Bronze package
Bronze package
$10,000
Ongoing open-standards ecosystem work. Scope, schedule and final deliverables are agreed together.
- Shared sponsor announcement
- Sponsor spotlight
- Partner Portal sponsors page
Fund the security work the ecosystem needs.
Support practical research, reference implementations and shared testing through the HOL Partner Program. Choose a program scope, then agree on the work and the activation plan.
Partner Program packages
Each package funds a scope of shared technical work and carries its own activations and recognition. Scope, schedule and final deliverables are agreed together — no fixed term is imposed here.
Silver package
Silver package
$15,000
One working group. Scope, schedule and final deliverables are agreed together.
- All Bronze marketing benefits
- Dedicated company blog feature
- One working-group demo
- Working-group pages and communications
Gold package
Gold package
$25,000
One subcommittee. Scope, schedule and final deliverables are agreed together.
- All Silver marketing benefits
- Dedicated sponsor announcement video
- One co-hosted event and one workshop
- Relevant subcommittee recognition
Platinum package
Platinum package
$50,000
Cross-program work. Scope, schedule and final deliverables are agreed together.
- All Gold marketing benefits
- Sponsorship email
- Two co-hosted events and one builder challenge
- Broader HOL homepage, partner and publication recognition
Security workstreams
Security is a workstream within the Partner Program. These are the areas your package can accelerate — each scoped and costed before sale, with example outputs like these.
Safer command execution
Hardens how agent environments execute shell commands: allowlists, sandboxing behavior, injection resistance and clear failure modes. Work is scoped to an agreed set of commands and harnesses, with reviewed test cases landing in the public suites.
Example output: reviewed command test cases and protection improvements for an agreed command set.
Plugin and MCP supply-chain security
Builds reproducible evaluation of third-party plugins and MCP servers: provenance, install-time behavior, update paths and maintainer guidance. The emphasis is on measurements others can repeat, not one-off audits.
Example output: a reproducible supply-chain evaluation plus maintainer guidance for a plugin family.
Reproducible testing and compatibility
Keeps the compatibility matrix honest across harnesses, models and platforms. Funded work publishes the test matrix, the runner configuration and the failures — including the ones that do not get fixed in the same cycle.
Example output: a published, reproducible compatibility test matrix for a chosen harness set.
Open implementation guidance
Turns hard-won operational lessons into public reference integrations and guides that smaller teams can adopt directly. Everything produced is open source and reviewed, with workshops to transfer the practice.
Example output: a reference integration plus a hands-on workshop for adopting it.
The first 90 days
Every package follows the same onboarding pattern. This is how work starts — not the billing duration of the package.
- Days 0–15Setup
- Days 15–30Fit memo
- Days 30–60First engagement
- Days 60–90First output
Talk to us
Tell us who you are, the package you have in mind and the workstream you care about. No account, phone number or technical specification is required — our team replies by email and we shape the scope together.
Partner Program membership is a separate thing — apply for membership here.