About
We're looking for security teams that keep the full trail from alert to resolution: SIEM and endpoint alerts, triage decisions, investigation notes and case write-ups. Security product companies with private code are also a fit.
- Location
- Anywhere
- Company size
- 20–2,000 employees
- Track record
- Several years of cases
- Kinds of companies
- Managed security and MDR providers, enterprises with an in-house SOC, security product companies, penetration-testing firms
Is it a fit?
What we're looking for
- Alert-to-resolution records the company owns, or private security software
- The right to license them; customer data only with customer agreement
Not a fit
- Logs without case context
- Customer data the company can't share
Who knows companies like this
SOC analysts, managed-security founders and security engineers.
What the license covers
- Alerts and triage decisions
- Investigation notes and case write-ups
- Security code
Nice to have, adds to what the company earns
- SOAR and containment logs
- Detection rules
- Penetration test reports
- Repositories already scrubbed of secrets
Tools we work with
- Splunk
- Microsoft Sentinel
- Google SecOps
- CrowdStrike
- Defender
- SentinelOne
- Okta
- ServiceNow SecOps
Questions we'll ask the company
If the company can answer these, it is likely a good referral.
- Do you keep case write-ups together with the alerts behind them?
- Is the data your own or your customers'?
- Which SIEM and EDR tools do you run?
- Do you have private security software?
How referrals work
- 1
Find a fit
Pick an open request and think of a company that matches.
- 2
Refer them
Share the company and a few details about it, in about a minute.
- 3
We do the work
We scope their data, agree a license and handle the export.
- 4
You get paid
Up to $45,000 per company, after their first delivery.
On this request
Up to $45,000
- 10% of what we agree to pay the company
- Confirmed when the company signs its data license
- Paid after their first delivery