We create the partner tiers, advisory boards, and referral mechanics that genuinely drive retention and pipeline for B2B cybersecurity companies with $5M-$100M ARR.
The Challenge
Channel partners lack a reason to prioritize you
In cybersecurity, MSSPs and resellers carry five vendors in the same category. Without a real tiering structure – certification levels, deal registration protection, co-marketing funds tied to performance – your product is just another line item they push when it's convenient, not when it's best for the client.
No one says thank you until renewal season
Most B2B security vendors only reach out to customers when a contract is about to lapse or a competitor is circling. There is no recognition system for accounts that renewed early, expanded seats, or stuck through a rough incident. That silence reads as indifference and it shows up in your renewal numbers.
Satisfied customers are never invited to advocate
Security buyers trust peer references more than any analyst report, but most vendors have no structured way to identify who would say yes to a reference call, a case study, or a conference panel. The ask, when it happens, is a one-off email from a CSM with no incentive attached and no follow-through.
The advisory board is a wall of logos, not a working group
Plenty of cybersecurity companies have a customer advisory board that meets twice a year, gets a nice dinner, and produces a slide nobody references again. Without a real cadence and a mechanism to route feedback into roadmap and messaging, it's a cost center dressed up as a loyalty program.
What We Do
We begin by assessing exactly where retention and advocacy break down in your business. That involves pulling renewal and expansion data by segment, interviewing your leading partners about why they do or don't lead with you, and auditing any reference or case-study process currently in place. Usually, it's informal – a spreadsheet, something a CSM keeps in their head, or nothing at all.
Next, we develop a strategy that reflects how cybersecurity is actually bought and sold. That often includes a partner tiering model for MSSPs and resellers with meaningful requirements – certification, deal volume, deal registration – matched by meaningful benefits, rather than just a logo on a page. It also means creating a customer advisory board with a clear charter, consistent meeting cadence, and an explicit commitment to reflect feedback in the roadmap or messaging within a defined window instead of filing it away.
For customers, we create referral and case-study incentive programs that account for how security buyers view risk and reputation. This isn't about offering a gift card for a testimonial. It includes benefits like early access to new features, roadmap input, co-speaking opportunities at events your buyers already attend, or public recognition that supports your champion's own career – because anyone who vouches for you in security is staking their professional credibility.
We also embed renewal and expansion recognition directly into the customer lifecycle rather than treating it as an afterthought. That means identifying accounts that renew early or add seats and ensuring someone senior acknowledges it in writing before the next renewal cycle even begins. It may sound minor. Yet it's among the highest-leverage, lowest-cost retention tools available, and almost no one applies it consistently.
Execution is where most programs fall apart, so we establish the operating cadence with you – who manages partner tier reviews, who sets the advisory board agenda, and who monitors referral asks and follow-through. We implement it alongside your CS, sales, and marketing teams so the program continues after we leave.
Measurement stays connected to the metrics that matter for a growth-stage security company: partner-sourced and partner-influenced pipeline, net revenue retention, reference availability rate, and advisory board feedback reflected in shipped product or revised messaging. We report what changed, not the number of points redeemed.
What we deliver
- Partner/MSSP tiering model with certification, deal registration, and co-marketing structure
- Customer advisory board charter, cadence, and feedback-to-roadmap process
- Referral and case-study incentive program built around professional credibility, not cash
- Renewal and expansion recognition workflow embedded in your CS motion
- Ownership map and operating cadence so the program runs without an agency
In cybersecurity, the product is trust. If a loyalty program doesn't generate a reference, renewal, or referral, it's simply a party with a logo on the step-and-repeat.
Our Methodology
We deliver this through a 90-day sprint rather than an open-ended retainer. The first 30 days focus on assessment and design: auditing your existing partner and customer data, interviewing top accounts and channel partners, and designing program mechanics suited to your buyer and GTM motion. Days 31-60 cover build and pilot – we launch the tiering model or advisory board structure with a small group first, allowing us to repair what's broken before rolling it out company-wide.
