White-label Threat Intelligence, as a Margin Play.
Add a full threat intelligence service to the tiers you already sell and deliver it under your own brand. Nothing to build, nobody to hire, no money down. You pay per customer, so the margin grows as your customer base does. Each client gets intelligence built around what they run, who supplies them, where they operate, and the industry they are in, the moment they need it.
The Challenge.
Customers expect their provider to tell them about the threats that affect them, regularly. Building that service is expensive, running it is hard, and putting a price on it is harder still. Doing tailored reporting properly for one organisation is a stretch. Doing it for every customer usually means more analysts, tools, and sources than the numbers can carry.
So threat intelligence ends up as a cost you struggle to justify, and customers get general reports that fit nobody in particular, which wears down the trust your brand runs on. It does not have to work that way.
Threat intelligence as a margin play.
Liberty91 turns threat intelligence from something you fund into something you sell. Because intelligence written for each customer is surfaced, prioritised, and drafted in real time and goes out under your brand, you can offer it as a premium add-on to the tiers you already sell.
No upfront investment
Nothing to build, no sources to license one by one, and no analyst team to hire before you can sell. You start delivering on day one.
Priced per customer
You pay per customer organisation, not one flat licence fee up front. Your cost grows in step with your customer base, never ahead of it.
Grows with your business
You add a customer, you add their intelligence service, and the margin grows with it. The numbers move the way your business does, not against it.
How Liberty91 Helps.
A Set of AI Agents For Each Client
Each client gets their own set of AI agents, set up around that client's Intelligence Requirements: what they run, where they operate, their industry, and who supplies them. Your analysts add more requirements whenever something particular needs covering. Every event is read against the requirements it touches and weighed up for what it means to that client.
A Daily Report Per Customer, Under Your Brand
Every customer gets their own report every day, covering the threats that affect them specifically, sent under your branding. It takes next to no effort from you, and it sets your service apart.
Reports on Request, in Minutes
When a customer asks what a particular threat actor, piece of malware, or campaign means for them, you can answer in minutes instead of days, while others are still reading the original reporting. Your analysts spend their time checking the answer rather than hunting for it.
Per-client Intelligence Requirements.
Its own set of requirements per client
Every client has their own Intelligence Requirements, built from what they run, where they operate, their industry, who supplies them, and the people and projects particular to them. The platform keeps each client's requirements up to date and uses them to work out what every incoming event means for that client. Two clients in the same industry get different reads, because what they run and worry about is different.
Analysts can add requirements for any client
Your analysts can write extra Intelligence Requirements for any single client: a campaign their CISO is following, a supplier they are worried about, a country they are expanding into. Those sit alongside the ones built from the client profile, so the client gets the intelligence they actually need rather than the general version.
The platform tailors each client's intelligence on its own, and your analysts take it further whenever they want to.
Built for everyone, and everything, that acts on it.
Intelligence is only worth anything once it reaches whoever, or whatever, has to act on it. Liberty91 produces the right thing for each of them, in a form they can use, for every one of your customers.
Your customers' people
Everyone gets the version written for their job, sent when it matters. A CISO gets the short executive read, a SOC lead gets the technical detail, a product owner gets the part that affects their service. Not a general monthly PDF nobody opens.
Your customers' tools
The same intelligence also goes out in formats machines can read: lists of indicators, Sigma detection rules, and STIX 2.1 bundles that drop straight into their SIEM, SOAR, firewall, and threat intelligence platform through Mailroom and the delivery integrations.
Your customers' agents
Every indicator comes structured and scored, so the automated and AI security tools further down the line can take it in directly. It is built to be acted on by software, not just read by a person.
Your brand on every report.
Everything your customers see is yours. Your sender name and reply-to address, your emails, and your report PDFs, cover, body and footer, with your logo and your typefaces. The intelligence inside is written for that customer, and the brand on it is entirely yours.
How white-labelling works →Get intel into your customers' hands, and prove you did.
Mailroom is where MSSPs send written reports, lists of indicators, Sigma detection rules, and STIX 2.1 bundles to the people each customer has named, with each customer kept separate from the others. The daily Morning Report and threat Alerts go out the same way, so everything headed to a customer leaves through one channel that keeps a record.
Filter the dashboard to one customer and you see everything sent on their behalf: when, to whom, what kind, and its title. Look across all of them and you see how you are doing on delivery for your whole customer base. The Sent log is what you bring to a quarterly review, a renewal, or an audit of what your contract says you deliver.
Each client gets their own Relevance and Production Agents, so no two clients receive the same report.
7 minutes
Two days of analysis done by hand becomes seven minutes, and every customer gets intelligence written for them and nobody else.
Why MSSPs Choose Liberty91.
Revenue, Not Just Cost
Sell tailored intelligence as a premium tier or an added service. It is built to be a margin that grows as you add customers, rather than a cost you have to keep defending.
Your Brand, End to End
Put your name on the sender address, the emails, and the report PDFs. Your customers see your service, with Liberty91 running out of sight behind it.
A Separate Service Per Customer
Each customer gets their own set of AI agents. No shared, general reports; what each customer receives is about the threats facing them.
Delivery That Scales With You
Add customers without hiring an analyst for each one. Whether you run 5 organisations or 500, Liberty91 runs them on the same infrastructure, your cost grows per customer alongside your customer base, and the analysts you have can serve many more of them.
Straight Into Their Tools
Reports for people, plus lists of indicators, Sigma rules, and STIX 2.1 bundles for your customers' SIEM, SOAR, firewall, and security agents. Intelligence they can act on, not just read.
A Record of Every Send
Mailroom records every report, list of indicators, detection rule, and STIX bundle sent on each customer's behalf. The Sent log is your proof of delivery for quarterly reviews, renewals, and contract audits.
From the case studies.
“Intelligence used to be the thing customers expected for free. Now we have a clear upsell strategy with a new revenue stream, no up-front risk, while providing significantly more value to the customer.”
Head of Service Delivery, a managed security services provider in the UAE
30
Customers receiving tailored intelligence under the MSSP's own brand
Frequently Asked Questions.
Want to see this on your own organisation?
Request a demo or start your free trial today, and get straight to AI-powered threat intelligence built around your organisation.