VxSure Website
Request access

For MSSPs, system integrators, telcos and cloud operators

Layer 7 web security, run on your infrastructure.

VxSure inspects HTTPS, files, data and DNS in a single pass, inside the session. Deploy it as a compact software-defined appliance on infrastructure you control and manage every customer from one console.

Request access

Securing your own organisation? Find a partner

  • Single-pass Layer 7 inspection
  • No endpoint agent
  • Partner-hosted browser isolation
  • Multi-tenant console

  1. User opens a page, uploads a file or prompts an AI tool

    Managed or unmanaged device, no agent installed

  2. Organisation VPN or office tunnel

    Existing identity provider signs the user in

  3. VxSure appliance, beside the firewall

    Partner infrastructure: public cloud, private cloud, KVM or data centre

    One pass

    • DNS
    • TLS
    • Files
    • DLP
    • AI and SaaS
    • Policy
    • Allow
    • Strip
    • Isolate
    • Block

  4. Internet, SaaS and AI services

    Every decision logged to the SIEM

The path of one web request through VxSure. This example ends in isolation.

ProblemPartners need services customers will pay for, not another feature list.

Eight managed services on one engine.

Basic

Managed secure web gateway

DNS and category filtering cannot see inside HTTPS or files on trusted domains. VxSure inspects TLS with the customer's own CA, checks files inline, and detects DNS tunnelling.

DecisionsIllustration
09:41:02GETdocs.saas-app.exampleAllow
09:41:05POSTassistant.ai-tool.exampleBlockPII found in upload
09:41:09GETnew-domain.exampleIsolateUncategorised site
09:41:12GETnews-portal.exampleStripRisky active content removed
09:41:15DNSx7f3a9.tunnel.exampleBlockDNS tunnelling
Power

AI and SaaS governance

Staff paste and upload company data into AI tools and personal accounts. VxSure separates company and personal accounts and sets rules per app.

Policy ruleIllustration
IFdestination = AI assistant
ANDaccount = personal
ANDupload contains PII
THENBlockLog
Power

Data loss prevention (DLP)

Detects PII, financial and health records in text, files, archives and images (OCR), and blocks uploads to unapproved destinations.

Power

Remote browser isolation (RBI)

Renders risky and uncategorised pages in a remote browser on partner infrastructure. Active code never reaches the device.

All editions

Compliance evidence

Every decision logged with user, rule and action, policy changes recorded, logs kept on the partner's in-region infrastructure.

Advanced

Clean-pipe security

Inline inspection for subscriber traffic, with traffic mirroring to the provider's own monitoring.

Advanced

Integrated SaaS access

JWT-based SaaS integration and advanced usage controls for environments integrators design.

All editions

SOC web telemetry

Structured logs of every web decision forwarded to the SIEM, adding application-layer evidence to the SOC.

ProblemReselling a vendor-hosted service gives the provider no control over infrastructure, data location, pricing or differentiation.

Operate the service. Don't resell it.

You control

  • Infrastructure: public cloud, private cloud, your data centre or the customer's.
  • Data location: logs and traffic stay where you host them.
  • Packaging and pricing: service scope, SLAs and customer price.
  • Customer relationship: first-line operations and the contract.

VxSure provides

  • The engine: one compact software-defined appliance with a built-in console.
  • Multi-tenancy: many customers, one console.
  • Editions: unlimited Basic; Power and Advanced as requirements grow.
  • Isolation in the same model: RBI runs on your infrastructure.
Console · TenantsIllustration
Customer ABasicpolicy v14
Customer BPowerpolicy v9
Customer CAdvancedpolicy v22
Customer DBasicpolicy v3
Customer EPowerpolicy v11

VxSure's revenue depends on productive partners, not on owning your customers.

ProblemVendor demo tenants prove nothing about behaviour in your own environment.

Test the Advanced edition in your own environment.

  1. Join as a Foundation partner

    No fee. Onboard up to two technicians and receive six Advanced non-production instances for proof of concept, evaluation and training.

  2. Run the proof of concept

    Deploy in your lab or the customer's environment. Fortnightly technical workshops and included assistance sessions support the build.

