You own the markup and the relationship
A CPPO lets you resell Enforza at a price you set and keep the spread. You hold the client's commercial and contractual relationship; we authorise the offer behind it.
Partner program
Resell or deliver a cloud firewall, under your own brand.
Give your clients cloud egress, ingress and east-west control with the capability of the cloud-native firewall and more — without the per-GB tax or the enterprise-vendor bloat. Flat, resellable pricing means predictable partner margin; multi-tenant by default and white-label to your own domain means one fleet console across every client and cloud.
Refer it, resell it, or run it as your own service
Whichever way you go to market, the economics are the same: a flat per-firewall licence you margin once, with no per-GB meter underneath the client bill.
- Refer
Refer
Send us a lead and we close and bill it. The lowest-touch way to put a flat-priced cloud firewall in front of clients who are bleeding on the per-GB data-processing tax.
Reseller program → - Resell
Resell via AWS Marketplace
Transact through AWS Marketplace with a Channel Partner Private Offer (CPPO): you set the markup and own the client relationship while AWS handles billing, tax and disbursement — and the spend counts toward the client's AWS commit.
How resell works → - Deliver
Deliver as a managed service
Run a fleet of firewalls across many clients from one console, isolated tenant by tenant, under your own brand and your own domain. A managed cloud-firewall line you operate end to end.
MSSP / MSP platform →
Built for the teams who deliver cloud security
If your clients run in the cloud, Enforza is a firewall you can quote, resell, brand and manage on their behalf — without an enterprise-platform rollout.
-
Resellers & VARs
A flat per-firewall line is easy to quote and easy to reconcile — no per-GB meter to true up against a client's traffic at the end of the month. Predictable to buy, predictable to sell, and transactable through AWS Marketplace.
Learn more → -
MSSPs & MSPs
Add a managed cloud firewall to your catalogue — operate a fleet across clients from one pane of glass, isolated per tenant, run it under your own brand, and stream each client's logs to their own SIEM, never through us.
Learn more → -
Cloud consultancies
Drop Enforza into the architectures you already design across AWS, Azure and GCP. Policy as code through a GitHub pipeline, or the Cloud Controller console by hand — whichever fits the client's team.
Learn more → -
System integrators
Deploy a single Linux VM inside the client's own network, with no inbound management port to expose and compliance gating built in. The control your clients need, without an enterprise-platform rollout.
Learn more →
The right firewall to resell, and to run for clients
Every benefit is an outcome for you and your clients — flat to quote, predictable to margin, simple to operate, and theirs to trust.
-
Predictable partner margin
One flat per-firewall line — no per-GB tax, no charge by CPU, instance size, protected IP or protected device. You margin a fixed number, not a moving meter, so the spread is yours to keep and easy to forecast.
-
No per-GB surprise on the client bill
Your clients get a quote that doesn't balloon when traffic spikes. The cloud-native firewall and NAT gateway meter per gigabyte; Enforza doesn't — a cleaner bill for them and a cleaner story for you.
-
Multi-tenant by default
Tenant isolation is the default, not an upgrade. Manage many client tenants separately from one place, with per-tenant policy — the foundation for running a fleet across clients.
-
White-label, your brand and domain
Run Enforza under your own brand on your own domain (custom FQDN) with your own console theming. Your clients see your firewall; you keep the relationship.
-
Multi-cloud, one fleet console
The same firewall NVA runs on AWS, Azure, GCP or on-premise — one product to learn, one fleet view across every client and every cloud, driven by GitOps or the console.
-
Their data stays theirs
Log export streams to each client's own SIEM, never through Enforza's cloud. No inbound management port and no admin UI to expose — a smaller attack surface on the security device itself.
Resell through AWS Marketplace with a private offer
For partners who transact on AWS, a Channel Partner Private Offer (CPPO) is the lowest-friction resale path — and the one enterprise buyers prefer.
AWS runs the billing
AWS handles billing, tax and disbursement to both you and us — no billing back-office for you to build, and one invoice on the client's existing AWS account.
It counts toward their AWS commit
Marketplace spend draws down a client's committed AWS spend, which is exactly why enterprise buyers prefer transacting on-platform over an off-platform contract.
