Partner programme
Your brand, your clients, your relationship. Galyct structures the operations.
You keep the contract, the billing and level 1 support for your clients. Galyct provides the platform, the Academy, level 2 and 3 support, service standards, and the firm’s expertise when you request it.
Eligible profiles
For businesses that operate or sell cybersecurity to several organisations.
Cybersecurity consultancies
IT services firms and integrators
Independent virtual CISOs and DPOs
IT resellers
Tiers
Three tiers, two verifiable criteria.
A person is “fully certified” when they hold all four Galyct certifications, currently valid.

MSP Partner
Approved partner with at least one active client.
- Active clients
- 1 or more
- Fully certified people
- none required
- Academy seats included
- 2
- Standard margin on expertise
- 20 %

MSP Certified Partner
At least three active clients and one fully certified person.
- Active clients
- 3 or more
- Fully certified people
- 1 or more
- Academy seats included
- 5
- Standard margin on expertise
- 25 %

MSP Strategic Partner
At least fifty active clients and three fully certified people.
- Active clients
- 50 or more
- Fully certified people
- 3 or more
- Academy seats included
- 10
- Standard margin on expertise
- 30 %
The standard margin applies to the Galyct firm’s expert services that you resell. It is not a discount on your clients’ Galyct Pro licences.
Requirements to join at Partner tier
- a registered company;
- a real and verifiable IT or cyber business;
- current professional liability insurance;
- MFA enabled;
- signed partner contract;
- programme, security and brand usage rules accepted.
Upgrade and downgrade
- automatic upgrade as soon as all the criteria are met;
- notification, certificate and new badge at each upgrade;
- 90 days to restore a lost criterion;
- failing that, a return to the tier immediately below;
- the new margin applies from the following month.
MSP access
No MSP subscription. Access that follows your activity.
Full access to Galyct MSP is maintained as long as at least one Galyct Pro client is active. If you drop to zero clients, a 90-day grace period begins, then access switches to restricted mode.
In restricted mode, the Academy, your history and your certifications remain accessible. Certifications remain valid until their own expiry date.
| Situation | Access |
|---|---|
| 1 or more active Pro clients | full |
| 0 clients, for 90 days | full, in grace period |
| 0 clients, after 90 days | restricted: Academy, history, certifications |
The client relationship
Your client stays your client.
You are level 1
You provide level 1 support to your clients. Galyct provides levels 2 and 3, for you.
Galyct only steps in at your request
The Galyct firm’s expertise is triggered at your request, as a separately invoiced engagement. The only exception: programme mediation, if your client requests it, and you are informed.
Non-circumvention
The partner contract includes a non-circumvention clause: Galyct does not solicit your clients.
Directory
Every approved partner is listed. The prospect chooses.
All approved partners appear in the directory, from the Partner tier upwards. A prospect filters by region, tier, specialities, certifications, client size, sectors and services, then contacts you. The request comes straight to you; Galyct is informed of the introduction and never hands out contacts on its own initiative.
The directory publishes no ratings or reviews. Your quality score stays private.
Tracking an introduction
- passed on;
- taken on;
- quote sent;
- won;
- lost.
Programme dashboard
Your progress, clear at any time.
Tier and badge
Your current tier, your badge, and the criteria met or missing for the next one.
Certified team
Each team member’s certifications and their expiry dates.
Quality and SLAs
Your quality score, your SLAs, your deadlines and remediation periods.
Projection
The likely date of moving up to the next tier, and NARA’s recommendations to speed it up.
Why now
Demand is reaching your clients.
Security requirements are moving up the subcontracting chain, and skills are expensive.
the gross annual salary of a SOC analyst in France, from junior to senior.
Cybersecurity pay scale 2025, Oteria.
more cyber job offers between 2019 and 2024, with employers struggling to recruit.
ANSSI, Observatoire des métiers de la cybersécurité (cybersecurity jobs observatory), June 2025.
French entities directly subject to NIS 2, which pass their requirements on to their subcontractors.
ANSSI, transposition of the NIS 2 directive.
Start with the sandbox, decide afterwards.
Fifteen days to test the roles, the workflows and the Academy. Galyct contacts you during the trial to qualify your organisation.