Request Access
Home How it works Why Wallet Partners Integrators ROI Calculator Pricing
For Sales Reps
For Tech Leads
Guardian Mesh Partner Program

A recurring revenue line your customers won't cancel.

Guardian Mesh is a white-label mobile credential platform you resell under your own brand. No hardware changes for your customer. Wallet credentials in days. $9/user to you, $12 to them.

Apply to Become a Partner See the economics →
Close rate impact
+30% faster
Per-deal economics · 500 users
$1,500
Annual gross margin per deal
Your cost$4,500 / yr
End customer$6,000 / yr
Gross margin33%
Setup fee+$3,500 one-time
Wallet credentials in days means faster closes, cleaner installs, and customers who renew.
Deploy time
2 weeks avg
Compatible with Lenel Genetec CCure 9000 Brivo Honeywell Pro-Watch Software House HID Origo
For Sales Reps
The economics

33% margin. Recurring. Minimal install effort.

Every Mesh deal stacks on top of your existing hardware revenue. It's not a replacement — it's an add-on your customer wants to buy.

Your Cost
$9
Per user / year. Partner rate. Fixed regardless of credential provider.
End Customer Price
$12
Suggested MSRP. You set the final price — floor is $9.
Gross Margin
33%
At MSRP. Scales with every user you add to the account.
Setup Fee
$1.5K+
One-time onboarding fee. Yours to set based on complexity.
Avg Deal Size
500
Users. $6K ARR at MSRP. Stacks with hardware margin.
White-label
100%
Your brand on the portal, credentials, and customer comms.
How to pitch it

Four conversations that close.

Mesh fits naturally into four existing sales motions. You're not selling something new — you're upgrading something they already have.

New install
Add Mesh to every new PACS proposal.
Any site with 500+ employees is a Mesh opportunity. Lead with deployment speed — "You'll have Wallet credentials live before the readers are even installed." Hardware closes the deal. Mesh makes it recurring.
"We can have your team tapping in with Apple Wallet within two weeks of go-live."
Existing install
Turn your installed base into ARR.
Every customer you've already deployed for is a Mesh candidate. No hardware changes needed — Mesh layers on top. Call it a software upgrade. They get mobile credentials, you get a recurring line on every account.
"We can add Wallet access to your current system without touching a single reader."
Security review
Unrevoked badges are the #1 threat vector.
When a customer has a security review, lost and unrevoked badges come up every time. Mesh auto-revokes the moment a phone is marked lost via Find My. That's a measurable risk reduction, not a feature upgrade.
"Lost badges are your biggest exposure. Mesh closes that window automatically."
IT director / CFO
$35/user/yr in badge costs eliminated.
Physical badge TCO runs $30–40/user/year once you factor in issuance, replacement, and admin time. Mesh at $12 is a net-positive for the CFO. Build the ROI case using the calculator and let the math close it.
"At 500 users, you're spending $17,500 a year on badges. Mesh costs $6,000."
Objection handler

What they'll say. What you say back.

Four objections cover 90% of pushback. Know these cold.

They say
"We already have key fobs that work fine."
You say
Key fobs don't auto-revoke when lost. One unrevoked badge is a liability. And your employees are already tapping to pay — this is the same motion, zero training required.
They say
"We're not ready to replace our current system."
You say
You're not replacing anything. Mesh layers on top of your existing PACS. Your readers stay. Your workflows stay. You're just adding Wallet as an option alongside your current credentials.
They say
"What if employees don't have iPhones?"
You say
Mesh supports both Apple Wallet and Google Wallet. 96% of smartphone users are covered. Employees keep their physical badge as a fallback — this is an addition, not a replacement.
They say
"We'll need to involve IT for a project like this."
You say
That's a fair point — we've designed Mesh specifically to minimize IT involvement. No infrastructure changes, no VPN requirements, no app to manage. The IT lift is a directory sync and a half-day of config.
For Tech Leads
Deployment flow

Four steps. No infrastructure changes.

Mesh is designed to be deployed by an integrator in a single day for a standard site. No VPN. No on-prem server. No reader firmware updates.

Connect
Link credential provider
Connect HID Origo or Wavelynx ETL via the Mesh portal. API key + tenant ID. Existing reader infrastructure is untouched.
Day 1 · ~2hrs
Configure
Reader profiles + PACS mapping
Map reader IDs to Mesh access groups. Validate NFC profiles. Supports Lenel, Genetec, CCure, Brivo, and others via standard Wiegand/OSDP.
Day 1–2 · ~4hrs
Sync
Directory + user import
CSV upload or live sync via Workday, Azure AD, or Google Workspace. Credential lifecycle events (revoke, reissue) are handled automatically from this point.
Day 2 · ~2hrs
Deploy
Issue credentials + pilot
Send provisioning invites via email or SMS. Users add to Wallet in under 60 seconds. No app download. Run a 20-user pilot before full rollout.
Day 3–5
Compatibility

Works with what your customers already have.

Mesh is additive. It does not require replacing, reflashing, or reconfiguring existing infrastructure.

PACS Platforms
Lenel OnGuard
Genetec Security Center
Software House CCure 9000
Honeywell Pro-Watch
Brivo ACS
HID Origo (native)
Reader Protocols
OSDP v2
Wiegand 26/34/37-bit
HID iCLASS SE
HID Seos (NFC)
Wavelynx ETL (NFC)
MIFARE DESFire EV2/EV3
Directory / HR Systems
Microsoft Azure AD
Google Workspace
Workday HCM
Okta SCIM
CSV / manual import
REST API (custom)
Technical specifications

What's under the hood.

Key specs for scoping, quoting, and customer security reviews.

SpecificationDetail
Deployment modelCloud-hosted SaaS. No on-prem server required. SOC 2 Type II.
Credential typesApple WalletGoogle WalletNFC (HID Seos, Wavelynx ETL, DESFire)
NFC performance100ms read at 2cm range. No Bluetooth. Power Reserve active 5hrs post battery death (iOS).
ProvisioningEmail/SMS invite. User adds to Wallet in <60 seconds. No app download required.
RevocationInstant via Mesh portal, API, or Find My webhook trigger (iOS). <30 second propagation.
Directory syncAzure AD, Google Workspace, Workday, Okta SCIM, CSV. Sync interval configurable (15min–24hr).
API accessREST API. Webhook support for lifecycle events. Sandbox environment available for partners.
White-label scopePartner portal, credential issuance emails, Wallet card branding, end-user support routing.
EncryptionAES-256 at rest. TLS 1.3 in transit. Credentials stored in device Secure Element (not app memory).
Uptime SLA99.9% guaranteed. Status page available. Priority support tier available for partners.

Ready to add Mesh to your portfolio?

We onboard integrator partners selectively. Apply below and expect a response within 48 hours.

We work with security integrators only. No direct sales to end customers.