# MSP Software > MSP Software (mspsoftware.net) is a directory of software for managed service providers: 43 products in 19 categories (PSA, RMM, backup, security and the rest), each with vendor-published facts, pricing and reviews from other MSPs, an editor's take and FAQ. Last change 5 September 2026. Every public page is server-rendered and complete on first byte. A listing carries: starting price and unit, free trial and free version, pricing plans, deployment, platforms, support and training options, HQ country, founding year, a feature checklist against its category's feature list, integrations, alternatives, reported pricing (the median of 3 or more independent MSP reports, never an individual report) and a review summary. Nothing here needs an account or an API key to read. How to find any product: - Listing page: https://mspsoftware.net/software/{slug}, for example https://mspsoftware.net/software/ninjaone. The slug is the product name in lower case with hyphens; when unsure, search. - The same listing as Markdown: https://mspsoftware.net/software/{slug}.md - Ranked alternatives to a product, with a feature table: https://mspsoftware.net/software/{slug}/alternatives - Search as JSON, 20 per page: https://mspsoftware.net/api/v1/software?q={text}&category={category-slug}&page=1 - One listing as JSON: https://mspsoftware.net/api/v1/software/{slug} - One category with its products, buyer guide and FAQ as JSON: https://mspsoftware.net/api/v1/categories/{category-slug} - Two products side by side: https://mspsoftware.net/compare/{a}-vs-{b} with the two slugs in alphabetical order, for example https://mspsoftware.net/compare/datto-rmm-vs-ninjaone - A vendor and its products: https://mspsoftware.net/vendors/{vendor-slug} - Every product, category, vendor and comparison URL: https://mspsoftware.net/sitemap.xml - Every listing in one Markdown file: https://mspsoftware.net/llms-full.txt - MCP server for agents (Streamable HTTP, no authentication, read-only): https://mspsoftware.net/mcp. Tools: search, fetch, list_categories, get_category, search_software, get_software, get_reported_pricing, get_alternatives, compare_software, recent_updates. Client config: {"mcpServers":{"mspsoftware":{"type":"http","url":"https://mspsoftware.net/mcp"}}} - OpenAPI 3.1 for the JSON API: https://mspsoftware.net/api/v1/openapi.json. Human documentation: https://mspsoftware.net/api Facts, feature checklists, buyer guides, FAQ answers, aggregate ratings and reported-pricing aggregates on MSP Software may be quoted with attribution to MSP Software and a link to the page cited. Reviews are the reviewers' own words and are not covered. ## Categories - [PSA and ticketing](https://mspsoftware.net/categories/psa): A PSA is the ticketing, contract and billing system a service desk runs its whole business through, and it is usually the tool every other product in the stack reports into. 4 products. - [RMM and patching](https://mspsoftware.net/categories/rmm): An RMM is the agent-based platform that watches, patches and remotely controls a fleet of endpoints from one console. 7 products. - [Documentation](https://mspsoftware.net/categories/documentation): Documentation software is the shared reference an MSP's service desk keeps for client passwords, network diagrams, configurations and standard procedures, built to be searched mid-ticket rather than read end to end. 4 products. - [Backup and disaster recovery](https://mspsoftware.net/categories/bcdr): Backup and disaster recovery (BCDR) software protects servers and workstations against data loss and downtime, usually through image-based backups that can be virtualised locally or in the cloud within minutes of a failure. 4 products. - [Microsoft 365 and Google Workspace backup](https://mspsoftware.net/categories/saas-backup): SaaS backup protects Microsoft 365 and Google Workspace data, including mail, files, and Teams or Drive, that the platform vendor does not fully back up on an MSP's behalf, since Microsoft and Google guarantee uptime, not long-term recoverability of deleted or corrupted data. 4 products. - [EDR and XDR](https://mspsoftware.net/categories/edr): EDR (endpoint detection and response) and XDR software watches endpoint activity for malicious behaviour and can isolate or remediate a threat automatically, going beyond the signature matching of traditional antivirus. 5 products. - [MDR and SOC](https://mspsoftware.net/categories/mdr): MDR (managed detection and response) is a staffed security operations centre (SOC) that watches the alerts an EDR agent or its own telemetry raises, day and night, and responds to real threats on an MSP's behalf. 5 products. - [Email security](https://mspsoftware.net/categories/email-security): Email security software filters phishing, malware and business email compromise attempts on top of whatever mailbox platform a client already uses, since Microsoft 365 and Google Workspace's built-in filtering catches only a portion of targeted attacks. 