Grow recurring MSP revenue with EU-native password management

Add a password manager to your service stack. Passwork gives your MSP a dedicated cloud space, wholesale per-user pricing, and full control over what you charge your customers.

Trusted by leading teams:

Maxon PWC Deutsche Post Orange ArcelorMittal Victoria Police

Why leading enterprises choose Passwork Cloud

  • Made in Europe

    Developed in Europe, with full GDPR and NIS2 compliance and data sovereignty

  • ISO 27001 certified

    Development and infrastructure meet the international benchmark for information security

  • Trusted by public sector

    Chosen by government agencies and highly regulated industries across Europe

  • Enterprise‑grade protection

    Zero-knowledge architecture with client-side encryption keeps your passwords private

  • Independent research shows 30% savings compared to competitors

MSP challenges today
How Passwork helps you solve them

Margin pressure in core services

RMM and PSA are becoming commodities. MSPs need a new recurring revenue source that protects margins. Password management is already on your customers' radar.

Recurring revenue on your terms

Set your own customer prices, bundle with your security services, and keep the contract. Passwork charges you wholesale per user with volume tiers. The margin stays on your side.

Compliance pressure without a clear answer

NIS2 is in effect. GDPR and ISO 27001 audits regularly require password management controls. Most tools offer no audit-ready proof.

Compliance posture your customers can demonstrate

ISO 27001 certified, NIS2-ready, GDPR-compliant. Your customers can use Passwork controls and audit logs as evidence in their own audits.

Customer data resides in shared tenants

Most multi-client password platforms keep customer data in a shared admin portal. Segregation is hard to prove in an audit and hard to promise in a sales pitch.

True tenant isolation by design

Each customer gets their own database. The MSP portal routes by domain, keeping every tenant fully separated. A clean audit trail is available for every customer on request.

Customer migration is manual work

Moving customers from LastPass, 1Password, or Bitwarden means exports, rebuilding permissions, and downtime risks. Cutover costs kill many deals before they start.

Mass migration via API, LDAP, and CSV

Import via LDAP, Active Directory sync, REST API, or CSV. Use the Python connector and CLI for script-driven mass operations. Every migration comes with an onboarding playbook and dedicated support.

Customers demand EU data residency

Procurement, legal, and security ask about jurisdiction from the start. Most common password managers are US-hosted, which slows down every deal.

EU data centers in Germany

Passwork Cloud runs on servers in Germany with no US jurisdiction in the path. Conversations with procurement and legal become shorter — and deals close faster.

Vendor branding sits in front of your customer

Other vendors show their logo at every login. Renewals slip to them, your margin is capped, and you can't set prices or plans yourself.

White-label with a custom domain per customer

From the MSP portal, create a secure workspace with a custom domain for each customer in one click. Customers see your brand, not Passwork.

Request MSP program details

Partner price list, an onboarding plan tailored to your customer base, and a 30-minute demo of the MSP portal. No obligation.

Three steps, two architectures, one MSP portal.
Your complete infrastructure for delivering password management as a managed service.

We set up your Passwork Cloud Space

We set up your Passwork Cloud Space

You get a dedicated Passwork multitenancy instance and your own MSP portal. White-label or co-branded, from day one.

We bill you per user

We bill you per user

Partner wholesale price per user per month, with volume tiers. No transaction fees.

You charge your customers according to your own plans

You charge your customers according to your own plans

You set the price, contract, and SLA. Direct billing or reseller. Bundle with your security stack or sell individually.

Operate the service from one portal.
One place, one view, one audit trail across the entire business.

Manage customer data

Company name, number of users, and status — all in one place.

Control workspace access

Provision a new Passwork instance for any customer in one click

Remote management via API

Manage Passwork instances remotely through the Passwork API

Block and suspend workspaces

Lock any workspace instantly for offboarding, payment default, or security incidents

Collect reports remotely

Pull usage data and reports from any customer instance on demand

Customize branding and domains

Set a custom domain per customer workspace, white-label or co-branded

Choose your deployment model.
Start with Passwork Cloud, move to self-hosted multitenancy as your customer base grows.

