Proof, boundaries and fit

01 · PRESALES PROOF FROM RESEARCH

Show clients what the Surfaces have already revealed.

Access
Access validation & edge exposure
Observed — exploitation and credential-validation pressure against an exposed appliance profile, captured target-side. Supporting material — request patterns, tooling and the sequence of what was attempted. Outcome — the controls that interrupted the activity, plus shareable detection content for a client conversation.
FortiBleed from the Target Side: What Stops Them · 2026-06 Read the research →
Engagement
Agentic operator workflow
Observed — AI-enabled tooling used to assemble and run an intrusion-support workflow, inside a controlled environment. Supporting material — session activity, generated artifacts and operating patterns. Outcome — analysis of how AI-assisted tooling reshapes an intrusion, useful in executive briefings.
The AI Did Not Write the Phish. It Built the Business. · 2026-06 Read the research →
Engagement
Deep engagement & propagation
Observed — a Go ransomware-worm executing inside a controlled target. Supporting material — session records, files and tooling recovered during the engagement. Outcome — a behavioral breakdown plus detection and hunting content a partner can package.
Inside Sorry-worm: anatomy of a Go ransomware-worm hybrid · 2026-05 Read the research →
Research is a public capability proof and presales asset. It must not be represented as a guarantee that a downstream client will see the same event.
02 · COMMERCIAL & GOVERNANCE BOUNDARIES

What is set by contract, not by marketing copy.

  • The partner retains the downstream commercial relationship under the partner agreement.
  • OHIIHO’s access, support and client-contact rules are defined contractually.
  • Raw evidence, Findings, briefings and derived content may carry different rights; redistribution or resale is not automatic.
  • Customer-governed terms require explicit retention, access, export and distribution rules.
  • Cross-customer correlation is not a public default capability.
  • Premium counterintelligence capabilities for eligible government and national-security agencies are discussed on request and sit outside the partner offer.

Read the Trust page

03 · IDEAL PARTNER PROFILE

Where this model works — and where it does not.

Good fit
  • an MSSP or MDR with an existing SOC and client-success process
  • a regional integrator with access to regulated or critical accounts
  • a telco, cloud or hosting operator seeking a differentiated security service
  • a partner willing to designate operational and commercial owners and start with a first engagement
Poor fit
  • a reseller seeking a zero-touch boxed appliance immediately
  • a partner requiring unlimited custom development before first revenue
  • a party seeking unrestricted access to raw adversary data
  • a company expecting OHIIHO to operate all downstream L1/L2 services