4 products. - [DNS and web filtering](https://mspsoftware.net/categories/dns-filtering): DNS and web filtering blocks access to malicious and unwanted destinations at the DNS or web-browsing layer, both on a client's network and on devices that roam off it. 3 products. - [Identity and access](https://mspsoftware.net/categories/identity): Identity and access software protects the accounts an attacker wants most: multi-factor authentication, single sign-on and conditional access that decides whether a login attempt should be trusted. 8 products. - [Vulnerability and compliance](https://mspsoftware.net/categories/vulnerability): Vulnerability and compliance software scans client environments for security weaknesses and tracks the evidence a compliance framework requires, turning scan results and policy documentation into something an auditor or client can review. 5 products. - [Network monitoring](https://mspsoftware.net/categories/network-monitoring): Network monitoring software discovers and monitors the switches, firewalls, access points and other devices across client sites that an RMM's endpoint agent does not reach. 5 products. - [Remote access and support](https://mspsoftware.net/categories/remote-access): Remote access and support software lets a technician connect to and control a client machine, either on demand during a support session or unattended for background maintenance. 7 products. - [Password management](https://mspsoftware.net/categories/password-management): Password management software is a shared vault for the credentials a team needs day to day, kept out of spreadsheets and sticky notes and away from a client's own systems. 5 products. - [Security awareness and phishing simulation](https://mspsoftware.net/categories/security-awareness): Security awareness and phishing simulation software sends simulated phishing emails to end users and delivers short training when someone clicks, turning the workforce into an additional line of defence rather than relying on filtering alone. 3 products. - [Quoting and CPQ](https://mspsoftware.net/categories/quoting): Quoting and CPQ (configure, price, quote) software builds and sends client-facing quotes and proposals faster than starting from a blank document, usually with e-signature built in so a client can accept without printing anything. 3 products. - [Billing and reconciliation](https://mspsoftware.net/categories/billing): Billing and reconciliation software checks what a vendor or distributor billed against what a client should be charged, catching the gap between the two that grows as an MSP's stack of subscriptions expands. 4 products. - [Microsoft 365 and cloud management](https://mspsoftware.net/categories/m365-management): Microsoft 365 and cloud management software manages and secures Microsoft 365 tenants across every client from one console, rather than an admin signing into each tenant's own portal separately. 4 products. - [vCIO and asset lifecycle](https://mspsoftware.net/categories/vcio): vCIO and asset lifecycle software turns asset age, warranty status and other client environment data into the report a virtual CIO takes into a quarterly business review, rather than someone building slides by hand from scattered spreadsheets. 3 products. ## Listings ## Afi > AI-assisted SaaS backup for Microsoft 365 and Google Workspace. Afi, also known as Afi.ai, is a cloud backup service for Microsoft 365 and Google Workspace that adds automated anomaly detection to flag unusual deletion activity across an MSP's client tenants. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/afi - Vendor: Afi, https://mspsoftware.net/vendors/afi, website https://afi.ai - Categories: Microsoft 365 and Google Workspace backup (primary), Microsoft 365 and cloud management - Deployment: cloud. Platforms: web. ### From the vendor Afi, also known as Afi.ai, is a cloud backup service for Microsoft 365 and Google Workspace covering mail, files, Teams, SharePoint and shared drives. What sets it apart from most SaaS backup competitors is automated backup-policy suggestions and anomaly detection that flags unusual deletion activity, such as a possible ransomware event or a mishandled offboarding, before it turns into a support ticket a technician only discovers after the fact. It suits MSPs managing a growing number of Microsoft 365 and Google Workspace tenants who want backup monitoring that actively surfaces problems, rather than a product that only sits quietly until someone remembers to check it or a restore is requested. Pricing is per protected user per month, quoted to MSP partners with volume-based wholesale rates rather than a single public price, and the MSP typically sets its own retail markup on top. Afi integrates with major PSA platforms for automated billing based on protected user counts, so an MSP does not need to track seat changes by hand to keep invoices accurate. Its console is built for multi-tenant management, so a technician can review backup health and any anomaly