Sell email security, hosting, and identity as your own
MailRoute’s partner program gives MSPs and resellers all three lines at wholesale — starting 25% below published list and improving with volume. You set retail, you send the bill, and your brand goes on the panel. We run the infrastructure and never solicit your customers.
What you sell, and what it earns
Most channel programs hand you one SKU and a discount. This one is a product line: three services that land the account, and rungs above each of them — so revenue per client grows for years without adding a vendor, a console, or an invoice.
Email filtering, the anchor line
Point a client’s MX records at us and we stop phishing, spear phishing, BEC, ransomware, spoofing, and spam in front of whatever mail server they run. It is the service every client needs, the easiest one to land, and the base the rest of the ladder stands on.
Wholesale is volume-tiered. The published figures are floors — as your volume grows, the rate improves, and the spread is yours either way.
| Plan | List | Wholesale floor |
|---|---|---|
| Basics | $2.00 | $1.50 |
| Enterprise | $3.00 | $2.25 |
| Enterprise U.S. | $4.00 | $3.00 |
Per user per month. Filtering plans; wholesale improves with volume.
MailRoute Hosted Mail
When a client wants out of running a mail server — or out of per-seat suite pricing — host the mailboxes with us instead: 50GB IMAP, webmail, forwarding, and autoresponders, with the same security built in. List runs $5 to $7 per mailbox by plan, the same wholesale discount applies, and professional migration is a project you can resell.
MailRoute Email Identity
For clients who are associations, alumni programs, or other member organizations: Email Identity is a branded send-and-receive address for every member at the client’s domain, with no mailboxes to host. Flat monthly bands, managed from the same console and the same API.
The upsell ladder
A client who signs for filtering in January is not done buying. These are the rungs, in the order clients usually climb them:
Attach Email Continuity
On Enterprise, your client’s users keep reading and sending mail through a webmail interface while their server is down — and Archiving Lite, a rolling 30-day store of clean inbound mail, covers the deleted-message emergencies in between. 60- and 90-day tiers add $1 and $2 per user to list. It sells like insurance and renews like insurance.
Move regulated clients to Enterprise U.S.
ITAR compliance, HIPAA BAA, NIST 800-171, and US-only datacenters and support. The clinic and the defense contractor stay on your invoice instead of leaving for a specialty vendor.
Take over the mailboxes
When the on-premises Exchange box finally goes, MailRoute Hosted Mail replaces the server and the filtering stays exactly where it was. You keep the client and add the mailbox margin.
Cover the members
The chamber of commerce, the alumni association, the league: Email Identity gives every member a branded address at the organization’s domain, with no mailbox behind it to host or pay for.
Every rung bills through the same consolidated invoice, at wholesale.
The terms
Wholesale starts at 25% off list and improves with volume. The figures above are floors, not the deal.
The minimum is 100 mailboxes across your whole book — filtering and Hosted Mail combined, not per client and not per product.
You bill your clients; we bill you once. One consolidated monthly invoice covers everything at wholesale. Retail is your call, and your billing relationship stays yours.
List pricing is published — see every plan’s price — so you can quote a deal tonight without talking to a channel manager.
No annual contract. The program earns your business month to month.
One console runs the whole book
Every customer, domain, and mailbox lives under one reseller account, behind one login. Delegation is optional and per customer: keep every tenant under your own control, or hand one client’s admin their own keys because they asked for them.
Access is role-based at three levels — reseller admin, customer admin, end user — and admin roles work on every plan. On Enterprise you build custom roles from 75 admin-level and 47 user-level permissions: a helpdesk tech who can release quarantined mail but never sees billing, or a client who can tune their own spam threshold but cannot switch off anti-phishing. The role management guide has the full permission list.
Branding runs two levels deep. Your name and logo go on the MailRoute Control Panel and the quarantine notifications your clients see — and you decide, per customer, whether a client may put their own brand in front of their staff.
