Deploying Cyber Aware through the Pax8 marketplace turns security awareness training into a subscription on the same monthly Pax8 bill as the rest of your vendor stack — no separate contract to sign, no quote-and-invoice loop, and no procurement delay when a client wants training to start next week.
Key takeaways
- Pax8 is the buying motion MSPs already use: one partner account, one monthly bill, subscriptions per client.
- Cyber Aware prices per seat with no seat minimums, so a 12-seat client is as viable as a 300-seat one.
- The portal, emails, phishing simulations, certificates and reports are fully white-labelled — clients see your brand, not the vendor's.
- Deployment is six steps: Pax8 account, quote, provisioning, portal branding, learner import, phishing cadence.
- Essential 8 and SMB1001 evidence is mapped out of the box for Australian clients.
Why this matters
Procurement is where training rollouts stall. The human element sits behind 62% of breaches in Verizon's 2026 Data Breach Investigations Report, and social engineering is now the third most common breach pattern at 16%. Your clients know this — the question is whether training lands on their agreement this month or slips another quarter behind a quote.
The marketplace route removes the friction. Pax8 reports a global ecosystem of more than 40,000 MSPs, and transacting there means security awareness training joins the subscription stack your finance process already handles: monthly billing, seat true-ups and a single vendor relationship for the whole product line.
Before you start
- A Pax8 partner account. If your MSP transacts any cloud software through Pax8 today, you already have this.
- Your brand assets. Logo, colours and a subdomain choice — the portal is fully white-label, so have them ready before provisioning rather than after.
- Seat counts per client. Per-seat pricing with no minimums means you can start small, but knowing the numbers keeps the first quote clean.
- The gotcha most MSPs miss: learner seats follow active users. When staff leave, remove them or you keep paying for seats nobody trains.
Step 1: Get your Pax8 partner account in order
- Log into your Pax8 partner account (or register as a new partner on pax8.com).
- Confirm your billing details and terms are current — a stalled billing profile delays provisioning later.
- Check which region your account serves, so the subscription lands in the same region as your clients.
Expected result: you can search the marketplace catalog without hitting access walls.
Step 2: Find Cyber Aware in the marketplace
- Search the marketplace catalog for "Cyber Aware".
- Open the vendor listing and read the product descriptions: awareness training, phishing simulations and gap assessments are sold separately or bundled, all on the same per-seat model.
- Note the onboarding options listed — the platform runs a six-week white-glove onboarding for partners.
Expected result: you know which product combination each client needs before requesting a quote.
Step 3: Request the quote and provision the subscription
- Request a quote for the seats and products you need.
- Confirm the seat count matches your client's active staff, plus headroom for new hires.
- Accept the subscription in Pax8 and let provisioning run.
- Watch for the tenant invitation. When it arrives, the platform is yours to configure.
Expected result: a live Cyber Aware tenant attached to your Pax8 billing.
Step 4: White-label the portal
- Upload your logo and set your colours.
- Point a subdomain at the portal — training.yourbrand.com-style URLs are what clients and their staff will bookmark.
- Confirm branding reaches every touchpoint: portal, enrolment and reminder emails, phishing explainers, certificates and the monthly branded PDF reports.
Expected result: nothing in the platform shows the vendor's name.
Step 5: Import learners
Three ways, in order of preference:
- Microsoft 365 or Google Workspace directory sync — staff join, move and leave automatically.
- Bulk CSV upload for clients without directory sync.
- A self-enrolment link for quick starts.
Baseline training auto-assigns the moment learners land, with a welcome email under your brand. Leavers are removed cleanly, which is what keeps the seat bill honest.
Step 6: Turn on Auto Phish and automated reporting
- Run Auto Phish setup: it builds a year of varied phishing campaigns per client from one conversation, drawing on 100+ templates from invoice fraud to AI voice scams.
- Leave auto-enrol on: anyone who clicks a simulation lands on a branded explainer and is enrolled into the failed-phishing course automatically.
- Confirm monthly compliance reports are scheduled — branded PDFs go out without anyone building decks.
- Where clients need audit evidence, switch on framework-mapped reporting for Essential 8 and SMB1001.
Expected result: month one runs itself, and you watch click rates fall instead of chasing completions.
Where the margin comes from
Per-seat pricing with no minimums makes the margin arithmetic simple: you mark up the seat inside your managed-services agreement, and every new client and every framework upsell grows it. The natural ladder runs gap assessment, then security awareness training, then phishing simulations — three recurring lines on one platform, sold under your brand.
Troubleshooting
The tenant invitation never arrives. Check the contact email on the Pax8 subscription, then the spam folder on that mailbox. If it is genuinely absent, raise it with your Pax8 partner manager first — provisioning sits in their queue until it confirms.
Learners are not syncing from the directory. Confirm the sync account has directory read permission and that new staff land in the group the sync watches.
A client's click rate looks flat. Look at the cadence, not the staff. One annual send teaches nothing; monthly variation is what drives the reduction the platform reports over eight months.
Billing looks higher than expected. Compare the billed seat count against active learners. The usual cause is departed staff still holding seats.
FAQ
Is Cyber Aware available to any Pax8 partner? Marketplace availability is confirmed on the Pax8 listing; request a quote and your partner manager confirms the products available in your region.
Does buying through Pax8 change the pricing? Pricing stays per-seat with no minimums; check the current rates on the listing rather than assuming a bundled-suite discount.
Can I bundle training with phishing simulations? Yes — products are sold separately or bundled at the same per-seat model on one platform.
How long does provisioning take? Subscription provisioning runs inside Pax8's normal flow; portal branding and learner import usually complete the same day.
Do clients see Cyber Aware branding? No. Portals, emails, certificates and reports are fully white-labelled.
What evidence do Australian clients get? Framework-mapped reporting for Essential 8 and SMB1001, alongside monthly branded PDFs for every client.
One last thing
The marketplace subscription makes the sale easy — the deployment still lives or dies on cadence. Set Auto Phish and the monthly report schedule in the same sitting as your portal branding, or month one quietly becomes a half-finished rollout no client renews.