alerts across every client tenant from one screen rather than logging into each tenant separately. Before buying, confirm current wholesale pricing tiers directly with Afi, since they are not published, and ask specifically how anomaly detection alerts are delivered, by email, PSA ticket, or only inside the Afi console, since that affects how quickly a technician will actually see one. It is also worth checking how long backup data is retained by default, and whether extended retention is available as a paid option, since retention terms are not always the same across every SaaS backup competitor. ### Our take Afi suits MSPs who want Microsoft 365 and Google Workspace backup that actively flags unusual deletion activity rather than a product that only matters when someone requests a restore. The multi-tenant console is a genuine time-saver for an MSP managing many small tenants from one screen. Because pricing is wholesale and quoted rather than published, get a specific per-user rate before comparing it against other SaaS backup products on a spreadsheet. Confirm how anomaly alerts actually reach a technician, since a good detection feature is only useful if it is noticed quickly. ### Pricing Afi does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Microsoft 365 mail backup | yes | | | SharePoint and OneDrive backup | yes | | | Microsoft Teams backup | yes | | | Google Workspace backup | yes | | | Anomaly and ransomware detection | yes | | | Multi-tenant console | yes | | | PSA integration for billing | yes | | ### Alternatives - Dropsuite: SaaS backup for Microsoft 365 and Google Workspace, sold through MSP partners. https://mspsoftware.net/software/dropsuite - Cove Data Protection: N-able's cloud-first backup for servers, workstations and Microsoft 365. https://mspsoftware.net/software/cove-data-protection - Veeam: Backup and recovery for servers and virtual machines, run by the MSP or through a partner. https://mspsoftware.net/software/veeam ### FAQ #### Is Afi cloud or on-premises? Afi is available as cloud. #### What does Afi's anomaly detection actually flag? Afi's anomaly detection watches for unusual deletion activity across a protected Microsoft 365 or Google Workspace tenant, the kind of pattern that can indicate a ransomware event in progress or a poorly handled offboarding where data is removed before it should be. It is meant to surface a problem before it becomes a support ticket a technician only discovers after a client notices missing data. #### Is Afi's console built for managing many client tenants at once? Yes. Afi's console is built for multi-tenant management, so a technician can review backup health and any anomaly alerts across every client tenant from a single screen rather than logging into each Microsoft 365 or Google Workspace tenant separately. This is aimed specifically at MSPs managing a growing number of small tenants rather than one large single-tenant deployment. #### Does Afi integrate with a PSA for billing? Afi integrates with major PSA platforms for automated billing based on protected user counts, so an MSP does not need to track seat changes by hand each month to keep client invoices accurate. Confirm current support for the specific PSA in use, since integration coverage can change as Afi is a newer product in the category. #### How is Afi priced for an MSP reselling it? Afi is priced per protected user per month, quoted to MSP partners at volume-based wholesale rates rather than published as a single public price, and the MSP sets its own retail markup on top. An MSP should get a specific wholesale rate directly from Afi before quoting a client, since there is no published list price to reference. ## Augmentt > Discovers shadow SaaS and manages Microsoft 365 licensing and security across tenants. Augmentt is a Microsoft 365 management console that also discovers shadow SaaS applications staff have signed up for outside the MSP's visibility, covering user provisioning, licensing and security policy across client tenants. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/augmentt - Vendor: Augmentt, https://mspsoftware.net/vendors/augmentt, website https://augmentt.com - Categories: Microsoft 365 and cloud management (primary), Vulnerability and compliance - Deployment: cloud. Platforms: web. HQ: Canada. Founded: 2020. ### From the vendor Augmentt manages Microsoft 365 tenants across an MSP's client base from one console, covering user provisioning, licence assignment and security policy, and separately discovers other SaaS applications a client's staff have signed up for outside the MSP's visibility, sometimes called shadow IT. It suits MSPs who want a single place to enforce consistent Microsoft 365 security baselines across every client, and those adding a SaaS governance offering to catch unsanctioned tools before they become a support or security problem. Pricing is per managed user per month, quoted through an Augmentt account manager rather than published, with