How is blacklens.io licensed?

blacklens.io is licensed by assets and active users. Assets are scannable objects such as domains, subnets, IP addresses, cloud services, servers, computers and switches; users are people with an active mailbox. Every licence includes all modules, each workspace includes 5 Sentry assets for internal scans, and penetration testing is an add-on. Partners assign licences per tenant and get dedicated terms tiered by volume.

Which partner models are offered?

blacklens.io offers two partner models: VAR (value added reseller) and MSSP (managed security service provider). Both use the same platform with attack surface management, vulnerability management, dark web monitoring and early warning. They differ in the contractual relationship with the end customer and in who operates the platform: with a VAR it is usually the customer, with an MSSP it is your team. We work out which model fits you during the live demo.

What is the difference between VAR and MSSP?

A VAR sells licences directly to end customers; the contract mirrors the one between vendor and end customer, and the customer usually operates the solution themselves. An MSSP offers its own services, such as vulnerability scanning or dark web monitoring, and uses blacklens.io to deliver them. The end customer has no contract with the vendor and contracts only with the MSSP.

Is penetration testing included?

Penetration testing is an optional add-on to the platform and not part of the base scope. You agree the test cadence with your customer, from weekly to yearly. Pentesters work in the same platform: findings are marked as verified, documented with evidence images and retested after remediation. Results go into the pentest report. Details on scope and terms are part of the partner call.

Are there partner discounts?

Yes. Partners get dedicated terms based on the partner model (VAR or MSSP) and volume. We offer annual contracts with flexible scaling: you assign licences per tenant and extend them as your customers grow. You receive the specific terms with the quote after the live demo or in reply to your partner enquiry.

How fast can I onboard my first customer?

Right after activation. Following the live demo you receive your partner tenant. Creating a customer workspace takes a few minutes: add the main domain to the scope and optionally connect cloud accounts such as AWS, Azure, Microsoft 365 or GCP. The first analysis of the customer domain then runs automatically, and first results are usually available within 24 hours.

Can I offer blacklens.io under my own brand?

Yes, in the MSSP model. White label means the platform and PDF reports carry your logo, so your customers see your service rather than the vendor. You set the logo for your tenants in the backoffice. Executive, vulnerability and pentest reports can be scheduled and sent to your customers by email, for example weekly to management.

Which features does blacklens.io offer MSSPs?

blacklens.io is multi-tenant: every customer gets a dedicated tenant with one or more workspaces, and data, users and alerts stay separated. The portfolio dashboard shows exposure score, open findings and dark web hits across all customers. On top come 8 roles with 50 permissions plus custom roles, SSO via Microsoft Entra ID or Google, global alert recipients for your SOC and a REST API with 250+ endpoints and API keys per tenant.

Partner programme

Partner programme for MSSPs and resellers

Offer attack surface management, vulnerability scanning and dark web monitoring from Europe: as a reseller or as your own managed service.

Become a partner Send a partner enquiry

Opens the booking calendar in a new tab.

Portfolio24 workspaces

IIndustrie Muster AG644 critical

KKanzlei Beispiel181 critical

HHandel Nord GmbH37

GGemeinde Musterdorf9

Two partner models, one platform

The contract and who operates the platform make the difference.

Reseller modelcustomer operates

blacklens.ioVendor

Licences at partner terms

IT-Partner Muster GmbHSales, rollout, consultingYou

Licence as from the vendor

Beispiel GmbHOperates the platform

VAR: value added reseller

You sell licences, your customer operates the platform.

Partner terms on licences
Deal registration and sales support
Technical training for your team

MSSP modelyou operate

blacklens.ioPlatform in the background

Licences tiered by volume

IT-Partner Muster GmbHManaged service under your logoYou

Service contract with you only

Beispiel GmbHNo contract with the vendor

MSSP: managed security service provider

You deliver your own services on blacklens.io, your customer contracts only with you.

A dedicated tenant per customer
White label with your logo
Licences tiered by volume

Visuals show sample data.

Multi-tenant by design

Many customers on one platform, cleanly separated.

