MSSP Partner FAQ
General
What is Datazag for MSSPs?
Datazag provides early infrastructure intelligence that enables MSSPs to detect phishing and brand abuse before email delivery. It is designed to be embedded into managed services, not sold as a standalone dashboard or threat feed.
Is Datazag a phishing tool or a threat intelligence feed?
Neither. Datazag is an infrastructure intelligence layer that detects malicious domains and campaigns during: Domain registration DNS configuration SSL certificate issuance This intelligence powers phishing defense, brand protection, SOC enrichment, and takedown services delivered by MSSPs.
Who typically partners with Datazag?
💠Managed Security Service Providers (MSSPs) 💠MDR / XDR providers 💠Brand protection and takedown specialists 💠Security consultancies with managed offerings If you operate a SOC and deliver managed services, Datazag is built for you.
Brand Coverage & Detection Scope
What does “monitored brand” mean?
A monitored brand is a distinct brand name or identity owned by you or your customer for which Datazag monitors phishing infrastructure and impersonation activity. 💠 A single customer may have multiple monitored brands 💠 Pricing is based on total monitored brands, not number of customers
Is the MSSP’s own brand included?
Yes. Each MSSP package includes monitoring for the MSSP’s own brand at no additional cost. This does not count towards the monitored brand limit and is additional.
Do you monitor brands like Microsoft, Google, or PayPal?
atazag does not perform brand monitoring on behalf of third parties. However, we maintain global visibility into active phishing campaigns across commonly impersonated brands. This intelligence is used to: 💠 Improve detection confidence 💠 Identify infrastructure reuse 💠 Provide campaign-level context This global telemetry is contextual, not a service entitlement. This means it is not: - a guaranteed service - a contractual right - something you can demand access to or expect consistently Instead, it’s an internal mechanism the system uses and makes available for our customers.
Can one customer use multiple brand slots?
Yes. For example: 💠 5 customers with 2 brands each = 10 monitored brands Brand limits are flexible and designed to reflect real-world customer structures.
Alerts & Operations
How are alerts delivered?
Alerts are delivered via: 💠 Real-time webhooks 💠 API access 💠 SIEM-friendly feed formats (e.g. Splunk, Elastic, Sentinel, generic JSON) Datazag does not require analysts to use a separate SOC UI.
What is a “reasonable alert volume”?
Each tier includes a reasonable alert volume designed for managed security operations. This is a guardrail, not per-alert billing. 💠 Most partners never reach alert limits 💠 Sustained high volumes are handled commercially, not punitively 💠 No surprise overage charges
Do you throttle or block alerts?
No. Alert volume limits exist to prevent abuse, not to restrict normal operations. If a partner approaches sustained high volume, we work collaboratively to adjust capacity.
Does Datazag replace our SIEM or SOAR?
No. Datazag integrates into your existing SIEM and SOAR workflows. It enhances detection and prioritization — it does not replace operational tooling.
MSSP Control Plane
What is the MSSP admin dashboard?
The Datazag MSSP dashboard is a control plane, not a SOC console. It is used to: 💠 Manage monitored brands 💠 Configure webhooks and feeds 💠 Select SIEM payload formats 💠 Manage API keys and access 💠 View platform health and usage 💠 Review billing and entitlements All alert handling happens in your existing tools.
Can we white-label Datazag?
Yes. White-label support is available in Growth and Strategic tiers and is commonly used by MSSPs embedding Datazag into branded service offerings.
Pricing & Commercials
How is MSSP pricing structured?
MSSP pricing is: 💠 Wholesale 💠 Annual 💠 Based on monitored brands and scale 💠 Designed for resale and managed services Pricing is not per domain, per alert, or per query.
Is pricing public?
MSSP pricing ranges are shown on the partner page for transparency. Final pricing is confirmed during partner discussions based on: 💠 Brand counts 💠 Integration requirements 💠 Service scope
How does billing work?
Most MSSPs operate on: 💠 Annual contracts 💠 Invoice-based billing (Net 30) 💠 Optional Stripe invoice or ACH collection PayPal is not used for MSSP contracts.
Can we resell Datazag as part of our services?
Yes. MSSP packages include wholesale resale rights, allowing you to embed Datazag into managed services without per-customer licensing from Datazag.
Domain Intelligence Backbone (Data Add-On)
Is the JOIN-ready domain intelligence included?
No. The Domain Intelligence Backbone (315M+ domains, hourly updates, JOIN-ready) is licensed separately as an optional add-on. This is typically adopted by MSSPs and MDRs with advanced detection engineering or analytics requirements.
Who typically licenses the data backbone?
💠 Large MSSPs 💠 MDR providers 💠 SOCs with threat hunting teams 💠 Organizations performing large-scale correlation It is usually adopted after initial phishing services are live.
Onboarding & Support
How long does onboarding take?
Most MSSPs are operational within: 💠 1–2 weeks for webhook/API integrations 💠 2–4 weeks for full SIEM/SOAR workflows Onboarding support is included in all tiers.
Do you provide implementation support?
Yes. Support includes: 💠 Integration guidance 💠 Payload format alignment 💠 Best-practice service design 💠 Brand setup assistance
Getting Started
How do we become a partner?
The first step is a partner conversation to align on: 💠 Services you plan to deliver 💠 Brand scope 💠 Integration requirements Talk to Partner Sales...
Is there a pilot or founding partner option?
Selective early-access and founding partner programs may be available from time to time. Details are shared privately with qualified MSSPs.
Still not sure if Datazag is a fit for your business?
If you are unsure whether Datazag fits your service model, that’s normal. Most partners start with one service, validate value, then expand. We design partnerships to grow — not to lock you in prematurely. Get in touch and we will try to answer your questions directly. We are happy to help!