# A line item your competitors cannot quote. > Your clients' auditors now ask what reaches their network and who is behind it. Resell Whisper Graph XDR to answer them, with containment a compromised host cannot veto and reports in your firm's name and colours. *Source: https://www.whisper.security/solutions/mssp* *Last updated: 2026-10-01* --- Built for MSSP and MDR practices running 50 to 5,000 managed seats. - [Book a demo](https://meetings-eu1.hubspot.com/rsaggar) - [Start free](https://console.whisper.security/sign-up?redirect_url=https%3A%2F%2Fwww.whisper.security%2Fsolutions%2Fmssp) ## Two products on one account, sold in your name. - **[Whisper Graph XDR](https://www.whisper.security/products/graph-xdr) (A new managed line)**: An identity for every client machine and AI agent, rules on what it may reach, and containment from the network that the host cannot veto. - **[Whisper Intelligence](https://www.whisper.security/products/intelligence) (For your own SOC)**: Who is behind any address in a client's alert, with the evidence, inside the SIEM your analysts already run. [Run your own SOC on Whisper Intelligence](https://www.whisper.security/solutions/soc) ## What you can show in the first meeting. - **Who their machines are talking to**: Every connection their machines and agents make, with the owner, network and country on the other end, and who is looking them up, grouped by operator. - **Containment the host cannot veto**: Revoke a compromised machine at our edge, even when the attacker owns the box. - **[Evidence their auditor can check](https://www.whisper.security/trust)**: Controls mapped to SOC 2, ISO 27001, PCI DSS, HIPAA and CMMC, exports with a SHA-256 digest, and a public log of every identity. - **[A network you can check](https://www.whisper.security/about-us)**: Whisper runs its own network, AS219419, allocated by RIPE. Its co-founder and CEO was CIO of RIPE NCC and architect of K-root. ## From one bad address to a block, on one screen. Search a command-and-control address once. Graph XDR rates it, shows which machines reached it and who runs the network behind it, and offers a block at resolution. ![Whisper Graph XDR console: a command-and-control address searched once and rated critical, with a block at resolution, the machines that reached it, its graph neighbourhood and its owner.](https://www.whisper.security/media/kg8Dny51NICYHNZV_home-path-mssp-indicator.png) ## Your whole book in one queue. The partner portal puts every client's fleet in one queue, ordered by who needs a human. - **Shared exposure**: See which infrastructure more than one of your clients reached, and block it for all of them at once. - **Your brand, your margin**: Reports carry your firm's name and colours, with your logo shipping soon. Your wholesale rate is quoted in the portal. - **Act across clients**: Block a name, isolate or release a machine, revoke an identity or push a firewall policy from the same portal. [Read the partner docs](https://www.whisper.security/docs/partners) ## What ships today. Stated as it ships. Roadmap items say so. | Capability | What you get | Status | | --- | --- | --- | | [Partner portal](https://www.whisper.security/docs/partners) | Every client's fleet in one queue, ordered by who needs a human. | Live | | [Tenants](https://www.whisper.security/pricing#graph-xdr) | One tenant per account, and each client keeps its own. (More than one tenant per account is on the roadmap.) | Live | | Reports in your name | Your firm's name and colours on every report. | Live | | Your logo on reports | Your logo beside your name and colours. | Shipping soon | | Event export | Events export as OCSF. | Live | | Roles per managed client | The portal's roles apply across your firm. Separate roles per client are not shipped. | Not yet | | Single sign-on | SSO and SAML for the Graph XDR console. | Not yet | *Recorded 2026-10-01* ## How to start. 1. **Sign in and get scoped to your firm**: Open the partner portal. It sends you to the shared sign-in and back; an administrator then adds you to your firm. 2. **Add your first client**: Hold their key in the firm's custody panel. Everything the portal does inside their estate, it does as their own account. 3. **Triage the queue**: The portal opens on one ordered list: which of your clients needs a human right now. 4. **Prove and report, in your name**: Reports carry your firm's name and colours, with your logo shipping soon. CSV and JSON exports carry a SHA-256 digest. ## What partners ask first. - **Does Whisper run a managed service of its own?**: No. You run the service. Whisper gives you the controls, the partner portal and the evidence. - **We already resell an EDR. Why add Graph XDR?**: Because it sells a control an endpoint agent cannot: containment from the network that a compromised host cannot veto, and every client connection logged with who is on the other end. - **[Can we run every client from one place?](https://www.whisper.security/docs/partners)**: Yes. The partner portal puts every client's fleet in one queue, ordered by who needs a human, and each client keeps its own tenant. Separate roles per client are not shipped yet. - **Do clients need to install anything?**: Not to start. An identity and DNS-level policy work with no software on the host. Laptops take a signed profile from Intune, Jamf, Kandji, Omnissa or Hexnode. - **[How is our wholesale rate set?](https://partners.whisper.online)**: Your wholesale rate is quoted in the partner portal once you are a partner, and Whisper's published list price is your ceiling. - **[Which tools does it connect to?](https://www.whisper.security/products/integrations)**: Events export as OCSF, and Whisper Intelligence answers inside Splunk, Microsoft Sentinel, Wazuh, OpenCTI and MISP. ## Resell the graph your competitors cannot quote. The list price, €3.99 per endpoint per month billed yearly, is your ceiling. Your wholesale rate is quoted in the partner portal. - [Book a demo](https://meetings-eu1.hubspot.com/rsaggar) - [Start free](https://console.whisper.security/sign-up?redirect_url=https%3A%2F%2Fwww.whisper.security%2Fsolutions%2Fmssp)