Nexaplane for providers
Your cloud.
Your name. Your margin.
Provider accounts, a console that carries your brand, wholesale billing for the resellers selling under you, and a platform your customers read in their own language.
Each customer is a tenant under you — their own users, quotas and invoice, and never a glimpse of the fabric or of one another.
The provider account
Every platform is multi-tenant.
Few hand you the business.
Carving customers into separate tenancies is table stakes. The provider account goes further — a whole cloud you run under your own name and sell to customers, or run privately for your own departments. You set each account’s quotas, meter its usage and issue its invoice; the fabric and every other tenant stay out of view.
- Your brand, your portal — customers sign in to a self-service console that carries your name, not ours.
- Your invoice, your margin — meter and bill each customer directly, and resell add-ons like NuajProtect at the price you set.
- Quotas per customer — hard caps on instances, storage, addresses and GPUs, plus which datacenters each may build in.
- Isolated all the way down — one provider never sees another, and no customer ever sees the fabric beneath them.
- Roles on both sides — admin, operator and user tiers in every account, so your team and theirs get exactly the reach they need.
White-label
Your name on the console.
Not ours.
The console your customers sign into carries your logo, your product name, your colours and the address their support requests go to. Nothing on the page points back to us — because the cloud they are buying is yours, and the software behind it is your business, not theirs.
- Yours end to end — logo, product name, accent colour, browser tab and support address, on every page of the console.
- Their own sign-in page — give a reseller a link and their customers sign in under that reseller’s logo and colours, before they have an account with you at all.
- Mail that says who sent it — invitations and verification codes arrive from the reseller’s name, not yours and not ours.
- Resellers brand it again — providers selling under you apply their own identity on top, and you decide which of them may. Withdraw it and their branding stops without being deleted.
- In their language too — your brand, and each of their customers reading it in one of 16 languages they choose themselves.
- Changed in the console — set it, see it. No config files, no redeploy, no ticket to us.
Set once at the top and it flows down. A reseller that changes only its logo keeps your colours and your support address — so nothing is left half-branded.
You meter once. Each reseller is billed for everything its accounts ran; its customers are billed by it, on a document carrying its name and its tax registration — never yours.
Reseller billing
Wholesale to your resellers.
Retail to their customers.
An MSP reselling your cloud is not a discount code. It is its own business — its own prices, its own invoice numbering, its own legal identity on the document, and customers who never learn you exist. You meter everything once, bill the reseller at wholesale, and it bills its customers at whatever it decided to charge.
- Two prices on every line — what the reseller pays you and what its customer pays, so the margin is the difference on identical quantities, with no spreadsheet in between.
- One invoice per reseller — every account it runs, itemised for the period, while each of its customers receives a separate invoice from the reseller.
- Their name on the document — legal entity, address, tax registration and logo belong to the reseller. Nothing of yours appears on a bill they collect.
- Metered, never estimated — compute, storage, addresses, transfer and GPUs sampled hourly and priced at the rate that applied that month, so an invoice re-printed a year later still matches the one you sent.
- Tax that matches the seller — each reseller’s own rates on its own invoices, on a print-ready document its customer can file.
Coming next — resellers collecting through their own Stripe or PayPal account, so payment moves between them and their customer and never through you.
16 languages
Sell into markets
you don’t speak.
Your engineer works in English while a customer in São Paulo works in Portuguese and another reads right-to-left in Arabic — same platform, same afternoon. There is no separate build per market, no translation project of your own, and no language you have to hire for before you can quote.
- Chosen per person, not per install — language is a user’s own setting, so one platform serves every market you sell into at the same time.
- Right-to-left done properly — Arabic lays out correctly, rather than being poured into a page built left to right.
- The product, not just the menus — the console, the administrator guide, the customer guide, the release notes and the email itself: the invitation that reaches a new customer arrives in their language before they even have an account.
- Your brand, their language — white-label identity and localization apply together, so a reseller’s customer reads that reseller’s name in their own language.
- Nothing to maintain — translations ship with the platform and are carried by the upgrade, so a new language is never a project of yours.
- Reach without headcount — quote a market before you staff it, instead of staffing it to find out whether it buys.
Nobody is switched into a market language. Each person sets their own, and everyone else keeps theirs.
Better together
Sell cloud that
defends itself.
Every Nexaplane tenant already has their own router sitting inline on their traffic. That is exactly where threat filtering belongs — so NuajProtect turns it into a filtered edge, and protected cloud becomes something you can sell rather than something your customer has to source, integrate and manage elsewhere.
NuajProtect is a separate product with its own subscription, licensed per protected edge. It is not bundled with a Nexaplane licence — it is an add-on you resell at your own margin, on infrastructure you already run.
NuajProtect
Filtering where the traffic already is
- At the tenant edge — the router Nexaplane already gives every customer becomes their filtering point. Nothing new in the path, nothing for them to install.
- On the instances — a single static binary under systemd protects an exposed server directly, picking the fastest protection the server supports.
- At the fabric edge — NuajBridge sits inline with no address on the network it protects, so there is nothing to scan or log into. If anything goes wrong, traffic keeps flowing.
- One threat picture — global intelligence updates both platforms, and what one network learns, the rest benefit from.
- The same operating conventions — MFA, role-based permissions and real-time alerts, so your team learns one way of working rather than two.
The commercial case
A product you can sell
to customers you already have.
Security is the easiest upsell in hosting — and the hardest one to deliver, because it usually means new hardware in the path and a project to go with it. Here it attaches to infrastructure your tenant is already renting from you.
Margin, not a referral
You licence it and you sell it. The relationship, the invoice and the margin stay yours — this is a product in your catalogue, not a handoff to another vendor.
Nothing to roll out
It attaches to the router each tenant already has. No appliance to ship, no maintenance window, no change to their network — which is what usually kills a security upsell.
Sell it as a tier
Standard and protected, priced differently — one decision at checkout instead of a separate security conversation months later.
Edge security
NuajProtect
Plug-in network threat protection for Linux servers, MikroTik routers and whole networks — filtered inline, at line rate, at the earliest point in the traffic path. Sold separately, on its own subscription.
Explore NuajProtectCloud orchestration
Nexaplane
Proxmox turned into a multi-tenant cloud with per-tenant routing, billing and self-service. Two platforms, one operating base, one engineering team.
Request a demoSee it on your own fabric.
Bring a Proxmox cluster and we will show you a tenant, a network, a router and a running instance — in the same call.
Launching 2027 · Early partners get direct input on the roadmap