modules for engagement analytics, security and SaaS discovery priced separately or bundled. It integrates directly with Microsoft Graph for tenant management, and with PSA platforms for ticket creation from policy violations, alongside network and browser-based discovery methods for identifying SaaS applications in use across a client's environment. MSPs evaluating Augmentt should confirm which specific modules, such as SaaS discovery versus core Microsoft 365 management, are included at their quoted price, since the product is modular, and should check how shadow SaaS discovery actually works for a given client's network setup, since browser and network-based detection methods can vary in coverage depending on how staff access those applications. It is also worth confirming whether Augmentt's security policy enforcement covers the specific conditional access and licensing scenarios a client already has configured, since retrofitting a policy tool onto an existing, customised Microsoft 365 tenant can surface conflicts a brand new tenant would not, and worth testing on one client tenant before rolling it out across the whole book. ### Our take Augmentt's SaaS discovery module addresses a real, growing problem: staff signing up for tools outside the MSP's visibility. Confirm which modules you are actually buying, since core Microsoft 365 management and shadow SaaS discovery are priced separately. It suits an MSP already managing several Microsoft 365 tenants who wants tighter, centralised policy enforcement. Ask how discovery works for a specific client's network setup before promising comprehensive shadow IT visibility. ### Pricing Augmentt does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Tenant and user provisioning | yes | | | Licence assignment | yes | | | Security baseline templates | yes | | | Multi-tenant console | yes | | | Shadow SaaS discovery | yes | | | Reporting and QBR exports | yes | | | Microsoft Graph API integration | yes | | | PSA integration | yes | | ### Alternatives - CIPP: Open-source multi-tenant console for managing and securing Microsoft 365. https://mspsoftware.net/software/cipp - Afi: AI-assisted SaaS backup for Microsoft 365 and Google Workspace. https://mspsoftware.net/software/afi - Microsoft Defender for Business: Endpoint protection built into the Microsoft 365 Business Premium licence. https://mspsoftware.net/software/defender-for-business ### FAQ #### Is Augmentt cloud or on-premises? Augmentt is available as cloud. #### What counts as shadow SaaS discovery in Augmentt? Augmentt discovers SaaS applications a client's staff have signed up for outside the MSP's visibility using network and browser-based detection methods, sometimes called shadow IT. Coverage can vary depending on how staff access those applications, so MSPs should ask Augmentt how discovery works for a specific client's network setup before promising comprehensive visibility. #### Is Augmentt's SaaS discovery module priced separately from Microsoft 365 management? Yes, according to the product data on file, Augmentt's modules for engagement analytics, security and SaaS discovery are priced separately or bundled, rather than all included in one flat price. MSPs should confirm exactly which modules are covered at their quoted rate before assuming SaaS discovery is included alongside core Microsoft 365 management. #### Does Augmentt replace Microsoft's own admin centre for tenant management? No, Augmentt integrates directly with Microsoft Graph to manage tenants from its own console, layering consistent policy enforcement and reporting across many clients on top of what Microsoft's admin centre offers natively. MSPs still rely on the underlying Microsoft 365 licensing and platform, with Augmentt providing the centralised, multi-tenant management layer. #### Can Augmentt open tickets automatically from policy violations? Yes, Augmentt integrates with PSA platforms for ticket creation from policy violations, so a client falling out of a configured Microsoft 365 security baseline can generate a ticket automatically. MSPs should confirm which PSA platforms are currently supported before assuming their own PSA is covered. ## Autotask > Kaseya's PSA for ticketing, contracts and billing, paired with Datto RMM. Autotask PSA is Kaseya's professional services automation platform for ticketing, service level agreements, contracts, time tracking and billing, built to integrate natively with Datto RMM, IT Glue and Datto BCDR. