MSSPs
Our core partners.
Firms that run security for many organizations at once. Outerwall puts every client in one fabric, sends ranked fixes to their PSA and gives their vCISO a program to run for each client. For MSSPs.
Outerwall is a cybersecurity company based in Dublin, Ireland. We build a predictive risk fabric: a live map of companies, their suppliers and the software they run, with exposure management and GRC on top.
We build it for MSSPs and MSPs, and we sell it only through them. The organizations they protect get Outerwall from the partner they already trust, under that partner’s name. The United States is our core market, and we already work with clients in Ireland.

Partners first. Everything is designed around how an MSSP or MSP already works, and around the clients they look after.
MSSPs
Firms that run security for many organizations at once. Outerwall puts every client in one fabric, sends ranked fixes to their PSA and gives their vCISO a program to run for each client. For MSSPs.
MSPs
IT providers who want to offer security without building a security team. Ranked tickets land where their technicians already work. What an MSP gets.
The organizations they protect
Firms that need proof they’re in control, for customers, insurers and regulators, and rarely have the people to produce it. Those with a security team get Outerwall through a partner too. For security teams.
Patrick O’Callaghan, our co-founder, has spent 23 years in cybersecurity, much of it owning and running consultancies that do this work for clients: finding what’s exposed, testing it, helping fix it and proving to someone else that it’s under control. He founded Kontex, which Ekco acquired in 2022.
He has done that work from the partner’s side, so he knows where it gets hard: the margin on each client, the vCISO hours that don’t stretch, the report that’s out of date soon after it’s delivered, and the supplier nobody listed.
Outerwall is built around that. It’s priced per organization so the partner keeps the margin, its fixes land in the partner’s PSA, its program is approved by the partner’s vCISO, and everything the client sees carries the partner’s name.
We don’t sell to the organizations you protect. If one contacts us, we send it to you, and we never use what we learn about it to sell to it.
Reports, the client portal and each Trust Center carry your name. You set the price to your client.
We read public sources only until your client proves control, signs the scope and gets 24 hours’ notice.
Tested rules find the facts and models draft words. Every risk, policy change and published statement is approved by a named person.
Start with your own domain, then add the organizations you protect, one at a time.