OEM & white-label
You have the hardware, the channel and the customers. What a next-generation firewall costs is not the box — it is the inspection engine behind it, and the fact that it is never finished: new protocols, new evasions, new rules, a disclosure process, a bill of materials for every release. That part is ours, permanently. The product is yours: your name on the boot screen, your interface, your console, your support address. A complete second-brand build has already shipped; this is not a roadmap item.
Application classification, intrusion rules, TLS behaviour, QUIC, encrypted DNS, data-loss detectors, the AI providers people actually use — each of these moves every quarter, and a firewall that stopped tracking them stops being a next-generation firewall. Carrying that is a permanent engineering team, not a project with an end date. It is the reason appliance makers either partner or leave the segment.
An image that boots into your product name on hardware from the validated list. The firewall pages carry your brand and your colours. The management console is self-hosted at your own domain, so your technicians and your customers log in to you. Your support address is the one on the screen when something goes wrong.
A branded line gets its own signed package repository and its own signing key, so updates reach your fleet from your address under a signature that is yours. The console recognises a branded appliance by its own API namespace and manages it alongside every other, which is what makes one console able to serve a mixed estate.
The engine, its update repositories, its bill of materials and its vulnerability-disclosure path stay ours and stay named. That is the Cyber Resilience Act, not a preference. It also works in your favour: when a customer’s procurement asks who maintains the inspection code and for how long, you hand over a published support period and an SBOM instead of an assurance.
Four exams with published objectives and a pass mark, and not-for-resale licences for the lab and the demo estate at no charge for as long as the partnership stands. A practice you can staff and prove is worth more than one engineer who happens to know the product.
You keep the customer relationship, the margin on your hardware and the brand the market already knows you by. We keep one engine to maintain instead of a channel to build, and every deployment you make sharpens the same code every other deployment runs. Neither side is reselling the other; each is supplying the half it can actually carry.
A brand name and assets, the hardware you intend to ship, the domain the console will run under, and the support address that goes on the screen. From there it is a build, a validation pass on your hardware, and a signed repository. We have done this end to end before, which is the only reason we describe it in the past tense.
Four exams with published objectives, a pass mark and a credential that can be verified by anyone holding the number. A partner or an appliance maker can staff a practice on this rather than on one person’s familiarity.
ZCA-101
Fundamentals: what the engine does, where it sits in the network, and the vocabulary the rest of the ladder assumes. Self-paced, and the entry point to every other credential.
60 · 90 min · 70% to pass · 24 months valid
ZCP-201
The working certification: install it, place it correctly, write policy that does what you meant, read the reports, and keep it updated. Assumes hands-on time with a real appliance.
80 · 120 min · 75% to pass · 24 months valid
ZCS-SASE-301
Multi-site and remote access: overlay design, hub selection, failover behaviour, per-user enrolment and the routing decisions that follow. Assumes ZCP and a working multi-site estate.
60 · 90 min · 78% to pass · 24 months valid
ZCS-MSP-302
Running many customers from one console: tenancy and access scoping, enrolment at scale, policy templates and the drift they produce, entitlement and billing, and keeping one customer's incident inside one customer's estate. Assumes ZCP and a live multi-tenant deployment.
60 · 90 min · 78% to pass · 24 months valid
Partners & channel: sales@zedmos.com
Talk to us about partnering