// Partners

Deliver the engagement or resell Cracken.

Your client pays $5,000 to $30,000 for a web app test. Deliver it for $53 to $234, or resell the account and bill the work around it.

  • Free to join
  • Register a deal, we stay out of it
  • Self-hosted or our cloud
// Commercials

Partner types

Testing another company's estate is always a partner deal.

  • MSSP & MDR providers

    You hold the contract and your analysts run it. Pro is the partner floor at $1,490 a month: three Realms, and the switch that keeps client prompts out of training. Ten Realms is $9,490, and past ten it is quoted.

    Who runs the Operation

    Your analysts

    Name on the report

    Yours

    Where it runs

    Your estate or the client's

    What you buy

    A plan and credits, or a self-hosted licence

    What you keep

    Your engagement fee
    • A Central American provider bid a bank's RFP with Cracken inside its service.
  • Resellers & VARs

    You hold the paper. Past ten Realms nothing is published, so the quote you negotiate becomes your buy price; at ten and below the $9,490 list price is one your client can look up too.

    Who runs the Operation

    Your client's own team

    Name on the report

    Your client's

    Where it runs

    Your client's own cloud

    What you buy

    The account, quoted

    What you keep

    Your margin on that quote
    • A global security consultancy came to us to buy from us and bill its own client.
// Economics

Rate and margin

  • One web app test, bought outside

    What your client pays today.
    $5,000-$30,000
  • The same test on Cracken

    50 to 220 credits by scope. A medium one is 125.
    $53-$234
  • Bill the engagement at your rate, run it for about $133 of allowance, and keep the difference.

  • On resale you buy the account, not credits: at ten Realms your buy price is the published $9,490, past ten it is quoted, and the spread is yours.

  • A Pro credit is about $1.06, and Pro's 1,400 a month cover roughly eleven of these tests.

// Authorization

Safe by design

Set per Operation. New ones start on Semi.

The autonomy control on a running Operation: Pause, beside the Manual / Semi / Auto selector with Semi live.

"Very often we have to perform tasks on production systems. So there are lots of buttons which should not be clicked, obviously." — a senior red team operator at a European MSSP

// Isolation

A Realm is the boundary

Nothing crosses between them.

A Realm card in the Cracken console, named App-Sec, showing when it was last active.

Our own console. Every Realm carries its own Operations, Tentacles and access.

  • No cross-Realm reads

    One client's Operation cannot read another's Artifacts.

  • Access granted per Realm

    An analyst sees only the clients you gave them.

  • One engagement, one Operation

    Each engagement carries its own approvals and autonomy. Run several per client.

// Integrations

Your client's stack

42 integrations live today, 10 landing. The ones your client is most likely to already own:

  • Snyk logo
    Snyk
  • Semgrep logo
    Semgrep
  • GitHub Advanced Security logo
    GitHub Advanced Security
  • GitLab logo
    GitLab
  • Qualys logo
    Qualys
  • Rapid7 InsightVM logo
    Rapid7 InsightVM
  • Microsoft Defender Vulnerability Management logo
    Microsoft Defender Vulnerability Management
  • Microsoft Defender for Cloud logo
    Microsoft Defender for Cloud
  • Okta logo
    Okta
  • Microsoft Entra ID logo
    Microsoft Entra ID
  • CrowdStrike Falcon logo
    CrowdStrike Falcon
  • SentinelOne logo
    SentinelOne
  • Wiz logo
    Wiz
  • Tenable logo
    Tenable
  • Aikido logo
    Aikido
  • Amazon Inspector logo
    Amazon Inspector
  • CrowdStrike Spotlight logo
    CrowdStrike Spotlight
  • Microsoft Defender for Endpoint logo
    Microsoft Defender for Endpoint
  • Orca Security logo
    Orca Security
  • SentinelOne VM logo
    SentinelOne VM
Don't see it?Integration catalog
// FAQ

Before you apply

How does deal registration work?

Register the account by name before the first Operation. Yours for 90 days while the deal moves.

Who supports the client after we resell?

You do. Pause and Interrupt sit with their analyst, no ticket. We do not staff a 24/7 line and will not claim one.

Does our client's data train your models?

On Starter it does; that tier is cheaper because prompts contribute. On Pro and Team it is a switch you own, and on corporate or self-hosted it is off by contract. Running a client's estate, start at Pro.

Who signs the authorization to test a client's estate?

Your client authorizes you and you run the Operation; Cracken is not a party to it. The letter and rules of engagement reach every partner by 30 September 2026, and the draft is at /partners/authorization-outline for your counsel now.

Is there a partner discount?

No — no partner tier, no volume table. Past ten Realms your margin is the spread between the quote you negotiate and the price you set. At or below it there is no spread, so your margin is the work you wrap around the licence.

// People

Named contacts

// Apply

Become a partner

You apply, we reply, and you run the first test on us. The partner demo Realm is on your account from day one: 150 credits, one medium pentest against your own estate.

Book a partner call

Damien, Oleksii or Artem answers within one business day.

Partner handbook