Who can become a referral partner?

Anyone who knows defense contractors: clients, IT providers, accountants, attorneys, insurance brokers, friends and colleagues. You don't need to work in cybersecurity or CMMC. The only people we can't accept are C3PAOs, CMMC assessors or anyone acting for them, and people working for a government agency, including contracting officials.

What does it cost to join?

Nothing. There's no fee, no minimum and no quota.

Do I need a tax ID or bank details to sign up?

No. You sign up with your name, an email (personal is fine) and an electronic signature on the Referral Agreement. We only ask for tax and payout details, through Stripe, once you've earned your first fee.

How does approval work?

We review each application by hand, usually within a few business days. Once approved, you get a welcome email with your referral code and link.

How is my referral code chosen?

Your code is your initials, for example HK. If someone already has them we add a number (HK2). Your link is thatcmmcguy.com/YOURCODE, short enough to say out loud. The same code also works on cmmc2now.com/YOURCODE, or forgepointcyber.co/YOURCODE if you'd like something more formal for an email signature. Every version credits you the same way.

Defense contractors and subcontractors that handle Controlled Unclassified Information (CUI) and need to get ready for CMMC Level 2. Good signs: a customer or prime asking about CMMC readiness, DFARS 7012 or CMMC clauses in a contract, or a deadline from a prime.

How do I refer someone?

Share your link, or use the introduce-a-contractor form for a warm introduction. Anyone who reaches us through your link in the next 90 days, on that browser, is credited to you on any form they send.

What counts as a referral?

A company that is new to us (not a client, and not an active lead in the last 12 months), introduced through your code, link or form, that signs and pays for an engagement within 12 months of your introduction.

What if two partners refer the same company?

The first introduction we record wins. That's why the introduce-a-contractor form is the safest way to claim a warm lead.

Can I refer my own company?

No. You can't refer a company you own, run or work for.

Can I recruit other partners?

Yes. When someone you told about the program applies with your code and their first referral becomes a client, you get a one-time $250 partner bonus. One level only: no cut of their later referrals.

10% of what we collect for the client's first paid engagement, up to $2,500. For example $1,250 for a Level 2 Readiness Assessment, $500 for Microsoft 365 Hardening, $2,250 for the Fractional CMMC Program Lead. The client pays our normal price; your fee comes from us.

What if the client starts small and buys more later?

If their first engagement is Microsoft 365 Hardening and they sign a bigger engagement within 12 months, we top you up to what the bigger engagement pays. Otherwise it's one fee per client.

In one payment on the 15th of the month after the client has paid in full. For monthly work, after their first 3 months are paid.

Through Stripe, to your bank account (ACH) or a debit card. Debit-card payouts arrive in minutes; Stripe's instant fee (currently 1%) comes out of that payout. Clients can take the fee as a credit on their next ForgePoint invoice instead.

What do I need to give for tax?

When your first fee is earned, we send a secure Stripe link. You enter your Social Security number or EIN and your payout details on Stripe's own page; they never pass through our website, CRM or email. You may receive a 1099 for the year.

What if I don't set up Stripe straight away?

Your fees wait for you. Earned fees are held, not lost, for up to 12 months, and we'll extend that if you ask.

Do I have to tell people I'm paid?

Yes, every time. Say it before or as you recommend us: "Full disclosure: I get a referral fee from ForgePoint if you hire them. It doesn't change your price." In posts, newsletters or videos, put this next to the link: "I get a referral fee from ForgePoint Cyber if you become a client."

Don't promise or suggest any CMMC result, score or outcome, don't call us an assessor, and don't speak for ForgePoint or quote prices for us. Point people to our website and let us do the rest.

What happens if I break a rule?

The first time you don't disclose that you're paid, no fee is paid for that referral. The second time, we may end the agreement.

How do I leave the program?

Email us any time. Fees you've already earned are still paid.

How do I see where my referrals stand?

While you have open referrals, you get an email every Monday listing each company you referred and its status, plus a monthly summary when nothing changed.

What do the statuses mean?

Introduced: we have their details. Call booked: we've scheduled or held a scoping call. Proposal sent: they have our proposal. Client (fee pending): they've signed; your fee is paid after they pay. Fee paid: done. Not a fit: they didn't go ahead.

Why can't I see more about the companies I referred?

Our clients' work is confidential, so you see only the company name and its status, never their details or findings. Who referred a client never affects what we find.

Referral partners

Referral partner FAQ

Everything about joining, referring and getting paid. The full terms are in the Referral Agreement.

