Reseller Partner Program

DDactic Reseller Agreement

Plain-language terms for firms that resell DDoS resilience testing to their own clients - red teams, MSSPs, GRC consultancies, and cyber insurers. Sales Agent and Vendor Ally arrangements use separate agreements, sent privately after a first conversation.

Red Teams & Pentest Firms MSSPs Compliance Consultants White-label Delivery
Pricing Tiers
Choose your partner level

All tiers include white-label report delivery and the Authorization to Test template. Upgrade at any time.

Tier Commitment Your Rate Included
Named Partner Start here
Per-engagement, pre-payment $500 / run White-label reports, ATT template, dashboard guest access for client
Managed Partner Popular
5+ runs / month, monthly invoice $350 / run Everything in Named, plus API access to OPI scores and 1 no-fee scan per month for internal use
Strategic Partner Scale
20+ runs / month, monthly invoice $250 / run Everything in Managed, plus co-marketing listing on ddactic.net, dedicated SLA, and priority fleet allocation
Agreement Terms
The full terms, plain and direct

Last updated: October 2026. These terms apply to all partner tiers.

Section 1

Definitions

  • Run means one active DDoS simulation engagement against a single authorized target domain or IP range, from initiation through final report delivery.
  • Report means the findings document DDactic delivers to Partner after a Run, covering recon results, attack simulation outcomes, and hardening recommendations.
  • ATT (Authorization to Test) means a signed document from the target organization's authorized representative, specifying the scope, IP ranges, test window, and emergency contact. DDactic provides a standard ATT template.
  • White-label means delivery of Reports under Partner branding with no DDactic name, logo, contact information, or product references visible to the client.
  • Partner means the organization or individual that has accepted these terms to resell DDactic services to their clients.
Section 2

Partner Obligations

The ATT requirement is non-negotiable. DDactic will not initiate any Run without a valid signed ATT on file for that specific target.
  • Partner must obtain a signed ATT from the client before submitting any Run request to DDactic.
  • Partner is solely responsible for ensuring the client has legal authority to authorize testing of the specified targets, including any third-party infrastructure the targets depend on.
  • Partner sets its own pricing to clients. DDactic does not dictate, audit, or appear in Partner's client invoices.
  • Partner may not represent DDactic's methodology, tooling, or infrastructure as its own proprietary capability.
  • Partner may not sublicense, re-resell, or allow third-party access to DDactic's platform or reports without written consent from DDactic.
Section 3

DDactic Obligations

  • DDactic delivers Reports under Partner branding within the agreed test window, typically within 48 hours of Run completion.
  • DDactic does not contact Partner's clients directly, by email, phone, or any other channel, without Partner's prior written consent.
  • DDactic maintains the fleet infrastructure and technical capacity required to execute Runs at the volume agreed under each tier.
  • DDactic provides Partner with an ATT template, dashboard guest-link minting, and technical support for pre-engagement scoping.
Section 4

Authorized Testing and Liability

  • Partner warrants that each Run is fully authorized by the target organization, evidenced by a signed ATT submitted to DDactic before the Run begins.
  • DDactic is not liable for any service degradation, outage, data loss, or damage arising from a Run conducted under a valid ATT provided by Partner.
  • If a Run causes unintended impact on a third-party system not covered by the ATT (such as a shared hosting provider, upstream ISP, or CDN edge), Partner bears full legal and financial responsibility for that impact.
  • Partner indemnifies DDactic against any claim, loss, or legal action arising from Partner's failure to obtain valid authorization for a target.
Section 5

Payment

  • Named Partners: payment in full is due before each Run. DDactic will not initiate any test activity until payment clears.
  • Managed and Strategic Partners: monthly invoice issued on the first of each month for Runs completed in the prior month, net-7 payment terms.
  • All payments are in USD via wire transfer. Currency conversion costs and bank fees are Partner's responsibility.
  • There are no refunds for completed Runs. If a Run cannot complete due to target unreachability or force majeure, DDactic will reschedule or issue a credit toward a future Run.
Section 6

Intellectual Property

  • DDactic retains all rights to its methodology, tooling, pipeline code, OPI scoring model, and underlying research.
  • Reports delivered to Partner are licensed for delivery to the specific client engagement they were generated for. Partner may not redistribute, republish, or repurpose Reports for other clients or public use.
  • OPI scores and scan data produced for a client are that client's data. DDactic may use anonymized, aggregated findings for research and benchmarking, with no client-identifying information disclosed. This restriction governs use of findings data only; it does not limit any separate, written grant of named-reference or logo-use rights made by a client or partner (for example, via a Founding Design Partner "Named" engagement).
Section 7

Confidentiality

  • Each party keeps the other's pricing structure, methodology details, client lists, and technical infrastructure confidential. This obligation survives termination of the agreement.
  • Partner may state that its DDoS testing capability is powered by a specialist third-party platform only with DDactic's written consent. By default, DDactic's involvement is not disclosed to clients.
  • DDactic will not disclose Partner's client list or engagement history to any third party, including other DDactic partners.
Section 8

Term and Termination

  • This agreement is month-to-month. Either party may terminate with 30 days written notice sent to the other party's primary contact email.
  • DDactic may suspend Partner's access immediately and without notice in the event of an ATT violation, non-payment exceeding 14 days, or material misrepresentation to a client.
  • On termination, Partner retains the right to deliver any Reports already in progress. No new Runs may be initiated after the termination date.
Section 9

Governing Law

  • This agreement is governed by the laws of the State of Israel.
  • Any dispute that cannot be resolved by direct negotiation will be submitted to binding arbitration in Tel Aviv, conducted in English.
  • The prevailing party in any dispute is entitled to recover reasonable legal fees and costs.

Signatures

For Named Partners: email acceptance of these terms to [email protected] from your business email address. That email constitutes a binding agreement and replaces the need for a wet signature. For Managed and Strategic tiers, a signed copy of this document is required before the first Run.

DDactic
Stav David
Founder & CEO, DDactic
Signature
Date
Partner
Full name
Title
Company
Date

Ready to partner?

Email us with your company name and target tier. We respond within one business day.

Email [email protected] Or schedule a call via ddactic.net/contact