Tell us the need
What you're trying to buy, roughly how big your environment is, and any constraint that's non-negotiable. Two paragraphs is plenty.
nulltrace partners · technology sourcing
You know the problem. We know who actually fixes it.
Partners is the sourcing arm of NullTrace Security. Tell us what you're trying to buy — a SOC, an EDR rollout, connectivity, a compliance platform — and we bring you a short list of suppliers we already know and would put our name next to. You pay the supplier what you'd pay them anyway. The supplier pays us.
trace · placement> need: 24x7 SOC coverage, ~800 endpoints> constraints: US-based analysts · existing SIEM stays matching against network.......... ├─ supplier A [MDR/SOC] ── shortlist ✓ ├─ supplier B [MDR] ── shortlist ✓ ├─ supplier C [SIEM resale] ── wrong fit> intros drafted → you take the calls> placement · commission disclosed> we stay on the account
How we get paid
Up front, because you'd find out anyway, and because it changes nothing about your price.
Suppliers pay us a commission or a residual when a placement closes. You pay Partners nothing. Channel pricing is built into how these suppliers sell, so your quote is the same with us in the deal or not — usually better, because we know what the last three buyers paid.
Two things keep this honest. NullTrace's assessment and testing work is priced independently and is never contingent on what you buy here. And if the right answer is "don't buy anything yet," that's the answer you'll get — a placement that doesn't survive renewal isn't worth the residual.
How it works
One email starts it. Most shortlists come back inside a week.
We shortlist
Two to four suppliers from the network that actually fit. We skip the ones that don't, and we'll tell you why they were skipped.
You take the intros
We make the introductions and sit in on the calls if you want us there — translating the pitch, pressure-testing the claims, negotiating the number.
We stay on the account
After the placement we remain your contact. When renewal comes around, we re-check the market before you sign again.
What we place
The categories where the network is strong today. It grows deliberately, not fast.
Managed security
MDR, SOC-as-a-service, MSSP relationships that survive first contact with your environment.
Detection & response
EDR, XDR, SIEM — selection, licensing, and the services to run them.
Identity
IAM, PAM, SSO and MFA rollouts, and cleaning up what the last rollout left behind.
Network & connectivity
SD-WAN, SASE, business internet, UCaaS — the classic agent line card, done with security in mind.
Cloud & infrastructure
IaaS, colocation, backup and disaster recovery, and migrations between any of them.
GRC & compliance
Compliance platforms, awareness training, and vCISO tooling that doesn't shelf-ware.
The network
Two ways in from the other side of the table.
If you're a supplier
Deals arrive scoped: the client's environment, constraints, and budget realism are sorted before the first call. If your offering holds up in our clients' environments, you stay on the shortlist. If it doesn't, you won't.
Get on the listIf you're an agent or advisor
Your clients need security depth beyond the line card; ours sometimes need what's on yours. We reciprocate referrals and split cleanly, in writing, before the first intro is made.
Compare line cardsTell us what you're trying to buy
First reply is a real read on your situation, not a pitch deck. If the honest answer is that you don't need to buy anything, you'll hear that instead.
Helpful in the first email
- What you're trying to buy, in one or two sentences
- Rough size: endpoints, users, sites, or spend
- What's in place today and what's staying
- Any deadline or contract end-date you're working against