Partners

Partners make security work.The record should say so.

Most businesses are secured by somebody they hired. When such a business is assessed, every point it fails to earn reads as a mark against the provider who runs it — unless the record says who owns each gap. We are designing the partner side of trust so that it does.

For managed service providers, managed security providers and specialists who operate other companies' estates. Managed Trust is not open yet: it is opening to selected partners first.

Spartan Trust is designed for both sides and their communities: a buyer imports its suppliers and sets the standard it needs, and an MSP sets its own standard across its customers to raise their Passports together, and both bring their community along so that security improves for everybody.

Our partners

The companies we work with today.

Who we work with

Operators — MSPs and MSSPs

Run your customers' security on the instrument they are measured by.

Managed Trust is the platform for providers who take trust seriously: a book of customers, each with its own Passport, and the provider's work visible in it. It is a Spartan Trust product, and its own page is on sparta.ms.

Monitoring, technology and foundational partners

Bring what you observe; the customer decides what you may do.

The specialists whose tools and services a customer already relies on — monitoring, patching, detection, backup — and the technology the platform is built on. A partner is admitted for what it does — observing, acting under the customer's own authority, or forwarding evidence another party produced — and bound to a customer only with that customer's approval. A partner submits; a named Indominus MS assessor accepts.

Indominus MS itself

An operator like any other, under the same rules.

Indominus MS is designed to operate Managed Trust for its own Monitored customers on the same console as its partners, as an operator like any other, under the same rules. What does not work for us is fixed for everyone.

What a partner can count on

These are the rules the design is built around. Each is a decision on record, not a line in a brochure.

The customer declares the operator

A provider never asserts its own relationship.

The customer says, in the assessment, that a third party runs the environment and whether it is to be involved. The declaration carries the contract's term, the customer renews it, and termination is the customer's act alone.

Every lost point has a cause

Unlicensed, declined, unconfigured, unevidenced.

A score with each lost point attributed is a working document, not an accusation. A declined control — recommended on a date, refused by the customer, still open — is a record that protects the provider rather than grading it.

Trajectory before level

The level is the customer's; the slope is yours.

The view leads with the direction of travel and what stands in its way, because the part a provider controls is the change, not the starting point.

The Passport belongs to the business

It travels when the provider changes.

A provider never owns its customers' Passports. If a provider leaves and the score falls, that is the record telling the truth — to the customer, to the next provider, and to the one that left.

The channel is the customer's

We do not sell to your customer behind you.

We do business with a partner's customer only if that customer asks us to, or has marked the partner's contract as terminated. It is a state the customer records and the partner can see, not a sales policy to take on trust.

Your Passport public, your standard private

A measurement is public; a claim stays yours.

A provider can publish its own Passport, on the same instrument as everyone else. Its own internal standard stays private: drift from it is the provider's quality question, drift from the Passport is the customer conversation.

Permits, not standing administrator rights

Access for a task, expiring on its own.

Work in a customer's estate runs under a time-limited permit backed by the customer's authority, with every action on the record. Nothing standing waits to be stolen.

What “Managed Trust” means

Many businesses hand the running of their security to a managed service or managed security provider. Managed Trust is our name for doing that so the trust can be seen: the business, the provider and the people who depend on them all read one record.

It keeps three jobs apart. The business owns its Passport and decides what to accept. The provider operates the controls and shows its work. A named assessor accepts the evidence. Running the controls and judging them are different jobs, done by different people.

That matters to a buyer, because a provider’s word is not evidence. It matters to a provider, because every point a customer loses carries its cause, so a score becomes a working document instead of an accusation.

Managed Trust is not a replacement for your provider, and it is not a score for the provider. It is designed, it is opening to selected partners, and it is not open yet.

Managed Trust is the Spartan Trust product for MSPs and MSSPs. Its own page, for providers, is on sparta.ms.

Partner enquiry

Tell us what you operate — roughly how many customer estates, which services, and where. A person who works with partners answers.

Your information

Your work address, so we can answer. Personal email providers are not accepted.

Company information

Location

If you chose another country, which one.

Street number and name, and the suite if there is one.

Your enquiry

Roughly how many customer estates you manage, the services you provide, and the regions you work in.

We keep what you entered in the fields above and nothing more: a door that does not ask for something does not read it, even if the submission carries it. It goes into our own customer record and nowhere else. We also record that you agreed, and when. Ask us and we will delete all of it.

Read the full privacy notice

Your privacy. Optional measurement tools load only if you say yes, and refusing changes nothing about this site. Read the privacy notice

Choose by category

Your region

QuebecRest of CanadaEurope and the UKElsewhere

You are asked under Quebec’s Law 25. Nothing optional runs until you say yes, and anything that measures or profiles is off unless you turn it on. Each choice is separate, you can change or withdraw it at any time as easily as you gave it, and refusing has no consequence for you. Some of these tools belong to companies outside Quebec, so your information may be processed outside Quebec.

Your rights. You may ask to see, correct or delete what we hold about you by writing to legal@indominus.ms. You may complain to the Commission d’accès à l’information du Québec.

  • Which pages and actions visitors use, to improve the site. It never replays what you did and is never matched to what you wrote in the contact form.

    Sent to
    Google Ireland Limited and Google LLC
    Stores in your browser
    _ga, _ga_BJHYR2T9CH
    Talks to
    https://analytics.google.com https://region1.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com
  • Records how the page behaved for you — where it was slow, where an interaction failed — and may replay a session for diagnosis. It stays off until you turn it on.

    Sent to
    Microsoft Corporation
    Stores in your browser
    _clck, _clsk, CLID, ANONCHK, MR, MUID, SM
    Talks to
    https://*.clarity.ms https://c.bing.com https://scripts.clarity.ms https://www.clarity.ms