Partner Programme
Partner with LinuxGuard
Can your clients see what every identity on their Linux estate can do today — human, service account or agent? Their other tools each cover a different layer. LinuxGuard reads the Linux host.
The layer under everything you already manage
SIEM, EDR and cloud tooling watch the network, the endpoint and the cloud. The artefacts that decide who can do what on a Linux host — sudo rules, SSH keys, PAM configuration and service accounts — usually sit outside all three. That layer sits under every stack you run for a client, and it is where privilege drift builds up unseen.
LinuxGuard makes it visible — and that visibility is what you take to your clients.
Technology partners — add OS-level identity to what your clients see
Your product already gives a strong view of identity at the application level. The identity model at the OS level is often far more complex — local accounts, sudo rules, SSH keys, PAM configuration and service accounts, host by host. LinuxGuard gives you that layer, so you can give it to your clients — the ones you have now and the ones you win next.
New revenue on existing and new accounts
OS-level identity is a capability your clients cannot get from your platform today and will pay for — an upsell into every account you have, and a differentiator when you pitch the next one.
Findings with an identity attached
Ranked, severity-scored and attributed to the account behind them — context, not another alert stream.
Every human and non-human identity, side by side
Including service accounts and the accounts AI agents authenticate as or impersonate.
Risk scores that explain themselves
Per account, so your users know where to look first.
Change, in near-real-time
Privilege drift surfaced as it happens rather than at the next review.
How it connects
A REST API and outbound webhooks.
See the Integrations module and non-human identity posture on the features page.
MSPs — a new line of service on the estates you already run
You manage the servers. Your client's auditor now asks who can do what on them. LinuxGuard lets you answer, continuously — a new service you can add to every account you already manage, and lead with when you win the next one.
New revenue on existing and new accounts
Identity posture, drift monitoring and audit evidence are services clients need on top of the server management they already buy from you — and a reason to choose you for the next estate.
A complete identity and privilege inventory
For each client estate — every account, sudo rule and SSH key.
Continuous posture, not an annual exercise
Drift is flagged in near-real-time, so a change made on a Tuesday is not discovered at the next audit.
Evidence your client can hand to an auditor
Exportable evidence packages across 17 compliance frameworks — NIS2, DORA, SOC 2 and ISO 27001 among them.
Client data stays where it is
Scanning runs on the client's own hosts; file content never leaves their servers.
Work across every client from one account
The partner view gives you each client estate in one place, with each client's data held in its own tenant.
Operate on your client's behalf
Delegated access lets your team run LinuxGuard for a client who does not want to run it themselves.
Read how the evidence is built on Security & Compliance, and what it looks like for the NIS2 Linux identity audit and the DORA Linux identity audit.
MSSPs — identity-attributed findings into the SOC you already run
Your analysts see the process. The alert does not show that the account behind it holds a NOPASSWD rule. LinuxGuard puts that into the tooling your SOC already uses — a service you can add to every account you protect today, and lead with for the next one.
New revenue on existing and new accounts
Linux identity posture and gated containment are services your clients need on top of the monitoring they already buy from you — and a differentiator when you pitch the next SOC engagement.
Visibility without the homebuild
The Linux identity layer arrives as a product, not a project: no scripts to write and maintain across client estates, no automations to keep alive, no orphaned collectors to maintain.
Into your SIEM, not beside it
Findings and identity events forwarded over webhooks, syslog or Splunk HEC.
Contain, not just alert
Lock an account, terminate a session, revoke sudo or disable an SSH key — behind a mandatory approval gate, with blast-radius limits and automatic rollback.
A record you can show the client
Every action logged with its trigger, approver and outcome in a chain-hashed, tamper-evident trail.
Beneath the PAM and EDR you manage, feeding both
It does not replace the session broker or the endpoint agent.
Every client, one partner view
Each estate separate, all of them in front of one team.
See where LinuxGuard sits against SIEM, EDR and PAM. Running an evaluation for a client? Read CyberArk, BeyondTrust and Teleport compared on Linux.
Advisory and integration partners — host-level evidence for every engagement
Clients reach the point where someone has to show, server by server, who holds privileged access. Policy documents do not answer that. LinuxGuard does.
Who can do what, on every host
A complete picture of every identity and privilege on the client's Linux estate — the starting point for any engagement, regulated or not.
A smoother regulatory process
For regulated clients, evidence is mapped to framework controls from the client's actual Linux configuration rather than from a questionnaire, across 17 compliance frameworks, SOC 2, ISO 27001 and PCI DSS among them. They arrive at an audit cycle ready, not building the evidence after the fact.
A defensible starting position
For a remediation or transformation programme: what exists today, scored, before anything is changed.
Sector depth where you need it
Written up for financial services, critical national infrastructure and regulated industries.
Where a client falls under regulation, the detail is on the DORA and NIS2 pages.
See it on your own servers
Partners receive a not-for-resale licence* for their own estate. Run LinuxGuard on the servers you know best before you put it in front of a client.
* Subject to LinuxGuard's fair use policy.
Reselling LinuxGuard
If you supply security or infrastructure software to organisations running Linux at scale, talk to us.
Built for the distributions your clients run
LinuxGuard is certified with Red Hat and SUSE and validated with Ubuntu.
LinuxGuard is certified SUSE Ready, validated for compatibility with SUSE Linux Enterprise.
View CertificationLinuxGuard is certified as a Red Hat Certified Technology, validated for compatibility with Red Hat Enterprise Linux, CentOS Stream, and Fedora.
View CertificationLinuxGuard is Validated with Ubuntu under Canonical's Software Partner Programme.
How a partnership starts
- 1
Tell us how you work with clients
What you run for them, and where Linux sits in it.
- 2
See it on your own estate
Under the not-for-resale licence.
- 3
Agree how we work together
Built around how you already serve your clients.
Frequently Asked Questions
Does LinuxGuard replace the PAM, SIEM or EDR we already manage for clients?
Does client data leave the client's servers?
Can we manage several clients from one place?
Can we run it on a client's behalf?
Which Linux distributions are supported?
Can we try it before we commit?
Show your clients the Linux identity layer
Tell us who you serve and what you run for them. We will show you what LinuxGuard adds to it.
Talk to us about partnering