For MSPs, MSSPs & vCISOs

Hand every client a credential-exposure report — branded as your shop — at their next review.

GhostCred scans your client's repos, configs, and cloud for exposed API keys, tokens, and service-account credentials — then emails you a finished PDF on your letterhead, mapped to SOC 2, HIPAA, NYDFS, and CMMC, that you resell as your own quarterly deliverable.

Resell per client, or flat $799/mo unlimited · your brand on every report · secrets redacted before storage

Your Logo
Confidential

Prepared for Acme Law LLP

Credential Risk Assessment

78risk

4 findings · 1 critical

Mapped to SOC 2 · HIPAA · NYDFS

Prepared by Your Shop · powered by GhostCred

Before GhostCred

Your QBR is a recycled health-check slide and a verbal “we're keeping an eye on things.” When a client's auditor asks for proof you checked for exposed credentials, you're forwarding a screenshot from a tool with someone else's name on it.

After GhostCred

You walk in with a clean PDF — your logo on the cover, every exposed key scored and mapped to the frameworks they report against. The renewal stops being a conversation, and you bill it on top of your retainer for one three-minute scan a quarter.

Why MSPs resell it

The artifact your clients can see

Your brand, not ours

Your logo on the cover, your accent color, “Prepared for [Client]” on every report. It reads as your deliverable — clients never see a vendor's name.

Speaks your client's audit language

Every finding is mapped to SOC 2, HIPAA, NYDFS 500, and CMMC — so when their auditor asks what you've checked, the answer is in writing.

Zero build on your end

Same engine, your branding. One ~3-minute scan per client per quarter produces a finished PDF. Nothing for your team to build or maintain.

You never hold the client's secrets

Secret values are redacted to the first four characters before anything is stored — so a report with your name on it never becomes your liability.

Every finding is mapped to the frameworks your clients report against:

SOC2NYDFSHIPAACMMC

How it works

Your brand on it in three steps

01

Set your brand once

Drop in your logo, name, and accent color from your dashboard. Every report you generate inherits it automatically.

02

Scan a client repo or config

Paste a repo URL or upload a config. The engine finds exposed keys, tokens, and credentials and scores the risk in minutes.

03

Hand it over at the review

A branded PDF — “Prepared for [Client],” compliance impact per finding — lands in your inbox. You present it as your own quarterly deliverable.

Partner pricing

Two ways to resell it

Start per client and grow with your book, or go flat and never think about counts. Either way you resell under your own brand at whatever margin you set.

Reseller · pay per client

$39/client/mo

Pay per client you cover and set your own retail price — you keep the margin, and adding clients is your upside. Adjust the count anytime; branded reports and scan API included. Best if you're starting with a handful of clients.

$39 / client / month · adjust anytime · resell at your own retail price and keep the margin

Flat · unlimited

$799/month

Unlimited branded reports across every client, your logo and name on every cover, bulk scan API, and client management — one flat fee, no counting clients. Best once you're past ~20 clients.

Annual option: $7,990/yr. Set your brand in the dashboard, or book a call and we'll brand a sample for your shop.