BackofficeWhite label

IPIT-Partner Muster GmbHYour partner tenantYour logo

IIndustrie Muster AG3 workspaces

HHandel Nord GmbH2 workspaces

GGemeinde Musterdorf2 workspaces

PDFExecutive reportWith your logo, weekly by email

Roles and permissionsExcerpt

RoleFindingsScansReportsUsers

Your SOC teamAll tenants

IT leadIndustrie Muster AG

ManagementIndustrie Muster AG

PentesterPentest licence

Custom rolesSSOMFA

Alerts from all tenantsto your SOC

Compromised identityIndustrie Muster AG, 08:14Critical

Supplier on ransomware leak siteHandel Nord GmbH, 07:52High

New CVE confirmed by PoC scanGemeinde Musterdorf, 07:31High

Delivered to your SOC

EmailMobile appTeamsSlack

Integrationsalerts, tickets, cloud

Jira
Microsoft Teams
Slack
GitHub
GitLab
Elastic
AWS
Microsoft Azure
Google Cloud
Cloudflare
Hetzner
Webhook

REST API250+ endpoints

See the MSSP solution

Licensed by assets and users

Assets are domains, IP addresses, cloud services or servers; users are active mailboxes. You assign licences per tenant.

Pricing and licensing

Licences per tenant3 tenants

Included in every licence

ASMVulnerabilitiesDark webEarly warningAI

TenantAssetsUsers

Industrie Muster AGCorePentest48250

Handel Nord GmbHCore2680

Gemeinde MusterdorfCore1445

5 Sentry assets per workspace included

Every module in every licence
ASM, vulnerability management, dark web monitoring, early warning and AI analysis.
Sentry for internal networks
Scanner as a VM or Docker in your customer's network.
Optional penetration testing
Manual tests on a flexible schedule, from weekly to yearly.

Three steps to partnership

1
Book a live demo
Features, positioning and your benefit as a partner.
2
Get partner access
Your own tenant, ready for the first customers.
3
Follow-up and feedback
We discuss your impressions and the next steps.

Send a partner enquiry

We reply with terms and a proposed date for the live demo.

Terms by model and volume
Annual contracts with flexible scaling.
Platform and scanners in Europe
Hosted in certified data centres in the DACH region (ISO 27001, SOC 2), scanners in Austria, Germany and Switzerland.

In use at MSPs and IT service providers across the DACH region.

“With blacklens.io we have an excellent tool for proactive monitoring of all services and firewall configurations. It saves time and resources, and the reports immediately show where public services can be improved.”

BAlois KoblerBlue Shield Security GmbHMSSP reference

Questions about working together

: blacklens.io is licensed by assets and active users. Assets are scannable objects such as domains, subnets, IP addresses, cloud services, servers, computers and switches; users are people with an active mailbox. Every licence includes all modules, each workspace includes 5 Sentry assets for internal scans, and penetration testing is an add-on. Partners assign licences per tenant and get dedicated terms tiered by volume.
: blacklens.io offers two partner models: VAR (value added reseller) and MSSP (managed security service provider). Both use the same platform with attack surface management, vulnerability management, dark web monitoring and early warning. They differ in the contractual relationship with the end customer and in who operates the platform: with a VAR it is usually the customer, with an MSSP it is your team. We work out which model fits you during the live demo.
: A VAR sells licences directly to end customers; the contract mirrors the one between vendor and end customer, and the customer usually operates the solution themselves. An MSSP offers its own services, such as vulnerability scanning or dark web monitoring, and uses blacklens.io to deliver them. The end customer has no contract with the vendor and contracts only with the MSSP.
: Penetration testing is an optional add-on to the platform and not part of the base scope. You agree the test cadence with your customer, from weekly to yearly. Pentesters work in the same platform: findings are marked as verified, documented with evidence images and retested after remediation. Results go into the pentest report. Details on scope and terms are part of the partner call.
: Yes. Partners get dedicated terms based on the partner model (VAR or MSSP) and volume. We offer annual contracts with flexible scaling: you assign licences per tenant and extend them as your customers grow. You receive the specific terms with the quote after the live demo or in reply to your partner enquiry.
: Right after activation. Following the live demo you receive your partner tenant. Creating a customer workspace takes a few minutes: add the main domain to the scope and optionally connect cloud accounts such as AWS, Azure, Microsoft 365 or GCP. The first analysis of the customer domain then runs automatically, and first results are usually available within 24 hours.
: Yes, in the MSSP model. White label means the platform and PDF reports carry your logo, so your customers see your service rather than the vendor. You set the logo for your tenants in the backoffice. Executive, vulnerability and pentest reports can be scheduled and sent to your customers by email, for example weekly to management.
: blacklens.io is multi-tenant: every customer gets a dedicated tenant with one or more workspaces, and data, users and alerts stay separated. The portfolio dashboard shows exposure score, open findings and dark web hits across all customers. On top come 8 roles with 50 permissions plus custom roles, SSO via Microsoft Entra ID or Google, global alert recipients for your SOC and a REST API with 250+ endpoints and API keys per tenant.

Cybersecurity as a service for your customers.

Book a live demo or send us your partner enquiry.

Become a partner Send a partner enquiry