Joining

Who can become a referral partner?: Anyone who knows defense contractors: clients, IT providers, accountants, attorneys, insurance brokers, friends and colleagues. You don't need to work in cybersecurity or CMMC. The only people we can't accept are C3PAOs, CMMC assessors or anyone acting for them, and people working for a government agency, including contracting officials.
What does it cost to join?: Nothing. There's no fee, no minimum and no quota.
Do I need a tax ID or bank details to sign up?: No. You sign up with your name, an email (personal is fine) and an electronic signature on the Referral Agreement. We only ask for tax and payout details, through Stripe, once you've earned your first fee.
How does approval work?: We review each application by hand, usually within a few business days. Once approved, you get a welcome email with your referral code and link.
How is my referral code chosen?: Your code is your initials, for example HK. If someone already has them we add a number (HK2). Your link is thatcmmcguy.com/YOURCODE, short enough to say out loud. The same code also works on cmmc2now.com/YOURCODE, or forgepointcyber.co/YOURCODE if you'd like something more formal for an email signature. Every version credits you the same way.

Referring

Who should I refer?: Defense contractors and subcontractors that handle Controlled Unclassified Information (CUI) and need to get ready for CMMC Level 2. Good signs: a customer or prime asking about CMMC readiness, DFARS 7012 or CMMC clauses in a contract, or a deadline from a prime.
How do I refer someone?: Share your link, or use the introduce-a-contractor form for a warm introduction. Anyone who reaches us through your link in the next 90 days, on that browser, is credited to you on any form they send.
What counts as a referral?: A company that is new to us (not a client, and not an active lead in the last 12 months), introduced through your code, link or form, that signs and pays for an engagement within 12 months of your introduction.
What if two partners refer the same company?: The first introduction we record wins. That's why the introduce-a-contractor form is the safest way to claim a warm lead.
Can I refer my own company?: No. You can't refer a company you own, run or work for.
Can I recruit other partners?: Yes. When someone you told about the program applies with your code and their first referral becomes a client, you get a one-time $250 partner bonus. One level only: no cut of their later referrals.

Getting paid

How much do I earn?: 10% of what we collect for the client's first paid engagement, up to $2,500. For example $1,250 for a Level 2 Readiness Assessment, $500 for Microsoft 365 Hardening, $2,250 for the Fractional CMMC Program Lead. The client pays our normal price; your fee comes from us.
What if the client starts small and buys more later?: If their first engagement is Microsoft 365 Hardening and they sign a bigger engagement within 12 months, we top you up to what the bigger engagement pays. Otherwise it's one fee per client.
When do I get paid?: In one payment on the 15th of the month after the client has paid in full. For monthly work, after their first 3 months are paid.
How do I get paid?: Through Stripe, to your bank account (ACH) or a debit card. Debit-card payouts arrive in minutes; Stripe's instant fee (currently 1%) comes out of that payout. Clients can take the fee as a credit on their next ForgePoint invoice instead.
What do I need to give for tax?: When your first fee is earned, we send a secure Stripe link. You enter your Social Security number or EIN and your payout details on Stripe's own page; they never pass through our website, CRM or email. You may receive a 1099 for the year.
What if I don't set up Stripe straight away?: Your fees wait for you. Earned fees are held, not lost, for up to 12 months, and we'll extend that if you ask.

Rules

Do I have to tell people I'm paid?: Yes, every time. Say it before or as you recommend us: "Full disclosure: I get a referral fee from ForgePoint if you hire them. It doesn't change your price." In posts, newsletters or videos, put this next to the link: "I get a referral fee from ForgePoint Cyber if you become a client."
What can't I say?: Don't promise or suggest any CMMC result, score or outcome, don't call us an assessor, and don't speak for ForgePoint or quote prices for us. Point people to our website and let us do the rest.
What happens if I break a rule?: The first time you don't disclose that you're paid, no fee is paid for that referral. The second time, we may end the agreement.
How do I leave the program?: Email us any time. Fees you've already earned are still paid.

Status updates

How do I see where my referrals stand?: While you have open referrals, you get an email every Monday listing each company you referred and its status, plus a monthly summary when nothing changed.
What do the statuses mean?: Introduced: we have their details. Call booked: we've scheduled or held a scoping call. Proposal sent: they have our proposal. Client (fee pending): they've signed; your fee is paid after they pay. Fee paid: done. Not a fit: they didn't go ahead.
Why can't I see more about the companies I referred?: Our clients' work is confidential, so you see only the company name and its status, never their details or findings. Who referred a client never affects what we find.

Still have a question? Email contact@forgepointcyber.com. Apply to become a partner or introduce a contractor.