Identity

Your Clients Meet Your Firm. Nothing Else.

“White label” usually means a logo slot. Pental means it literally: every surface a client can see, from the address bar to the report on their desk, carries your identity and only yours. On every plan.

Touchpoint 01

The Address Bar Says You.

Your portal runs at portal.yourfirm.com, or any hostname you own. The first thing a client checks before typing credentials is the domain, and the domain is yours.

How It Works
Hostname
Bring any domain or subdomain you control. A yourfirm.pental-hosted subdomain exists for day one, and most firms move to their own domain before inviting a client.
DNS
The records you need are generated for you, ready to paste into your DNS provider. The platform watches for propagation and confirms when it is live.
TLS
Certificates are issued and renewed automatically for your hostname. The padlock is yours, with no certificate warnings ever reaching a client.
Favicon
Your icon in the tab, in bookmarks and on home screens. Small surface, disproportionate signal.
Touchpoint 02

A Sign-in Page That Could Only Be Yours.

The sign-in page is the most security-conscious moment a client has with your firm. It renders with your logo, your colours and your background, on your domain, so nothing about it teaches clients to trust an unfamiliar name.

  • Your compositionLogo, colours, background and wording are yours to set, for the sign-in page specifically as well as the application behind it.
  • Sign-in options, your policyEmail and password with a mandatory second factor by default, Google and Microsoft SSO if you want them, or emailed one-time codes if your policy prefers passwordless.
  • Both themesLight and dark render from your palette, so the page is on-brand whichever the client's system prefers.

The same page, three firms

A sign-in page carrying one firm’s logo, colours and wording.

Calderwood Security What their client signs in toDemonstration portals. The four firms are invented; every screen is the real software.

Touchpoint 03

Inside, It Still Says You.

Branding that stops at the login page is a costume. The application itself runs on your design tokens, for your team and your clients alike.

Under Your Control
Colours
The full application palette, set separately for light and dark themes, not a single accent swatch sprinkled over someone else's design.
Severity
Your own colours for critical through informational, carried consistently from the finding editor to the client portal to the report.
Typography
Your fonts, so the portal reads like your documents do.
Surface Area
Feature modules you do not use can be switched off and disappear from the interface entirely, so clients see a product shaped like your service.
A testing firm’s dashboard: active tests, pending QA, their own and their team’s assessments, and the latest findings by severity.
Calderwood SecurityTheir teamDemonstration portals. The four firms are invented; every screen is the real software.
A findings table with the severity scale repainted in the firm’s own colours.
Thornbury CyberTheir teamDemonstration portals. The four firms are invented; every screen is the real software.
Touchpoint 04

Email from Your Address, Through Your Infrastructure.

Portal invitations, scope requests, credential requests and report releases all arrive from you@yourfirm.com, sent through your own relay. Not a lookalike sender, and not a shared pool that shapes your deliverability.

Sending
Your Relay
Your own SMTP server or provider, or OAuth against Google Workspace or Microsoft 365, so mail flows through the tenancy you already secure and monitor.
Verified First
Settings are proved with a live test send before they save, so a typo in a port number cannot silently eat a week of client mail.
Sealed
The SMTP password is encrypted on write inside your own database and the plaintext column is nulled. Your mail credentials are a secret we never hold.
Content
Templates
Every outbound email template is editable: wording, structure and tone are yours.
Signature
Your house signature on everything the platform sends.
Headers
Sent through your relay, the technical headers a suspicious recipient inspects tell your story too.
Touchpoint 05

Documents That Are Literally Yours.

The report is the artefact your client keeps, forwards and files. It renders from the Word template you already send, so it is not similar to your report, it is your report.

  • Your own document templatesYour report and your attestation letter each render from the DOCX you send today, with your cover page, styles, headers and appendices untouched.
  • Mapped onceUpload the document you send today and the platform maps its placeholders, tables and sections to live data. Nobody hand-assembles a report again.
  • Deterministic outputThe same engagement produces the same file every time. Two reports a quarter apart differ only in their findings, which is exactly what a returning client expects.
  • Named your wayGenerated files follow your naming convention, so what lands in the client's inbox already matches their filing.
Touchpoint 06

Every Surface Says Your Firm, and Only Your Firm.

White-labelling is defined by what is not there. There is no badge in the corner, no “powered by” in the footer, no vendor name in the email footer and no upsell shown to your clients, on any plan.

The Test We Build Against

A client should be able to complete an entire engagement, fill in scoping, hand over credentials, read the findings as they are released, take the report to their board and request a retest, without ever encountering evidence that your platform was not built in-house. If a surface fails that test, it is a bug.

Where your branding, colours and templates are stored, and why we could not leak them if we wanted to, is covered on the ownership page

Put Your Name on It Today.

Domain, colours and email are set from the portal in about five minutes, and your own report template goes in whenever it suits you. Seven day free trial, no card, full white-labelling from the first minute.