Your UK channel,
already mapped.
66 UK MSPs that could sell RTP penetration testing and red-team work under their own brand — sorted by how ready each one is, screened for lawful B2B calling, and handed to a caller who books the meetings.
Scroll to zoom · drag to pan · tap a dot for the phone number
Distance straight-line from RTP, London. Towns from public records. Switchboard numbers are RTP's to keep.
A big, fragmented pool ตลาด
The UK has more managed service providers than any single vendor can reach. Most are small, most sit outside London, and a new law is about to make security testing their problem too — not only their clients'.
active UK MSPs
(DSIT / Frontier Economics, 2025)
small & medium — the reachable pool
large enough for the Cyber Security & Resilience Bill
named, placed and sorted here
67% of UK MSPs sit outside London — Leeds, Manchester, Birmingham, Milton Keynes, the North East, Wales. This list follows them there.
RTP has the offer. The channel is the missing half.
RTP's partner terms already do the hard part: partner-branded reports and portal, wholesale pricing about 20% under market, and a written non-solicit. What sits between that offer and signed partners is desk work — and that is what this is.
RTP already publishes
- White-label reports & findings portal (RTP Robin)
- Wholesale price ~20% under market; partner sets the retail
- Written non-solicit — RTP does not approach the partner's client
- 12 months of retests included
- CREST penetration testing & ISO 27001
The channel still needs
- A qualified calling list — who to ring, in what order
- A caller booking partner meetings, UK hours
- Deal registration & onboarding once they say yes
- Named case studies and sales collateral
- Report editing & branding at partner volume
Three tiers, hottest first
Colour runs hot to cold: red is call-first, blue is the longest sell.
Already buys testing
Lists penetration testing but has no CREST team of its own — so it already pays an outside tester. The call offers a better one, with the non-solicit in writing.
Already resells a test
Bundles a CREST-branded test today through another supplier. The call is a straight swap — on price, turnaround and the written non-solicit.
Sells the security around it
Cyber Essentials, managed detection, ISO 27001 clients — everything but the test. Pentest is a new line on a quote they already send.
A sample, from the real list
Public facts, from each firm's own site and Companies House. The full 66-row list adds the named decision-maker, direct line, an opener written to each firm's own evidence, and the screening record — delivered to RTP, kept off this page.
Priced so the partner keeps the margin ราคา
UK day rates and per-test prices are public. RTP's wholesale sits about 20% under them; the MSP sets its own retail and keeps the difference. The list makes the first call cheap; the margin makes the partner stay.
| Test | Typical UK client price |
|---|---|
| External infrastructure (2–3 days) | £1,500–3,500 |
| Internal infrastructure (4–8 days) | £4,000–10,000 |
| Web application | £3,000–8,000 |
| Cyber Essentials Plus audit | £1,500–3,000 |
| Red team engagement (typical) | £25,000–45,000 |
Ranges from UK pentest-pricing pages (grit-consultancy, thecyphere), Sept 2026 — vendor guides, not fixed quotes. RTP confirms its own wholesale before any number reaches a partner.
Chiang Rai runs while the UK sleeps
The team at motdang.net (trading as Hongdam) works the UK day from Thailand. The morning here is the small hours in Britain — call prep, screening and onboarding are ready before the UK opens.
1Channel desk
List upkeep, TPS/CTPS screening, call prep, deal registration, partner onboarding, scheduling, retest tracking.
2Report desk
Testers write findings; the desk edits, checks and brands each report per partner. Carries client data — under NDA and the data agreement.
3Partner web & agents
Programme pages, a deal-registration form, a scoping calculator, and a partner assistant that answers from RTP's own documents.
4Thailand channel
motdang.net resells RTP to Thai businesses in Thai — making it RTP's first named partner, the case study the site is missing.
AI red-teaming, in Thai — and in scripts models barely saw ไทย
RTP sells AI red-teaming. Guardrails trained mostly on English hold less well when the attack changes language or alphabet. Native speakers here push models off their patterns and the injections land:
English written in Thai letters — the kind of drift a Thai-trained model produces on its own.
Tai Tham (Lanna) and Khom script — almost no guardrail training text exists.
Northern Thai dialect and Thai-English switching mid-sentence.
A live probe bench already runs on motdang.net's own models (SEA-LION, Llama Guard). Nobody else is selling this.
We start with the tier you pick.
The list is built and the desk is here. Over the table on Tuesday: open the map, choose the first tier to work, set who owns the partnership on each side — and put a caller on it that week.
Bring this link Tuesday · Palida (Beer) · motdang.net / Hongdam, Chiang Rai