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/autotask - Vendor: Datto, https://mspsoftware.net/vendors/datto, website https://www.datto.com/products/autotask-psa/ - Categories: PSA and ticketing (primary), Billing and reconciliation - Deployment: cloud. Platforms: web. HQ: United States. Founded: 2007. ### From the vendor Autotask PSA is Kaseya's professional services automation platform for ticketing, service level agreements, contracts, time and expense tracking and billing. It suits MSPs of most sizes, from small teams to larger service desks, who want a mature PSA with a long track record in the channel and a broad set of billing and contract structures to handle different client agreements. It is part of the same Kaseya product family as Datto RMM, IT Glue and Datto BCDR, and MSPs already using or considering any of those products often evaluate Autotask alongside them rather than on its own. Pricing is per user per month, quoted directly by a Kaseya account manager rather than published, usually on an annual contract and often discounted when bundled with Datto RMM and Datto BCDR under a single agreement. It integrates natively with Datto RMM, IT Glue and Datto BCDR so device, documentation and backup data all flow into the same tickets without a separate connector, and connects to accounting platforms such as QuickBooks, plus third-party RMM and quoting tools, through its API and an established partner integration marketplace. Autotask was founded in 2007 and is based in the United States, and its console runs entirely through the web rather than a desktop application, which keeps deployment to a technician's own machine simple regardless of operating system. MSPs comparing PSAs should get the full annual cost in writing, including any Kaseya-stack bundling discount, and confirm what happens to that discount if they later drop one of the bundled products. ### Our take Autotask is the natural PSA choice for an MSP already committed to Datto RMM and Datto BCDR, since the native data flow between the three is the main reason to pick it over a PSA from a different vendor. On its own merits it competes with ConnectWise PSA and HaloPSA rather than clearly beating either. Because pricing is quote-only and usually annual, get the full first-year cost in writing, including any Kaseya-stack bundling discount, before signing. Ask what happens to that discount if you later switch RMM or backup vendors. ### Pricing Autotask does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Ticketing with SLA timers | yes | | | Contract and agreement management | yes | | | Time tracking and timesheets | yes | | | Billing and invoicing | yes | | | RMM integration | yes | | | Accounting integration | yes | | | Reporting and dashboards | yes | | | Workflow and ticket automation | yes | | ### Integrations - Datto RMM, https://mspsoftware.net/software/datto-rmm - IT Glue, https://mspsoftware.net/software/it-glue - Datto BCDR, https://mspsoftware.net/software/datto-bcdr - QuickBooks, https://quickbooks.intuit.com Listed products that integrate with Autotask: Auvik, Datto BCDR, Datto RMM, IT Glue, N-able N-central, NinjaOne and Zomentum. ### Alternatives - ConnectWise PSA: Ticketing, contracts and billing for a service desk, from ConnectWise. https://mspsoftware.net/software/connectwise-psa. Compare: https://mspsoftware.net/compare/autotask-vs-connectwise-psa - HaloPSA: Service desk, contracts and billing on a per-technician price with no per-user fees. https://mspsoftware.net/software/halopsa. Compare: https://mspsoftware.net/compare/autotask-vs-halopsa - Syncro: Combined PSA and RMM priced per technician, with no per-endpoint fee. https://mspsoftware.net/software/syncro ### FAQ #### What does Autotask integrate with? Autotask integrates with Datto RMM, IT Glue, Datto BCDR, QuickBooks. #### Is Autotask cloud or on-premises? Autotask is available as cloud. #### What do MSPs say about Autotask? Autotask has an average rating of 5 from 1 review. 100% of reviews rate it 4 or 5 stars. #### Does Autotask require Datto RMM to work? No, Autotask connects to third-party RMM and quoting tools through its API and partner marketplace, so it does not require Datto RMM. The native integration with Datto RMM, IT Glue and Datto BCDR, all part of the same Kaseya product family, is the main reason MSPs already on those products choose Autotask, since data flows between all four without a separate connector, but it is not a hard requirement to get started. #### Is Autotask cheaper when bundled with Datto RMM and Datto BCDR? Autotask pricing is quote-only and often discounted when bundled with Datto RMM and Datto BCDR under a single Kaseya agreement, but the exact figure depends on the sales conversation. MSPs should ask their account manager for both a standalone Autotask quote and a bundled quote, and confirm in writing what happens to any bundling discount if they later drop one of the other products. #### What accounting tools does Autotask integrate with? Autotask integrates with accounting platforms such as QuickBooks for invoicing, alongside third-party RMM and quoting tools, through its API and an established partner integration marketplace. MSPs relying on a specific accounting workflow should confirm the current integration still supports the features they need, since integration depth can change over time, directly with Kaseya or their implementation partner. #### Is Autotask suitable for a small MSP or only larger service desks? Autotask