You own
- The client relationship and the commercial terms
- The markup and the margin on every deal
- Your own brand and domain on the console (white-label)
- First-line conversation with the client
Partners · Resellers & VARs
Resell a cloud firewall that's easy to quote.
One flat per-firewall line — no per-GB meter to true up against a client's traffic at month end. Refer it, or transact through AWS Marketplace with a private offer: you set the markup and own the relationship, AWS handles the billing. Multi-tenant by default, white-label to your own brand.
A flat line beats a moving meter
The cloud-native firewall meters per gigabyte. That's hard to quote, hard to margin, and a nasty surprise on a client's bill. A flat per-firewall licence fixes all three.
-
A flat line, not a per-GB true-up
The cloud-native firewall and NAT gateway meter per gigabyte of data processed, so a quote you give a client is really a guess at their traffic. Enforza is one flat per-firewall licence — you quote a fixed number, the client pays a fixed number, and nobody trues up at month end.
-
Margin you can forecast
Because the cost base doesn't move with traffic, the spread you build on top of it doesn't either. No charge by CPU, instance size, protected IP or protected device, so there's nothing to surprise you — or the client — on the invoice.
-
Typically 60–80% under the cloud-native firewall
Against a metered cloud-native firewall stacked with a NAT gateway at modest egress, the flat line is usually 60–80% cheaper — a wedge you can sell on, with room for your markup and still a saving for the client.
-
One product, every cloud
The same firewall NVA runs on AWS, Azure, GCP or on-premise, driven by GitOps or the console. One thing to learn, one thing to quote, wherever your client runs.
Resell through AWS Marketplace
A Channel Partner Private Offer (CPPO) is the lowest-friction resale path — and the one enterprise buyers prefer, because it lands on the AWS bill they already have.
-
Transact on the client's AWS account
The Enforza AWS Marketplace listing is public. With a Channel Partner Private Offer (CPPO) you resell on top of it, so the deal lands on the client's existing AWS bill — no new vendor to onboard through procurement.
-
You set the markup, AWS runs the billing
A CPPO lets you resell at a price you set and keep the spread. AWS handles billing, tax and disbursement to both you and us, so there's no billing back-office for you to build.
-
It counts toward their AWS commit
Marketplace spend draws down a client's committed AWS spend — exactly why enterprise buyers prefer transacting on-platform over an off-platform partner contract.
We don't publish a fixed discount or margin on the site — CPPO selling authorisations and commercial terms are agreed per partner. Email the partner team to set yours up.
What you own, what we provide
You hold the client and the markup. We hold the engine, the console and the support floor underneath it.
Enforza provides
- The flat-priced firewall NVA and the fleet console
- Multi-tenant isolation so clients stay separate
- Compliance packs and advise-or-enforce guardrails
- Self-upgrade with rollback, and email support in every plan
Reseller program — common questions
How does the Enforza reseller program work?
Two routes. Refer a lead and we close and bill it. Or resell directly: transact through AWS Marketplace with a Channel Partner Private Offer (CPPO), where you set the markup, own the client relationship, and AWS handles billing, tax and disbursement. Partner access is gated — email partners@enforza.io to get set up. We don't publish a fixed discount or margin on the site; that's agreed per partner.
Can I resell Enforza on AWS Marketplace?
Yes. The Enforza listing is public, and a Channel Partner Private Offer (CPPO) lets you resell on top of it at a price you set. AWS bills the client on their existing AWS account, handles tax and disbursement, and the spend counts toward the client's committed AWS spend — which is why enterprise buyers prefer it over an off-platform contract. Talk to us about CPPO selling authorisations for your deals.
Why is a flat-priced firewall easier to resell?
Because you quote a fixed number instead of a meter. The cloud-native firewall and NAT gateway charge per gigabyte processed, so any quote you give is a guess at the client's traffic — and your margin moves with it. Enforza is one flat per-firewall licence with no per-GB tax and no charge by CPU, instance size, protected IP or protected device, so the cost base is fixed, the markup is predictable, and the client bill doesn't balloon when traffic spikes.
Can I sell it as a white-label firewall?
Yes. White-label is shipped: you can run the console on your own domain (a custom FQDN) with your own branding, and multi-tenancy is the default so you can keep each client's environment separate. See the white-label firewall page for exactly what's themable.
Do my clients keep their own data?
Yes. The firewall runs as a single Linux VM inside the client's own network, logs stream to the client's own SIEM rather than through Enforza's cloud, and there's no inbound management port or admin UI exposed on the device. The client's traffic and data stay the client's — a clean assurance for you to pass on.
What does it cost to resell?
Enforza is a flat per-firewall licence — £179/month per firewall, dropping to £149 from the sixth — plus the VM the client runs it on, with no per-GB data-processing charge. That's your cost base; your resale price and margin are yours to set, on Marketplace via a CPPO or directly. At modest egress the flat line is typically 60–80% cheaper than a cloud-native firewall stacked with a NAT gateway, which is the saving you sell on.
Request partner access
Partner access is by request. Tell us about your business and the clients you serve and the partner team will be in touch to talk through the reseller route — referral or AWS Marketplace — and the commercial terms.
Quote a number, not a meter.
Resell a flat-priced cloud firewall.
Refer it, or transact through AWS Marketplace with a private offer — you set the markup, AWS handles the billing. Multi-tenant by default, white-label to your own brand, on any cloud. Partner access is by request.