SaaSFort
For MSPs & MSSPs

Ship a NIS2 service to your SMB book in 14 days.

White-label scanner, multi-tenant dashboard, BSI IT-Grundschutz mapping. 30% rev-share at Growth, 50% at Scale (50+ deployments). No engineering integration. No 6-month rollout.

Reply within 24 hours with onboarding link + pre-touch scan PDF on 5 of your customer logos.

NIS2 Article 21ISO 27001 Annex AOWASP Top 10GDPR-readyEU-hosted
50%
recurring rev-share above 50 client deployments
MSP-Scale tier
€0
setup, no engineering integration
multi-tenant, ready in 14 days
17,500
German entities missed BSI registration — your SMB book
BSI / heise May 2026
How it works

Application to first paying client in 30–60 days

01

Apply

Tell us about your practice (60 seconds). Public NIS2 service page or recent NIS2 hire signal accelerates approval.

02

Get your tenant

White-label tenant + multi-tenant dashboard inside 14 days. Onboard your first 1–5 SMB clients on MSP-Starter at zero cost.

03

Scale to MSP-Scale

Cross 50 deployments and step up to 50% recurring share + co-marketing budget. Most MSPs hit it inside 90 days.

Tier structure

Starter is free. Growth pays 30%. Scale pays 50%.

One MSP signed = 50–200 indirect SMB deployments. Hit MSP-Scale and the 50% bracket matches the highest channel programs in compliance SaaS — while undercutting dev-tool vendors who weren’t built for MSP economics.

Tier Deployments Rev-share
MSP-Starter <5 deployments Free
MSP-Growth 5–49 deployments 30% recurring
MSP-Scale 50+ deployments 50% recurring

Rev-share computed on customer-paid invoices net of refunds. Payouts on the 15th of each month via bank transfer or PayPal. 12-month lock-in for first 3–5 MSPs signed in 2026.

What MSPs actually buy

Built for the MSP P&L, not the engineer’s wishlist

A NIS2 product you can resell

Not a tool you use internally. White-label scan engine + control mapping with your brand on the dashboard, reports, and customer-facing domain. Sell it as your service.

Multi-tenant ops in one screen

Manage 50–200 SMB client deployments from a single dashboard. Bulk scan API, per-tenant grade history, aggregated NIS2 compliance posture. No "switch login" between clients.

Margin that survives mark-up

30% rev-share at Growth, 50% at Scale. Mark up to your clients without sticker shock — our €19/mo Growth becomes your €39–€49/mo retainer add-on.

Sales-enablement built in

Pre-touch scan PDF for every prospect on your book (run on customer logos, deliver aggregated NIS2 gap report). One-pagers, demo flows, kickoff deck templates included.

No 6-month integration

External-posture scanner — no agents, no RMM tie-in, no PSA workflow rewrite. URL → grade in 60s for every client in your book. Live in 14 days, not 6 months.

Locks in your retainer

Continuous monitoring keeps your name on the customer dashboard between audits. Clients renew because you are the one driving the grade up.

Why now, why us

The white-label NIS2 layer your RMM/PSA stack is missing

ConnectWise / Datto / N-able don't ship NIS2 (yet)

Their RMM/PSA stacks have no NIS2-specific external-posture SKU. SaaSFort is the missing layer — bolt it on without changing your stack.

Aikido sells to DevSec, not MSPs

Aikido scans source code and dev pipelines. Useless for the 99% of your SMB book that has no in-house engineering. We scan what BSI auditors see from outside — the surface MSPs actually own.

BSI IT-Grundschutz mapping out of the box

Every scan ships with §38 BSIG control mapping and ISO 27001 alignment. The compliance evidence pack lands on your client's desk auditor-ready — your hours stay on retainer, not on PDF assembly.

FAQ

Common MSP questions

How is rev-share tracked across our client tenants?

Each MSP gets a parent account; every client deployment is a child tenant tied to it. Stripe charges flow to SaaSFort; the rev-share computation runs nightly against your MSP ID and pays out on the 15th of the following month via bank transfer.

Can we run our own brand on the customer-facing pages?

Yes from MSP-Growth: custom domain (e.g. security.yourmsp.com), logo + colour theme on the dashboard, your branding on PDF reports. The "Powered by SaaSFort" footer link stays on the legal page only.

What if we want to leave after a year?

No lock-in. Tenants can be exported (grade history CSV + NIS2 evidence packs as ZIP) and you keep the customer relationship. We retain anonymised scan engineering improvements; you retain everything client-facing.

Are there RMM/PSA integrations?

Webhook-based ConnectWise / Datto Autotask / N-able N-central hooks ship in v1.1 (post-MSP-WHITE-LABEL-REVSHARE GA). Bulk scan API is live today and works as a stop-gap.

What's the minimum size to qualify?

Three SMB clients in your book willing to onboard within 30 days. MSP-Starter is free to test the motion; we approve everyone with that minimum + verifiable security/compliance practice signals.

First MSPs in the program get a 12-month rev-share lock-in.

We are taking 3–5 founding MSPs in 2026. Apply now to get the first slot — and the founder on a 30-min onboarding call.

Request white-label tenant