Pilot programme · Q3 2026 cohort · Applications open
In Q3 2026 we onboard 8–12 UK SMEs and MSPs to calibrate the TrustQuant Resilience Rating against real infrastructure. Founding members lock their rate, shape the roadmap, and receive the first Trust Passports we ever issue.
Rolling review · a scoping call before any commitment · no payment to apply
The pilot is where the Resilience Rating meets real infrastructure for the first time. Participants connect their cloud environments through our agentless, read-only assessment, receive a baseline 0–100 rating, remediate against it, and tell us — precisely — where the model is wrong.
That last part matters. The factor weightings behind the rating are published, but they have to be calibrated against actual UK SME environments before insurers and lenders can rely on them. The cohort is deliberately small so every participant gets founder-level attention, and every environment genuinely moves the model.
We are pre-launch and we say so plainly. If you want a finished product, come back at general availability. If you want a say in what the standard becomes — and the terms that come with being first — read on.
Twelve places reward honesty in both directions. Here is the fit, stated as plainly as we can.
Unsure which side you fall on? Apply anyway and say so — the scoping call exists to answer exactly this, and we will tell you straight.
A pilot only works when the trade is honest on both sides. Here is ours, in full.
You get
Your rate is agreed before onboarding and stays yours at general availability. No public plan will ever undercut it for you.
Monthly calls with both founders. There are two of us and at most twelve of you — pilot feedback is the roadmap.
Cohort members receive the first verified Trust Passports we issue — a shareable, signed credential for insurers, lenders and buyers.
We sit with you through connection, the first assessment and your baseline rating — and document the before/after as you remediate.
We get
Real telemetry across varied stacks to tune the six factor weightings and the cyber-to-lending translation model against actual UK SME environments.
With written consent only, and anonymised by default. Nothing about your organisation is published without your sign-off — full stop.
What confused you, what broke, what you would never pay for. The pilot exists to find these things before launch, not after.
Assessment access is read-only throughout. We collect security metadata, never your business data — the same privacy-by-design rule that applies to every paying customer later.
Most pre-launch companies dress the gaps. We would rather list them — the same evidence discipline the rating itself is built on.
Published in full — all six factors, their weights and the score bands are public. You can audit how the rating works before you apply.
Read the methodologyIn active development. The pilot cohort runs the first production assessments — that is the point of the programme.
Cyber Essentials Plus and ISO 27001 for TrustQuant itself are on the roadmap. We intend to hold the standards we measure.
None yet — no logos, no testimonials, no invented uptime figures. What you see on this site is method and design, not track record. The cohort will be our first proof.
Want to inspect the substance behind this page? The illustrative sample report shows what participants receive, and the trust centre documents how we handle your data during assessment.
Timeline
Four steps, one quarter. Dates are commitments we are working to, marked accordingly.
Now. We review on a rolling basis — applying early matters because the cohort is capped, not because of artificial urgency.
A 30-minute call to check environment fit and agree what success looks like for your organisation — before either side commits to anything.
Q3 2026. Agentless, read-only connection to your cloud accounts, first assessment, and your baseline Resilience Rating.
Within the pilot quarter: cohort ratings stabilise as the model calibrates, and the first Trust Passports are issued to participants.
Selection is about calibration quality, not first-come first-served. We weigh four things:
A footprint our agentless collectors can assess today — cloud provider APIs and Linux hosts. We would rather decline than onboard you into a poor experience.
Calibration needs a spread of sectors, sizes and stack shapes, so we do not simply take the first twelve applications.
A named contact, about an hour for connection, and a monthly feedback call. That is the whole ask.
Able to onboard within Q3 2026. If your window is later, say so — it affects which cohort we offer, not whether we want you.
8–12 places, reviewed on a rolling basis. A 30-minute scoping call comes before any commitment — from either side.