is built to suit MSPs of most sizes, from small teams to larger service desks, rather than being aimed only at large operations. Its broad set of billing and contract structures is useful as an MSP grows, but a very small or solo shop may find a simpler, published-price PSA such as Syncro or HaloPSA faster to set up without a Kaseya sales conversation. ### Reviews Average 5 out of 5 from 1 review (1 five-star, 0 four-star, 0 three-star, 0 two-star, 0 one-star). Ease of use 5, features 5, support 5, value for money 5. ## Auvik > Automatically maps and monitors switches, firewalls and access points across sites. Auvik is a network monitoring platform that automatically discovers and maps switches, firewalls and access points at a client site, then monitors them for outages and configuration changes. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/auvik - Vendor: Auvik Networks, https://mspsoftware.net/vendors/auvik, website https://www.auvik.com - Categories: Network monitoring (primary), Documentation - Deployment: cloud. Platforms: web. HQ: Canada. Founded: 2011. ### From the vendor Auvik discovers and maps the network devices at a client site, switches, firewalls, access points and more, automatically, then monitors them for configuration changes and outages and keeps a rolling backup of device configurations. It suits MSPs who currently document networks manually in spreadsheets or diagrams that go stale, since Auvik's topology maps update themselves as the network changes, and those who want centralised visibility across every client site's network gear from one dashboard rather than logging into devices individually to check status. It fits MSPs of most sizes, though the per-device pricing means the cost scales with how much network gear an MSP is monitoring across its client base. Pricing is per billable network device per month, quoted through an Auvik account manager rather than published as a simple public figure, with volume pricing available at higher device counts, so an MSP should confirm a current per-device rate before quoting a client with a large network estate. It typically runs as a virtual appliance deployed once per client site rather than an agent installed on every device, which keeps rollout effort low even across many locations. Auvik integrates with PSA and documentation platforms including ConnectWise PSA, Autotask, HaloPSA, IT Glue and Hudu, so network maps and alerts can appear inside a client's existing documentation and ticketing systems rather than only in Auvik's own console. MSPs comparing Auvik against Domotz should weigh Auvik's deeper automatic network mapping against Domotz's lower per-site pricing, since the two serve a similar purpose with different cost structures better suited to different client sizes. ### Our take Auvik suits MSPs who are still documenting client networks by hand in spreadsheets or static diagrams that go out of date, since its topology maps update automatically as a network changes. The per-device pricing means cost scales directly with how much network gear a client has, so it is worth confirming a current rate for a client's actual device count before quoting. It integrates with most major PSA and documentation platforms already in an MSP's stack, which is worth checking against what a specific MSP already uses. ### Pricing Auvik does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Automatic network discovery | yes | | | Topology mapping | yes | | | Device configuration backup | yes | | | Uptime and outage alerting | yes | | | Configuration change detection | yes | | | Multi-site dashboard | yes | | | Documentation integration | yes | | | Hardware probe option | no | | ### Integrations - ConnectWise PSA, https://mspsoftware.net/software/connectwise-psa - Autotask, https://mspsoftware.net/software/autotask - HaloPSA, https://mspsoftware.net/software/halopsa - IT Glue, https://mspsoftware.net/software/it-glue - Hudu, https://mspsoftware.net/software/hudu Listed products that integrate with Auvik: IT Glue. ### Alternatives - Domotz: Lightweight network monitoring and remote access via an affordable probe. https://mspsoftware.net/software/domotz. Compare: https://mspsoftware.net/compare/auvik-vs-domotz - DNSFilter: DNS-layer web filtering and threat blocking, deployable in minutes per site. https://mspsoftware.net/software/dnsfilter. Compare: https://mspsoftware.net/compare/auvik-vs-dnsfilter - N-able N-central: On-premises or cloud RMM built for larger, more complex managed estates. https://mspsoftware.net/software/n-central - Lifecycle Insights: Hardware and software lifecycle reporting pulled from RMM and procurement data. https://mspsoftware.net/software/lifecycle-insights ### FAQ #### What does Auvik integrate with? Auvik integrates with ConnectWise PSA, Autotask, HaloPSA, IT Glue, Hudu. #### Is Auvik cloud or on-premises? Auvik is available as cloud. #### Does Auvik need special hardware installed on site? No. Auvik works through software