  3. Move to production

    Deploy Basic without instance limits. Add Power and Advanced, and move to Growth or Strategic, as your customer base grows.

ProblemLayer 7 security has typically meant agent rollouts, blanket blocking of AI and SaaS, and contracts sized for large enterprises.

For organisations

Layer 7 security, delivered by a partner you choose.

No endpoint agent

Traffic arrives through your existing VPN and office tunnels, signed in with your identity provider.

Data rules, not blanket blocks

Allow AI tools and SaaS apps with policy on what data may be uploaded and where.

Isolation for the unknown

Uncategorised sites open in an isolated remote browser instead of being blocked.

Data stays with your partner

Traffic and logs remain on infrastructure your partner operates, in your region.

Find a partner

Remote browserIllustration
https://uncategorised-site.example/offer

Rendered remotely. Active code stays off the device; downloads and paste follow policy.

ProblemChained point tools inspect in separate passes, add latency and leave gaps when one rule is bypassed.

One engine. One pass. Full session context.

A single software-defined appliance with a built-in console performs Application Layer (Layer 7) inspection on every session. Bypassing one rule does not disable the others.

  • TLS inspection with the organisation's own certificate authority.
  • Inline file inspection, with no separate sandbox wait.
  • DNS security: filtering, tunnelling detection, encrypted DNS under policy.
  • Command-and-control blocking, content disarm and a page security header.

Follow one request end to end

Decision log · JSONIllustration
{ "user": "a.rao", "rule": "pii-to-ai-personal",
  "action": "block", "detector": "PII",
  "policy_version": 14, "time": "09:41:05" }

Three editions. One engine.

Offer the right depth to each customer. Select an edition to see what it includes.

  • Session inspection, single passAll
  • TLS inspectionAll
  • Inline file inspectionAll
  • DNS securityAll
  • Decision loggingAll
  • DLP with OCRPower
  • AI and SaaS governancePower
  • Remote browser isolationPower
  • Network traffic mirroringAdvanced
  • JWT-based SaaS integrationAdvanced
  • Branded warning pages and usage controlsAdvanced

Contact us for pricing. Full comparison

Three tiers, by operating scale.

No fee

Foundation

Evaluation and market entry

  • Up to 2 technicians
  • 6 Advanced evaluation instances
  • Unlimited Basic production deployments
  • Fortnightly technical workshops

Recurring services

Growth

Partners building recurring managed services

  • Up to 6 technicians
  • 15 Advanced evaluation instances
  • Power production instances included
  • Weekly Solution Performance Review

Scale

Strategic

MSSPs, telcos and cloud operators

  • Up to 10 technicians
  • 35 Advanced evaluation instances
  • Power and Advanced production instances included
  • Weekly workshops and product-planning participation

Contact us for pricing. Full comparison

ProblemNew security layers that require rearchitecting the network or replacing the firewall do not get deployed.

Fits the stack you already run.

Your platform

Public cloud, private cloud, KVM-based hypervisors or a virtualised data centre.

Beside the firewall

Adds Layer 7 inspection to the network-layer controls you already run.

No endpoint agent

Organisation VPN for remote users; firewall and router tunnels from offices.

Your identity provider

Users sign in with the login system the organisation already has.

Your tools

Structured logs to SIEM, ticketing and automation tools.

Many customers, one console

Per-tenant policy and logs from a single multi-tenant console.

ProblemWhen a customer is down, a partner needs a defined escalation path, not a ticket queue.

Defined escalation, to the engineers who build it.

  1. First line

    Partner

    Customer relationship and day-to-day operations.

  2. Second line

    VxSure partner support

    Email support on every tier, plus included assistance sessions for customer escalations.

  3. Third line

    VxSure engineering

    Product defects and fixes, handled by the engineers who build the product.

Production-down issues are handled first, on every tier.

Enablement includes technical workshops, Weekly Solution Performance Reviews, documentation and a partner kit (coming soon). Every decision and policy change is logged, which helps customers meet their obligations under India's DPDP Act, GDPR and HIPAA.

Run Layer 7 security as your own service.

Join as a Foundation partner and test the Advanced edition in your own environment.

Request access Find a partner