What Passwork delivers to your customers

A full-featured password manager your customers access on the web, mobile, and in the terminal — with encryption, access control, auditing, and integrations built in.

How Phoenix Contact unified 1,400 users under one password platform

Phoenix Contact

1,400

Active users

~100

Pilot users

1

Source of truth

Phoenix Contact relied on a password tool built by a single employee. When that employee left, the tool became a liability — unmaintained and unsupported. In addition, there was "password chaos" with scattered files across teams and locations, passwords that disappeared with departing employees, and insecure sharing. A cenrtalized, governance-ready solution became necessary.

The solution

After evaluating several alternatives, Phoenix Contact chose Passwork. The rollout began with around 100 users in HQ IT and expanded from there — replacing fragmented files with a single controlled source of truth.

The result

Today, 1,400 users across Phoenix Contact manage credentials in one place, with full visibility and access control.

Four steps to your first customer.
We are actively onboarding new MSP partners. Below is the path from the first conversation to your first live customer.

  • Talk to our partner team

    Send a short email to [email protected] with your MSP name, region, and number of customers. We respond within two working days.

  • Onboarding call

    We walk you through pricing, volume tiers, and deployment options — Passwork Cloud or Self-hosted Multitenancy.

  • Agreement and access

    You sign the partner agreement and DPA. We set up your Passwork Cloud space, activate the MSP portal, and hand over access.

  • Pilot and go live

    Onboard your first customer using our migration guide, confirm your workflow, and go live. Then grow at your own pace.

Your recurring MSP revenue starts here

Share four details about your MSP and receive the partner price list, an onboarding plan tailored to your customer base, and a live demo of the MSP portal.

Frequently Asked Questions

Passwork sets up a dedicated Cloud space for your MSP and gives you an MSP portal for remote management.

Commercial model:

  • • Billing per user per month at partner wholesale prices with volume tiers.
  • • You set your own customer prices and contract terms.
  • • Price list available on request.

Partner wholesale prices per user per month with volume tiers.

Exact terms are shared on request, aligned with your size and tier.

Yes. From the MSP portal, create secure workspaces with custom domain names for each customer in one click.

White-label or co-branded — your choice.

Customer data is portable.

  • • Export credentials via REST API or from the MSP portal in standard formats.
  • • With self-hosted multitenancy, you retain full control of the data regardless.

Each customer's data is stored in an isolated database. The MSP portal routes access by domain.

From one console you manage:

  • • Provisioning and instances.
  • • Lockouts and access control.
  • • Reporting across customers.

Each customer tenant has its own IdP configuration.

Supported per tenant:

  • • Entra ID (Azure AD), Okta, ADFS, and Google Workspace.
  • • Any SAML 2.0 IdP.
  • • Role mapping from security groups runs automatically.

When a technician leaves your MSP:

  • • Revoke access across all customer tenants from the MSP portal in one action.
  • • Review a full log of everything they accessed.
  • • Rotate affected credentials in bulk via API.

Yes. Passwork is ISO 27001 certified and NIS2-ready.

Compliance highlights:

  • • Customer data stays in EU data centers in Germany.
  • • Audit logging is built in.
  • • Encryption is AES-256.
  • • Access is role-based.

Bulk import via LDAP or AD sync, REST API, and CSV. Python connector and CLI for scripted migrations.

The onboarding team provides a migration guide; most rollouts go live in 2 to 4 weeks.

Yes, via REST API.

Established patterns for:

  • • ConnectWise, Autotask, Kaseya, Datto, and N-able.
  • • Native connectors are on the roadmap.

Passwork Cloud:

The platform runs with high availability in EU data centers in Germany and is monitored 24/7.

Self-hosted multitenancy:

You implement clustering and failover on your infrastructure.

SLA terms come with the partner agreement.

Passwork encrypts secrets on the client before they are sent to the server. The server stores only ciphertext.

Even Passwork cannot decrypt a customer's secrets without their master password.

Got any questions? — Help center