that discovers and monitors network devices already on a client's network, rather than requiring a dedicated hardware appliance. It connects to switches, firewalls and access points using standard network protocols to build its topology map automatically. #### Does Auvik work with my existing PSA? Auvik integrates with several major PSA and documentation platforms, including ConnectWise PSA, Autotask, HaloPSA, IT Glue and Hudu, so network maps and alerts can appear inside tools an MSP already uses rather than only in Auvik's own console. An MSP should confirm its specific PSA is on Auvik's current integration list before buying. #### How is Auvik priced compared with Domotz? Auvik is priced per billable network device per month, with volume pricing at higher device counts, and tends to offer deeper automatic network mapping. Domotz is priced per site per month at a generally lower entry cost, which can suit smaller clients with modest device counts better. The right choice depends on a client's network size and how much mapping depth is needed. #### Does Auvik back up network device configurations? Yes. Auvik keeps a rolling backup of network device configurations as part of its monitoring, so a technician can review or restore a prior configuration if a device is misconfigured or replaced. This runs automatically alongside the topology mapping and outage monitoring rather than as a separate purchase. ## Avanan > Check Point's API-based email security that sits inside Microsoft 365 or Google Workspace. Avanan is Check Point's API-based email security product that connects directly to Microsoft 365 or Google Workspace to catch phishing and malware that gets past the platform's own filtering, without acting as a traditional mail gateway. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/avanan - Vendor: Check Point Software Technologies, https://mspsoftware.net/vendors/check-point, website https://www.checkpoint.com/harmony-email-security/ - Categories: Email security (primary), Identity and access - Deployment: cloud. Platforms: web. HQ: Israel. Founded: 1993. ### From the vendor Avanan, now part of Check Point's Harmony Email security line, connects to Microsoft 365 or Google Workspace through an API rather than sitting in front of mail flow as a traditional secure email gateway. Because it reads mail after the platform's own filtering rather than intercepting it beforehand, Avanan can catch phishing that changes behaviour after delivery, such as a link that only turns malicious once a message has already reached the inbox, and it does this without requiring an MX record change. It suits MSPs and IT teams who want an additional layer behind Microsoft's or Google's native filtering rather than a full gateway replacement, and who prefer an API-based deployment that is quicker to roll out across many client tenants than reconfiguring mail routing for each one. Pricing is per user per month, quoted through a Check Point partner rather than published as a fixed price, so an MSP should get a current quote and confirm minimum seat counts before proposing it to a client. Avanan integrates natively with Microsoft 365 and Google Workspace, the two platforms it protects, and with the wider Check Point Harmony security suite for organisations already running Check Point's network or endpoint products, plus SIEM tools for centralised alerting. MSPs evaluating Avanan should check whether a client's existing Microsoft or Google filtering already covers most of the risk, since Avanan is positioned as a second layer rather than a first line of defence, and confirm how it is licensed and billed by their chosen Check Point partner. ### Our take Avanan suits MSPs who already trust Microsoft 365's or Google Workspace's native filtering but want a second, API-based layer catching what gets through, rather than a full gateway replacement like Mimecast or Proofpoint. Because it reads mail after delivery instead of intercepting it, it is quicker to deploy across many tenants without touching MX records, which matters for an MSP managing dozens of clients. Confirm current per-user pricing and minimum seat requirements with a Check Point partner before quoting a client, since neither is published. ### Pricing Avanan does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Phishing and malware filtering | yes | | | Spoofing and impersonation protection | yes | | | API-based post-delivery scanning | yes | | | Microsoft 365 integration | yes | | ### Alternatives - KnowBe4: Phishing simulation and security awareness training with a large content library. https://mspsoftware.net/software/knowbe4 - Mimecast: Email security, continuity and archiving layered on top of Exchange or Google. https://mspsoftware.net/software/mimecast - Proofpoint Essentials: Email security for small and mid-sized businesses from an enterprise security vendor. https://mspsoftware.net/software/proofpoint-essentials ### FAQ #### Is Avanan cloud or on-premises? Avanan is