Days 61-90 focus on rollout and handoff. We launch across the full partner or customer base, document the operating cadence, and train the person on your team who will own it moving forward – typically someone in customer success or partner marketing. We won't create a program that functions only while we're in the room.
This isn't a standard loyalty-program template inserted into a security company. Each deliverable reflects how MSSPs, resellers, and security buyers actually make decisions, which differs from how a SaaS company's end users react to points and badges.
Our Process
Weeks 1-4 (Days 1-30): assessment. We speak with your top 8-12 partners and customers, analyze renewal and expansion data, and review your current advocacy and partner processes. You receive a written diagnosis showing where retention and advocacy leak, along with a program design tailored to your actual buyer.
Weeks 5-8 (Days 31-60): build and pilot. We implement the partner tiering framework, advisory board charter, and referral/renewal recognition workflows with a pilot group – generally your top 10-15 accounts or partners – to identify friction before the full rollout.
Weeks 9-12 (Days 61-90): rollout and handoff. We complete the full launch, document the operating cadence, and train an internal owner to manage it. A typical engagement is one 90-day sprint; some clients continue with a lighter-touch quarterly cadence to keep partner reviews and the advisory board on schedule.
The team is deliberately small – a lead strategist responsible for program design and a partner/customer marketing specialist who develops the operational components. You won't get a revolving team of juniors. Expect weekly sprint check-ins, with async updates between them.
- Higher partner-sourced and partner-influenced pipeline from MSSPs and resellers
- Improved net revenue retention through structured renewal recognition
- A working bench of customers willing to do reference calls and case studies on short notice
- Advisory board feedback that visibly shows up in product or messaging decisions
- A retention and advocacy program your team can run without outside help after the sprint
If your cybersecurity company needs loyalty & rewards leadership, we should talk.
Expand your marketing team output with our experts
Let us take a custom approach to your growth goals by assembling and leading the best-in-class marketing team to support your next stage.
Frequently asked questions
What does a loyalty or retention program engagement cost?
Pricing varies by scope – whether you require a complete partner tiering model, customer advisory board, referral mechanics, or all three. Most 90-day sprints for a Series A-Growth security company fall within a fixed-fee range that we'll quote after the initial assessment call, rather than using a percentage-of-spend model. There is no separate 'platform fee' because we aren't selling loyalty software.
When can we expect to see results?
The program launches during the 90-day sprint itself. Reference availability and partner-sourced pipeline typically begin moving within one to two quarters of rollout. Improvements in renewals and net revenue retention appear according to your current renewal cycle, meaning a company with primarily annual contracts will see that signal about a year later.
Will we need to hire someone new to manage this after you leave?
No. The sprint includes determining who on your current CS, partner, or marketing team will own the program going forward, then training that person on the cadence before handoff. If no one has the capacity, we'll tell you directly instead of creating something that quietly dies in month four.
What makes this different from a marketing agency managing a referral campaign?
Agencies execute campaigns. We create the foundational structure – tiering logic, advisory board governance, recognition workflows – plus the operating cadence that sustains it within your company. We also don't recommend a consumer loyalty model based on points and badges, because that doesn't align with how channel partners or security buyers make decisions.
How do you evaluate ROI for something like an advisory board?
We connect it to tangible outputs: feedback items that influenced the roadmap or messaging within a set window, partner-sourced pipeline from the tiering program, reference call volume and win rate for the advocacy program, and renewal/expansion rates tied to the recognition workflow. We don't use attendance or satisfaction scores as substitutes for those outcomes.
Is this a good fit for our company?
This is best suited to cybersecurity companies with $5M-$100M ARR that already have customers or channel partners worth retaining but lack a formal structure around them. If you're pre-revenue or don't yet have customers or partners on which to build a program, you'll need a different engagement first – speak with us about strategy or GTM work instead.
