Partner program

Add agentic penetration testing for mobile apps to your portfolio

For resellers, managed security providers and security consultancies. Ostorlab's AI agents test every release of your customers' mobile apps the way an attacker would, so your team covers the releases between manual pentests and takes on more mobile work without adding headcount.

  • Deal registration and a not-for-resale tenant for demos
  • Sales and technical enablement, plus co-selling with our solution engineers
  • Tiered partner discounts off list price that grow with your annual volume
Book a partner call
Program at a glance

What the partner program includes

Everything you need to know before a first call.

Who it's for

  • Resellers and value-added resellers (VARs)
  • Managed security service providers (MSSPs)
  • Security consultancies
  • Distributors
  • Technology partners

What you get

  • Deal registration on the opportunities you bring
  • A not-for-resale tenant for demos
  • Sales and technical enablement for your team
  • Co-selling with Ostorlab solution engineers
  • A separate organization for each customer, grouped under your own

How you sell it

  • Published pricing from $599 per app per month, billed annually
  • Tiered discounts off list price, rising with your annual sales volume
  • Pilots on your customers' own apps before they commit

Where

  • Partners already sell Ostorlab in Japan, Southeast and South Asia, the Middle East, Europe and the Americas
  • In several markets, banks buy through a local partner. If you cover one, we want to hear from you
What your customers get

Add agentic penetration testing to your portfolio without adding headcount

Ostorlab's AI agents test each release of your customer's mobile app the way an attacker would, and you deliver the results as part of your service.

  1. Gets in

    Handles login, one-time codes and multi-factor authentication, using a test phone number or TOTP seed set up with your customer.

  2. Gets past

    Tests the build your customer ships to the stores, with TLS pinning and obfuscation bypassed.

  3. Goes through

    Follows the app's traffic into its APIs and backend, where business-logic flaws such as broken access checks hide.

  4. Proves

    Backs each AI-agent finding with a working exploit and the steps to reproduce it.

Why customers choose it

  • Android and iOS apps, plus the web apps and APIs behind them
  • On-premises scanning when data must stay in the customer’s environment
  • Customers can bring their own AI model key
  • Shielding checks on physical devices
Partnership types

Two ways to partner

Choose the model that fits your business.

Channel partners

Resell or deliver Ostorlab as part of your services to the organizations you already work with.

  • Value-added resellers (VARs)
  • Managed security service providers (MSSPs)
  • Distributors
  • Security consultancies

Technology partners

Integrate Ostorlab into your platform through its API, MCP server and CI/CD integrations, and deliver more value to shared customers.

  • Security platforms
  • DevSecOps solutions
  • Cloud and technology providers
  • Security ecosystem partners

Ostorlab is a member of the GitLab Technology Partner Program.

Read the API documentation
Apply

Apply to become a partner

Tell us about your company, the customers you serve and the regions you cover.

Partner FAQ

Questions partners ask

Can't find your answer? Book a call with our partner team.

Book a partner call

Fill in the application form on this page or book a partner call. We talk through your customers, services and regions, then agree on the partnership model that fits.

What security teams say about Ostorlab

Gartner Logo

4.8/5

Read the reviews
Very efficient team, the support engineers are very good and knowledgeable. The product is always evolving and they take customer input very seriously.
Senior Appsec Engineer - Banking

Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose

Trusted worldwide

Trusted by banks, fintechs and security teams

Security teams use Ostorlab's AI agents to test every release of their mobile apps, and developers get findings with a working exploit and a fix they can act on.