The Enforza AWS Marketplace listing is public. Talk to us about CPPO selling authorisations for your reseller deals — the commercial terms are set per partner.
Pick the path that fits how you sell
-
Reseller program
Resell a flat-priced cloud firewall that's easy to quote — refer, or transact via AWS Marketplace (CPPO).
Open → -
MSSP / MSP platform
Run a managed cloud-firewall line: fleet console, multi-tenant isolation, white-label, margin you keep.
Open → -
White-label firewall
Your brand, your domain, your console — our engine underneath. Honest on exactly what's themable.
Open → -
Multi-tenant firewall console
Tenant isolation by default — manage clients separately, with per-tenant policy, from one console.
Open →
From request to delivery
Three steps from asking for access to resells and managed delivery for your clients.
-
Request partner access
Partner access is gated, not self-serve. Email partners@enforza.io (or use the form below) and tell us about your business and the clients you serve. We will talk through fit, the model that suits you, and white-label options.
-
Onboard
We walk you through the platform — the fleet view, multi-tenant isolation, GitOps and console workflows, white-label setup, compliance gating and live log streaming — so your team is ready to deliver.
-
Resell or deliver for clients
Refer, transact via AWS Marketplace, or stand up a firewall inside a client's network in minutes on a Linux VM they provision. Drive it your way and manage the whole fleet from one pane of glass.
Request partner access
Partner access is by request. Tell us about your business and the clients you serve and the partner team will be in touch to talk through fit, the model that suits you, and white-label options.
Partner program — common questions
How do I become an Enforza partner?
Partner access is gated rather than self-serve. Email partners@enforza.io (or use the form on this page) and tell us about your business and the clients you serve. We will talk through which model fits — referral, reseller via AWS Marketplace, or managed/white-label delivery — and get you onboarded. The open free-tier sign-up is the direct-customer path; partners come through the partner inbox.
What are the ways to partner with Enforza?
Three. Refer (send us a lead, we close and bill it). Resell via AWS Marketplace using a Channel Partner Private Offer (CPPO) — you set the markup and own the client relationship while AWS handles billing, tax and disbursement. Or deliver Enforza as your own managed service — run a fleet of firewalls across many clients from one console, isolated per tenant, under your own brand and domain.
Why is flat per-firewall pricing better for partners?
Because you margin a fixed number, not a moving meter. The cloud-native firewall and NAT gateway charge per gigabyte of data processed, so a client's bill — and any margin you build on top of it — moves with their traffic. Enforza is one flat per-firewall licence with no per-GB tax and no charge by CPU, instance size, protected IP or protected device, so partner margin is predictable and a client quote doesn't balloon when traffic spikes. At modest egress the flat line is typically 60–80% cheaper than a metered cloud-native firewall stacked with a NAT gateway.
Can I run Enforza under my own brand?
Yes. White-label is shipped: run the console on your own domain (a custom FQDN) with your own branding and theming, so your clients see your firewall. Multi-tenancy is the default, so you can isolate and manage many client tenants separately from one place. See the white-label firewall page for exactly what's themable.
Does Enforza compete with my managed-service margin?
No — that's the point of the model. You own the client relationship and the markup; Enforza is the flat-priced engine underneath. On the AWS Marketplace path, a CPPO lets you set your own resale price and keep the spread while AWS runs the billing. On managed delivery you set your service price; the predictable flat licence is your cost base, not a meter that competes with your margin.
Whose cloud does the firewall run in, and who holds the data?
The firewall runs as a single Linux VM inside the client's own network, on AWS, Azure, GCP or on-premise. Logs stream to the client's own SIEM, never through Enforza's cloud, and there is no inbound management port or admin UI exposed on the device. The client's traffic and data stay the client's — which is exactly the assurance an MSSP or VAR needs to give their own customers.
Resell the firewall built for the gap.
Become an Enforza partner.
Cloud egress, ingress and east-west control — the capability of the cloud-native firewall and more, at a flat per-firewall price you can resell. Multi-tenant by default, white-label to your own brand and domain, on any cloud. Partner access is by request.