign the agreement

Reseller agreement and program NDA, signed electronically in one day.

2

Get your kit, demo and certification

Editable pitch deck, plan sheets, templates, your up-to-date demo and sales certification.

3

Bring Response to your first client

Register the deal and run the 30-day trial to close your first account.

Put your brand on a 24/7 SOC. Start selling it.

Leave your details and we will send the agreement and the sales kit, and book a 1-hour kickoff with your team. No volume commitment in your first quarter.

By submitting, you agree that TecnetOne may contact you about the Partner Program. Your data is never shared with third parties.