Managed Service Providers

The Window for ZTNA is Right Now

Your customers are feeling real pressure across three fronts simultaneously—and each one is a conversation you can walk into today.

VPN Exploits
High-profile remote access vulnerabilities have enterprise buyers questioning whether legacy VPN is a liability they can keep carrying.

CMMC Deadlines
Defense contractors under CMMC 2.0 need demonstrable access controls now. The compliance clock is no longer theoretical.

Accelerating Breaches
Breach cycles are compressing. Buyers who were deferring security decisions are being forced off the fence by events they can't ignore.

A woman is speaking on stage

Grow Your MSP Business with AppGate ZTNA

Explore the key ways the AppGate MSP Program helps you drive recurring revenue, differentiate your services and deliver better outcomes for customers.

Grow recurring revenue

Create new revenue streams with usage-based pricing that scales with your clients. Boost customer share of wallet with enterprise-grade security they can't get elsewhere.

Deliver enterprise-grade zero trust

Provide industry-leading ZTNA built on direct-routed architecture—not proxy-based. Enterprise-class security that protects customer networks and data at scale.

Differentiate your security services

Stand apart from MSPs still relying on legacy VPN or proxy-based remote access solutions. Position Zero Trust access as a premium security service.

Reduce operational complexity

Deploy and manage secure access across distributed environments without the operational burden of legacy infrastructure.

Accelerate deal cycles

Leverage AppGate's technical expertise, architecture advantages and partner support to help customers move faster from evaluation to deployment.

Improve customer outcomes

Help customers improve access security and reduce operational complexity. Integration-friendly technology builds cohesive security offerings that exceed evolving demands.

Nine23 logo
Matrixit logo
Ironcore logo
Avertium
Rudio logo
Netcov

What You Get as an AppGate MSP Partner

Technical enablement, commercial model, and partner support—everything needed to deliver ZTNA as a managed service.

Pricing Built for the MSP Model

Simple, predictable per-seat pricing at $5/seat/month with no hidden fees and no minimums beyond your committed pool. Bill your clients the way you already do, consumption-based, monthly or quarterly, and keep your margin clean.  

True Multi-Tenancy

Manage all your clients from a single pane of glass. Separate policies, separate access controls, separate environments, one platform. No spinning up a new instance for every client. Built for scale from day one.  

Dedicated Support

You're not handed off to a ticket queue. Every AppGate MSP partner gets a dedicated Customer Success Manager and Solutions Engineer who know your environment, your clients, and your deployment, and are available when you need them.

Full Visibility

Your AppGate environment connects directly to our Zero Trust Platform, giving you and our team real-time visibility into usage, licensing, and billing, so there are no surprises at the end of the month and no manual reconciliation. 

Man requesting help from coworkers after finding

"As a Security Partner we utilize a best-of-breed approach to our technology platform. When it comes to Zero Trust, AppGate is the best in the business. AppGate allows us to provide a seamless approach to Zero Trust Network Access for our client base. An added benefit is the great team that they have in place to assist us and further augment the Managed Service we deliver to our clients!"

Avertium

Dan Johnsen
Alliance Manager | Avertium

210%

ROI with payback in under 6 months, delivering $11.6M net present value (NPV) over three years

75%

improvement in remote user productivity, driven by direct‑routed, low‑latency access without cloud hair‑pinning

80%

reduction in breach exposure by cloaking infrastructure and enforcing identity‑based, least‑privilege access

50%

reduction in network access management effort and costs, lowering support tickets and operational overhead for MSPs 

Source: Forrester Total Economic Impact™ study of AppGate ZTNA (2025). Composite organization results; actual results may vary. 

Frequently Asked Questions

What makes AppGate ZTNA different from other ZTNA solutions for MSPs?

AppGate ZTNA has no middle component in the data plane, which means your customers' traffic never passes through a third-party infrastructure layer. This eliminates a class of risk that most ZTNA platforms introduce. Combined with an API-first architecture and flexible deployment across any environment, it's designed for MSPs who need to support diverse customer environments without standardizing on a single infrastructure model.

How does AppGate ZTNA help MSPs grow recurring revenue?

The land-and-expand model is straightforward—start with secure remote access or VPN replacement, then grow into additional use cases like third-party access, contractor access, OT/IoT access, and application-specific secure access across hybrid environments. Appgate ZTNA helps MSPs expand recurring revenue by reducing the attack surface through cloaking unauthorized resources, enforcing granular context-aware access, and enabling a segment-of-one approach for each user and device. Each new use case increases MRR without requiring a new platform sale. 

What does deployment look like for an MSP?

AppGate is cloud-native and runs on any Type 1 hypervisor, giving you flexibility to deploy in customer-owned infrastructure, your own hosted environment, or public cloud. The pay-as-you-go model means you're not carrying unused license overhead between customer engagements.

Is there a training and certification path for MSP engineers?

Yes. The MSP program includes technical training and certification designed specifically for partners, along with 24/7 dedicated technical support for delivery confidence.

What compliance frameworks does AppGate ZTNA support?

AppGate holds multiple certifications and supports compliance across frameworks including NIST, CMMC, and others relevant to regulated industries. See the certifications and compliance page for the current list.

How does AppGate handle customers who also need SWG or internet filtering?

AppGate focuses on Zero Trust Network Access and does not include a built-in SWG. For customers requiring internet filtering, AppGate works with technology alliance partners that integrate with the platform. Your AppGate channel team can recommend validated integration options based on your customer profile.

How does the pricing model work—and what does my margin look like?

You pay a flat $5/seat/month with no minimums beyond your committed pool. No complex discount structures to navigate. You bill your clients however you already do—we don't dictate that. Most partners position ZTNA as a line item in their security stack at a price point that reflects the value, not the cost. The simplicity is the point: you should know exactly what you're paying before the invoice arrives.

How do I position Zero Trust to a client who's never heard of it?

Start with the problem they already feel, not the technology. Ask them when they last audited who can reach what on their network—most can't answer that. Then ask how they'd contain a breach today if one of their remote access credentials was compromised. That conversation creates the opening. ZTNA becomes the answer to a problem they already have, not a concept they need to learn.

What does the first 90 days look like for a new MSP partner?

Onboarding is structured around your first client deployment. Week one is platform access, training, and pairing you with your dedicated Sales Engineer. Weeks two through four are architecture review and initial deployment scoped to your first client. By day 60, most partners have completed their first deployment and are in conversations about expansion. Your CSM owns the relationship from day one—you won't be passed between teams.

How does AppGate help MSPs grow recurring revenue?

The natural expansion path—VPN replacement to micro-segmentation to OT/IoT coverage—means a single client can grow in seat count and scope over time. Because pricing is consumption-based and billed per seat, your revenue grows as the client's footprint grows. Partners who start with 50 seats at a mid-market client routinely expand to 200+ within 18 months.