# Partners

> Run a book of customers from one portal: onboard them, triage the queue, search one indicator across every estate, contain it, and prove what happened.

*Source: https://www.whisper.security/docs/partners*

---
The partner portal at `https://partners.whisper.online` is where a firm that runs security for other companies works. You sign in as your own firm and reach each customer's estate as that customer's own account, so what the portal reads is exactly what that account can read.

Every endpoint a firm brings live holds a routable IPv6 address published in public DNS and in the public registry, so a customer can check their own machine with no key and nothing installed:

```bash
curl -s https://rdap.whisper.online/ip/2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478
```

Firms, customers, accounts and endpoints are separate things, and [the model](/docs/partners/model) settles which is which. An operator gains authority over a firm in [two calls](/docs/partners/join), and a company goes live through [four steps](/docs/partners/onboard) that end with a machine you watch check in. The authority itself is [the customer's own key](/docs/partners/keys), held by the firm and ended by rotating it.

The day starts at [the queue](/docs/partners/queue), which puts the customers needing a human first, and moves into [detections and the cases you open from them](/docs/partners/incidents). One indicator can be [searched across every customer at once](/docs/partners/hunt), and destinations [two or more of them reached](/docs/partners/overlap) are where a single answer becomes a rule for the rest. Containment is a fixed set of [response verbs](/docs/partners/respond), and [a playbook](/docs/partners/playbooks) runs them in an order without waiting for you.

[Resolver, zone, mesh and footprint settings](/docs/partners/policy) are held on the customer they belong to. When a customer asks what happened, [the negative answer and the document around it](/docs/partners/prove) is what you hand over, [the record of who did what](/docs/partners/audit) is read from their own estate, and [who in your firm may do any of it](/docs/partners/team) is set once.