MSSPs and MDRs
A line item
your competitors cannot quote.
Your clients' auditors now ask what reaches their network and who is behind it. Resell Whisper Graph XDR to answer them, with containment a compromised host cannot veto and reports in your firm's name and colours.
Built for MSSP and MDR practices running 50 to 5,000 managed seats.
Two products on one account, sold in your name.
Whisper Graph XDR
An identity for every client machine and AI agent, rules on what it may reach, and containment from the network that the host cannot veto.
A new managed lineWhisper Intelligence
Who is behind any address in a client's alert, with the evidence, inside the SIEM your analysts already run.
For your own SOC
What you can show in the first meeting.
Who their machines are talking to
Every connection their machines and agents make, with the owner, network and country on the other end, and who is looking them up, grouped by operator.
Containment the host cannot veto
Revoke a compromised machine at our edge, even when the attacker owns the box.
Evidence their auditor can check
Controls mapped to SOC 2, ISO 27001, PCI DSS, HIPAA and CMMC, exports with a SHA-256 digest, and a public log of every identity.
A network you can check
Whisper runs its own network, AS219419, allocated by RIPE. Its co-founder and CEO was CIO of RIPE NCC and architect of K-root.
From one bad address to a block, on one screen.
Search a command-and-control address once. Graph XDR rates it, shows which machines reached it and who runs the network behind it, and offers a block at resolution.
Your whole book in one queue.
The partner portal puts every client's fleet in one queue, ordered by who needs a human.
Shared exposure
See which infrastructure more than one of your clients reached, and block it for all of them at once.
Your brand, your margin
Reports carry your firm's name and colours, with your logo shipping soon. Your wholesale rate is quoted in the portal.
Act across clients
Block a name, isolate or release a machine, revoke an identity or push a firewall policy from the same portal.
What ships today.
Stated as it ships. Roadmap items say so.
- Partner portal
Every client's fleet in one queue, ordered by who needs a human.
- Live
- Tenants
One tenant per account, and each client keeps its own.
More than one tenant per account is on the roadmap.
- Live
- Reports in your name
Your firm's name and colours on every report.
- Live
- Your logo on reports
Your logo beside your name and colours.
- Shipping soon
- Event export
Events export as OCSF.
- Live
- Roles per managed client
The portal's roles apply across your firm. Separate roles per client are not shipped.
- Not yet
- Single sign-on
SSO and SAML for the Graph XDR console.
- Not yet
Recorded
How to start.
Sign in and get scoped to your firm
Open the partner portal. It sends you to the shared sign-in and back; an administrator then adds you to your firm.
Add your first client
Hold their key in the firm's custody panel. Everything the portal does inside their estate, it does as their own account.
Triage the queue
The portal opens on one ordered list: which of your clients needs a human right now.
Prove and report, in your name
Reports carry your firm's name and colours, with your logo shipping soon. CSV and JSON exports carry a SHA-256 digest.
What partners ask first.
Resell the graph your competitors cannot quote.
The list price, €3.99 per endpoint per month billed yearly, is your ceiling. Your wholesale rate is quoted in the partner portal.