Give each client a weekly vulnerability-change brief with your brand, dated findings and the source receipts behind them. The provider licence covers redistribution to 20 named clients. The $1,500, 30-day paid pilot is credited in full toward the annual licence.
At a client price of $200 a month, 20 clients produce $48,000 in annual client revenue. The $12,000 vciy licence leaves $36,000 before the provider's delivery cost. The provider sets its own client price; the example shows the arithmetic.
20 clients × $200 × 12 months
one annual provider agreement
before the provider's service-delivery cost
Not a score and not a newsletter. Each brief is one dated document per material change, under your mark, with five named sections, and the last one is why it can be handed on rather than merely read.
What it is, as a file. A web document at a durable link, which is the point: the link is what makes it re-derivable in front of the client's auditor. It carries a print stylesheet built for this (16mm margins, and the observation table trimmed to the rows that carry information) so it saves to PDF from the browser and lands as one page. There is no separate PDF export and no email-the-client delivery today: you send the link, or you print it under your mark.
Weekly is the cadence, not the limit. The weekly delta feed is what arrives unprompted, for the clients whose stack moved. Any CVE in the corpus can also be briefed on demand from its own record, in the same five sections, at the moment somebody asks, so a client calling you at 2am about one advisory does not wait for Monday.
The vulnerability as its own authority describes it, quoted rather than paraphrased, with the affected and fixed versions and the CNA's own reference links.
KEV status with the date added, the remediation-due date and known ransomware use, each one carrying the date we learned it, not just the date it is true.
The observation table: every dated change we hold for this record, and how many observations sit behind it. This is the part a client cannot get from a feed.
What was found beyond the authority records, with the searches run and every source retrieved named and linked.
Every value above carries two dates and the SQL that re-derives it. Your client, or your client's auditor, can verify the brief without trusting you or us. That is what you are reselling: not our opinion, a checkable record with your name on it.
A specimen, so the shape is not left to imagination. Every value below is public and live on this site: this is a real record, not a mockup, with the provider's mark where yours would go.
Worth reading before you put your mark on someone else's evidence, and it is better to be told here than to find it in section 12.