White-label Threat Intelligence, as a Margin Play.
Bolt a full, tailored threat intelligence service onto your existing tiers and deliver it under your own brand. No build, no team to hire, no upfront investment, just a per-customer service that grows the margin as your customer base grows. Each client gets intelligence built around their own assets, supply chain, region, and sector, the moment they need it.
The Challenge.
Managed Security Service Providers are expected to provide regular, relevant threat intelligence to their customers. But building that capability is expensive, running it is hard, and pricing it is harder still. Doing tailored reporting well for one organisation is a stretch. Doing it for every customer usually means an unrealistic investment in analysts, tooling, and sources.
So threat intelligence ends up as a cost centre that is difficult to justify, and customers get generic, irrelevant reports that help no one. It does not have to work that way.
Threat intelligence as a margin play.
Liberty91 turns threat intelligence from a burden you fund into a service you sell. Because tailored, customer-specific intelligence is surfaced, prioritised, and drafted in real time and delivered under your brand, you can package it as a premium add-on on top of the tiers you already offer.
No upfront investment
No platform to build, no sources to license individually, no analyst team to hire before you can sell. You start delivering on day one.
Priced per customer
You pay per customer organisation, not a flat enterprise licence up front. Your cost scales in step with your customer base, never ahead of it.
Grows with your business
Add a customer, add their intelligence service, grow the margin. The economics scale the way your business does, not against it.
How Liberty91 Helps.
A Dedicated AI Stack Per Client
We build each client a dedicated stack of AI agents, configured against that client's self-maintaining Intelligence Requirements, derived from their assets, geography, sector and supply chain, and extended by your analysts when a specific concern needs cover. Every event is read through every relevant requirement and assessed for relevance to that client.
A Daily Report Per Customer, Under Your Brand
Every customer receives a completely tailored report, every day, describing threats relevant to them specifically, delivered under your branding. With effectively zero effort, MSSPs using Liberty91 already stand out from the competition.
Thematic Reports in Minutes
When a customer asks for a tailored analysis on a specific threat actor, malware, or campaign, you deliver a response in minutes instead of days. Your analysts focus on review, not research.
Per-client Intelligence Requirements.
A unique IR set per client
Every client organisation has its own Intelligence Requirements derived from their profile, assets, geography, sector, supply chain, the people and projects unique to them. The platform keeps each client's requirements continuously updated and uses them to assess every incoming event for relevance to that client. Two clients in the same sector get different reads, because their profiles are different.
Analysts can add IRs for any client
MSSP analysts can author additional Intelligence Requirements scoped to any individual client, a campaign their CISO is tracking, a supplier they're worried about, a region they're expanding into. Those analyst-authored requirements sit alongside the profile-derived ones and ensure the client gets the intelligence they actually need, not the generic version.
The platform tailors each client's intelligence by default. The analyst tailors it further when they need to.
Built for every consumer of intelligence.
Intelligence is only valuable when it reaches whatever, or whoever, needs to act on it. Liberty91 produces the right product for each consumer, in the format they can use, for every one of your customers.
Your customers' people
Stakeholders receive intelligence written for their role and delivered when it matters. A CISO gets the executive read, a SOC lead gets the technical detail, a product owner gets the angle that affects their service. Not a generic monthly PDF that nobody opens.
Your customers' stack
The same intelligence ships as machine-readable products: IOC lists, Sigma detection rules, and STIX 2.1 bundles that drop straight into their SIEM, SOAR, firewall, and threat intelligence platform through Mailroom and production integrations.
Your customers' agents
Every indicator is structured and scored, so the automated and AI security agents downstream can consume it directly. The intelligence is built to be acted on by tooling, not just read by a person.
Your brand on every report.
Everything your customers see is yours. White-label the sender name and reply-to address, the email templates, and the report PDFs, cover, body and footer, with your own logo and typography. The intelligence is genuinely tailored to each customer, and the brand on it is entirely yours.
How white-labelling works →Get intel into your customers' hands, and prove you did.
Mailroom is the multi-tenant dispatch surface MSSPs use to send written reports, IOC lists, Sigma detection rules, and STIX 2.1 bundles to each customer's nominated recipients. The same surface routes the daily Morning Report and threat Alerts, so every customer-bound dispatch flows through one auditable channel.
Filter the dashboard to a single customer organisation and you see every dispatch made on their behalf: timestamp, recipient, kind, and artefact title. Aggregate across all your customers and you see your delivery posture for the entire customer base. The Sent log becomes the evidence trail you bring to a QBR, a renewal, or a contractual audit of delivery.
Each client organisation gets dedicated Relevance and Production Agents, ensuring every report is unique.
7 minutes
Turn two days of reactive, human analysis into seven minutes of proactive, tailored and relevant intelligence, unique for each MSSP customer organisation.
Why MSSPs Choose Liberty91.
Revenue, Not Just Cost
Package tailored intelligence as a premium tier or value-added service. It is designed to be a margin you grow as you add customers, not a capability you fund and struggle to justify.
Your Brand, End to End
White-label the sender, the email templates, and the report PDFs. Your customers see your service. Liberty91's engine runs invisibly behind it.
Multi-Tenant Intelligence
Each customer gets a dedicated AI instance. No shared, generic reports, every output is unique to their threat landscape.
Scalable Delivery
Add customers without a new analyst hire for every one. Liberty91 scales from 5 to 500 organisations on the same infrastructure, your cost scales per customer alongside your customer base, and the analysts you have can serve many more of them.
Delivered Into the Stack
Reports for people, plus IOC lists, Sigma rules, and STIX 2.1 bundles for your customers' SIEM, SOAR, firewall, and security agents. Intelligence that acts, not just informs.
Auditable Dispatch
Mailroom captures every report, IOC list, detection rule, and STIX bundle sent on each customer's behalf. The Sent log becomes the evidence trail for QBRs, renewals, and contractual audits of delivery.
Frequently Asked Questions.
Ready to do more with less?
Request a demo or start your free trial today. Get instant access to AI-powered threat intelligence tailored to your organisation.