Partnering with Defguard

Offer the most secure WireGuard VPN solution with identity, MFA, and zero-trust access to your clients on prefered terms.

Technical enablement
Co-marketing support
Deal support

Defguard Partners (MSP/MSSP)

Find authorized Defguard Managed Service Providers and Managed Security Service Providers in your region.

epssi

France

IT managed services provider delivering infrastructure, cybersecurity and support solutions for businesses.

WorldWideWAN

Germany

Globally operating IT system house, offering hybrid infrastructure, security solutions, and managed services in over 150 countries.

FOXiT GmbH – Member of FOXGroup

Germany

The FOXGroup is a network of highly specialized companies in the fields of Data Protection & Information Security, IT Security and Managed Services.

Xcomp

Poland

IT infrastructure and consulting company, offering networking, security, storage and certified hardware solutions across Poland and Europe.

Partnership types

We provide the most secure WireGuard VPN solution with identity, MFA, and zero-trust access to your clients. You can resell it directly to your clients or integrate it into your managed services.

Value-Added Reseller (VAR)

Resell Defguard while enhancing it with your own expertise. Deliver added value through deployment, customization, integration, training, and ongoing support—helping customers get more from a powerful security and network management platform.

Managed Services Providers (MSP)

Integrate Defguard directly into your managed services portfolio. Offer customers stronger security, simplified VPN management, and centralized network control as part of a fully managed, recurring service model.

Defguard Whitelabel

Launch your own branded security solution powered by Defguard. Rebrand the platform with your company’s identity and offer it to customers as your own product—while leveraging Defguard’s proven technology under the hood.

What partners get

We support partners with technical enablement, go-to-market resources, and a product roadmap aligned with enterprise needs.

Technical enablement

Documentation, training, and access so your team can deploy and support Defguard confidently.

Co-marketing

Joint webinars, case studies, and demand-generation support to reach security and infrastructure buyers.

Deal support

Deal registration, proof-of-concept assistance, and escalation paths for enterprise opportunities.

Ready to explore a partnership with us?

Defguard is experiencing fast adoption as the go-to enterprise orchestration platform for WireGuard.

To register your interest in becoming a Defguard partner, please follow these steps:

  • Share your goals and requirements like number of customers and number of Defguard licenses you plan to sell.
  • Review our partner program agreement
  • Schedule a call with our partnership team to discuss the details.
  • Sign the partner program agreement and get access to our deal registration portal.

Get in touch

Reach out to our partnership team to discuss how we can work together.

We typically respond within 24 hours

Defguard capabilities for your customers

Enterprise WireGuard VPN with identity, MFA, and governed operations. Built for production and scale.

Connection-level MFA/2FA

Verify access when the tunnel comes up, not just in a web login.

SSO and directory sync

Use existing identity to manage users and groups.

Zero-touch enrollment

Make new devices predictable to onboard and offboard.

Access policy

Define who can reach what, and keep it consistent.

Visibility

See active devices and access events in one place.

Audit trail

Track admin actions and access history for reviews.

Stories from teams running Defguard

"It's a unique modern VPN solution, not another extension based on WireGuard® with just web interface and MFA for login to the web without connection cover. You can run all microservices components written in Rust yourself without any requirements for communication with other services running by someone else and you have more options on how to run it, e.g. control plane on Kubernetes and gateways on other VMs. But it's not only VPN solution, it provides you also IDP like e.g. Keycloak so you can decrease the number of tools for hardening. And all of this is open-source with a community driven development."

Zdeněk Váňa , Cloud & DevOps Team Lead at Prusa Research

"Trying to solve the remote access problem, I’ve looked into popular solutions like Tailscale, Netbird or Firezone offering VPN management with Wireguard, but their focus lies in the cloud/SaaS and does not fit our scenario perfectly. Then I’ve discovered Defguard which is designed with private cloud use cases in mind and offers built in identity and SSO. With Defguard documentation and support the evaluation was fast and easy."

Kacper Wiśniewski , Venture Partner at Acquinox

"The team really appreciates the ease of use, security and speed of the platform (thanks Wireguard). I’ve been trying to push more open-source solutions into our software stack and Defguard seems like the perfect choice."

Jan Zajc , IT at Sipro Inženiring d.o.o.

Defguard Partner FAQ

Answers about licensing, ordering, data privacy, support responsibilities, and trial licenses for Defguard partners.

In whose name is the license issued for Defguard partners?

The license is issued in the name of the End-Customer (the entity using the software). Partners facilitate purchase and deployment, but the End-Customer is the legal owner of the license. For MSP or whitelabel setups, the partner may manage the instance, while the legal right to use the software remains tied to the specific client deployment.

Can partners transfer a Defguard license to another customer or environment?

Yes for environment transfer: because Defguard is self-hosted, you can migrate a license to a new server, but you must decommission the old instance before activating the new one. Customer transfer between different legal entities is generally non-transferable; any reassignment due to contract termination must be cleared with the Defguard team directly.

What does the ordering process look like, and how long does it take to receive the license key?

Partners complete deal registration to initiate the request, Defguard prepares pro-forma or payment instructions, the license key is issued once payment is confirmed, and digital delivery is typically completed within 24 hours (one business day) of payment processing.

Are we required to provide any customer-identifying or personal data when placing an order?

Yes, but only organizational details necessary for the license and billing: company name, tax ID/VAT number, business address, and a technical contact email for key delivery and security bulletins. No individual end-user data (such as your client's employees) is required.

What customer personal data would Defguard have access to during service delivery?

None. Defguard is strictly self-hosted, so all user metadata, cryptographic keys, and VPN traffic remain within the infrastructure controlled by you or your customer. Defguard has no remote access to the internal database or user logs.

Who is expected to provide end-customer support: Defguard or the partner?

The partner provides level 1 and level 2 support (deployment and user-facing issues). Defguard provides level 3 support to the partner for core software issues or bugs.

Are there any usage limitations for the trial version beyond the time restriction?

The trial is feature-complete. It unlocks enterprise capabilities (such as OIDC sync and multi-tenancy) that are usually limited in the free starter version. The main limitation is the time window, typically 14 to 30 days.

How quickly can a trial license be issued?

Trial keys are usually issued within 24 hours of the request being processed.