Partners
White label OT monitoring for integrators
You install the OT security platform. Then the client asks who is going to watch it. ForgeSOC is the answer, sold under your name or ours.
01 / The question
Why clients ask integrators who will watch the platform
A project ends the same way every time. The OT visibility and threat detection platform is deployed, the sensors are on the span ports, the dashboards are up, and the client signs off. Then the plant manager asks the question nobody scoped: who looks at the alerts?
Most clients do not have an answer. Their OT team is two people who also run the HMIs and the historian. Their IT security team does not speak ICS or SCADA. The platform sits there generating detections that nobody triages on nights, weekends or during a shutdown.
That gap lands on you. It is your project, your name on the deployment, and your phone that rings when the client realizes the alerts are going unread. Managed OT monitoring closes the gap, but building a SOC is not what an engineering firm or integrator signed up for.
That is where an OT SOC partner program makes sense. As an OT security channel partner, you keep doing what you do well. We take the monitoring.
02 / The model
How our OT SOC partner program works
You sell managed OT monitoring as part of your offer, under your name or ours. White label is fine. Co-branded is fine. Some partners prefer to introduce us by name when the client wants to know who is behind the service. That is your call.
You keep the client relationship. You stay the trusted advisor on the project, the upgrade path and the next site. We do not go around you and we do not compete for the work you already own.
ForgeSOC runs the SOC. Our analysts monitor the platform the client already owns, validate and triage alerts, watch telemetry health, and escalate confirmed findings. We escalate to you or to the client, whichever you agree on up front, using a contact tree we build during onboarding.
- You sell it under your name or ours.
- You own the client relationship.
- We run the monitoring, triage and escalation.
- Escalations go to you, the client, or both, as agreed.
03 / What you get
What partners get from managed OT monitoring
Managed OT monitoring without the cost and risk of standing up your own operations center.
No SOC build-out
No analyst hiring, no shift schedules, no tooling stack to buy and maintain. The SOC already exists and it already watches OT.
A recurring service line
Project work ends. Monitoring does not. Add a service that keeps you in the account after commissioning and gives the client a reason to call you first.
OT-trained analysts
Our analysts work OT alerts all day. They understand a PLC, an engineering workstation and a historian, and they know the difference between a new asset and a bad one.
US escalation
Confirmed findings go to US-based OT specialists. Your client talks to someone who speaks plant, in their own time zone.
Onboarding handled
We do the platform review, escalation mapping, contact tree, runbooks, baseline alert review and test escalation. Your team does not carry that work.
04 / On a project
How it works for a project
- STEP 01
Scope it with the project
Raise monitoring while you scope the platform deployment. Tell us what the client runs and how many sites are in play. We confirm fit on a short call.
- STEP 02
Agree the coverage
Pick 24/7/365, nights and weekends, or a single shift. Most clients start with the hours their own team is off.
- STEP 03
Connect and onboard
Access runs read-only through the client's secure remote access. If the client has none, we recommend one. We then run the onboarding and the test escalation.
- STEP 04
Monitor and escalate
Analysts watch during coverage hours. Findings escalate with context through the procedure you and the client approved.
- STEP 05
Report and stay close
Monthly reports go to the client, and to you if you want them. A quarterly asset true-up keeps the baseline honest.
05 / Who does what
What stays with the partner and what ForgeSOC runs
| Partner | ForgeSOC | |
|---|---|---|
| Client relationship | You own it | We support it, we do not take it |
| Branding | Your name or ours | Either way, the same service |
| Platform deployment and upgrades | Your project work | Not included |
| Alert monitoring and triage | Not your job | We run it during agreed coverage hours |
| Escalation of confirmed findings | Receive it if agreed | We send it with context |
| Response and remediation | Your team or the client's | Not included. We can connect you with response partners |
| Reporting | Review and present if you like | Monthly alert and escalation reports |
You built the visibility. We make sure someone is looking at it.
07 / FAQ
Partner questions
01Can we resell ForgeSOC as managed OT monitoring for engineering firms and integrators?
Yes. Engineering firms and integrators can offer managed OT monitoring under their name or ours. You keep the client relationship and we run the SOC.
02Do we need to run any monitoring ourselves?
No. Our analysts do the monitoring, triage and escalation. You decide how much visibility you want into escalations and reports.
03Do you do incident response for our clients?
No. We monitor, triage and escalate. Response and remediation stay with the client or with you. We can connect clients with response partners if they need help.
04How do we start a partner conversation?
Book a 20-minute fit call. Tell us what you deploy and the kind of clients you serve, and we will talk through how it would work for you.
Keep reading
Next step
Add managed OT monitoring to your offer
Book a 20-minute fit call and tell us what you deploy.