End users get quarantine digests and release their own mail, which keeps the release queue off your helpdesk entirely.
Onboard in fifteen minutes. Automate the rest.
Onboarding
Add the customer, load the mailboxes, point the MX record. There is no hardware, no agent, and nothing to maintain on the client’s side; a straightforward domain is about fifteen minutes of actual work. Directory sync keeps the mailbox list current — Microsoft 365 and Google Workspace sync on every plan, LDAP and Active Directory on Enterprise — and SAML2 single sign-on works with Okta, Azure AD, and Duo.
The API
The hierarchy you click through — reseller, customer, domain, email account — is also an API, with create, read, update, and delete on each object and client libraries in PHP, Python, and Ruby. Partners wire it into their PSA so adding or removing a user in their own tooling updates MailRoute automatically. No second console, no double entry.
Any mail server, any migration
Because filtering happens at the MX record, the server behind us is a setting: Microsoft 365, Google Workspace, on-premises Exchange, or anything that speaks SMTP. When a client changes platforms, you change the delivery destination — the filtering, quarantine, and settings stay put. During the move itself you can put delivery on hold, and we queue inbound mail instead of bouncing it; store-and-forward holds up to 15 days on every plan.
What keeps the client renewing
Filtering that works is invisible, and invisible is hard to renew. The program includes the tools that make the value visible — and a support posture that keeps clients from doubting it.
Proof of Protection reports
Every domain gets an automatic monthly report: what was blocked, broken out by type — phishing, BEC, malware, spam — which people drew the most attacks, and a conservative estimate of the triage hours saved. Resellers get a single digest across all their domains with a per-domain summary. Bring it to the quarterly business review and the line item defends itself. How Proof of Protection reports work →
Outbound filtering
Outbound mail is filtered too. One compromised mailbox spraying spam can land shared sending infrastructure on blocklists and take every client’s deliverability down with it. Outbound filtering catches the compromise before the blocklists do.
Email Continuity, marketed for you
Continuity is the service your client remembers at renewal, because it is the reason nobody noticed the server outage in March. There is a reseller marketing guide built around a campaign a real partner ran, ready to adapt for your own client base.
Support that backs your bench
Support is quick, US-based, and has no hoops — and partners get a named account specialist who knows your accounts. Phone support comes with Enterprise, escalation goes straight to engineering, and Enterprise migrations are white-glove. When something email-adjacent breaks — DNS, SPF, DKIM, DMARC, a stubborn receiving server — call us even if the problem is not ours. Helping with email is the job. You will just need it less often than you are used to.
Choosing a vendor you won’t have to replace
Channel conflict, first. We sell direct and our pricing is public — we would rather you see exactly what we charge than wonder. What we do not do is solicit partners’ customers. The account you bring stays your account, on your invoice, at your price.
Then vendor risk. MailRoute has been self-funded since 2003, owns its infrastructure across three US datacenters, and email is the entire company. There are no investors steering the roadmap and no parent company deciding whether email still fits the portfolio. Plenty of MSPs have watched a vendor’s channel program disappear mid-contract; ours is the business, not a line of it.
We're a reseller, and MailRoute is a requirement for every client we take on — I won't handle a customer's email without it. Part of it is that it just works: it stops the targeted phishing and BEC that would otherwise reach our clients, so my phone isn't ringing. Part of it is that it disappears into our stack — we wired MailRoute's API into our own provisioning, so when we add, remove, or change a user, MailRoute updates automatically. No separate console, no double entry. And it lets us run the whole email stack through one vendor: filtering, plus hosted mailboxes when a client needs them, on a single invoice at a margin we set ourselves. Between the support time it saves, the problems it prevents, and the margin it carries, it's one of the easiest calls I make for a client.
Patrick Coffin
CEO, Island Technologies
Become a Partner
Wholesale from 25% off published list, a 100-mailbox minimum across all your clients combined, and terms you can read before you ever talk to us.