available as cloud. #### Does Avanan require changing a client's MX records? No. Avanan connects to Microsoft 365 or Google Workspace through an API rather than sitting in front of mail flow as a gateway, so it does not require changing MX records or rerouting mail. This makes it faster to deploy across many client tenants than a traditional secure email gateway, since there is no mail flow change to plan and test. #### Is Avanan the same company as Check Point? Avanan was acquired by Check Point Software Technologies and now operates as part of Check Point's Harmony Email security line. It is sold and supported through Check Point's partner network rather than as an independent standalone brand, and it integrates with other Check Point Harmony products for organisations already using Check Point's network or endpoint security. #### Does Avanan replace Microsoft 365's or Google Workspace's built-in filtering? No. Avanan is designed to sit alongside the native filtering already built into Microsoft 365 or Google Workspace, scanning mail after it has passed that first layer to catch phishing that only becomes malicious after delivery. MSPs keep the platform's own filtering active and add Avanan as a second, API-based layer rather than switching it off. #### Who sells and supports Avanan? Avanan is sold and quoted exclusively through Check Point partners and resellers, not direct to end customers as a self-service purchase. An MSP typically becomes a Check Point partner, or works through a distributor that is one, to get pricing, provision the product and bill it on to clients. ## Bitwarden > Open-source password manager with a free tier and published, low-cost business pricing. Bitwarden is an open-source password manager with a shared organisation vault, available as a hosted cloud service or self-hosted, with published pricing and a genuinely usable free tier for individuals. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/bitwarden - Vendor: Bitwarden, https://mspsoftware.net/vendors/bitwarden, website https://bitwarden.com - Categories: Password management (primary), Identity and access - Free version: yes. - Deployment: cloud and on-premises. Platforms: Windows, macOS, Linux, iOS, Android and web. HQ: United States. Founded: 2016. ### From the vendor Bitwarden is an open-source password manager with a shared organisation vault for teams, available as a hosted cloud service or self-hosted on the MSP's or client's own server. Pricing starts from $4 per user per month, published on Bitwarden's site, and there is a genuinely usable free tier for individuals alongside the paid business plans. Bitwarden suits MSPs and clients who are price-sensitive on this category specifically, since its published business pricing is markedly lower than most competitors, and those who value the transparency of open-source, independently audited code over a closed-source product. It integrates with major identity providers for single sign-on on business plans, supports passkeys and hardware security keys, and offers a command-line and API interface, so MSPs can script vault provisioning as part of client onboarding rather than adding users by hand. Because self-hosting shifts responsibility for uptime and updates onto whoever runs the server, MSPs choosing that option for a client should treat it as another piece of infrastructure to maintain, not a way to avoid ongoing work, and should confirm which enterprise features, such as advanced reporting, are limited to the higher published business tier before promising them to a client on the base plan. MSPs standardising several clients on Bitwarden should also confirm whether they are managing each organisation vault separately or through a partner-facing view, since the product data on file does not detail a dedicated multi-tenant MSP console the way some competitors offer, and should ask directly whether that gap has since been addressed. ### Our take Bitwarden is the price-conscious default in this category, and open-source, independently audited code is a genuine reassurance for clients who ask about it. Its published pricing means you can quote a client accurately before ever contacting the vendor. Self-hosting is available but adds real maintenance responsibility, so only choose it for a client who understands that trade-off. Confirm which reporting and admin features sit behind the higher business tier before promising them at the base price. ### Pricing Bitwarden starts at US$4.00 per user per month, according to the vendor (pricing page: https://bitwarden.com/pricing/). ### Features | Feature | Supported | Note | | --- | --- | --- | | Shared team vaults | yes | | | SSO integration | yes | | | FIDO2 and hardware key support | yes | | ### Alternatives - Hudu: Self-hosted or cloud documentation for passwords, configurations and procedures. https://mspsoftware.net/software/hudu - IT Glue: Kaseya's documentation platform for passwords, configurations and procedures. https://mspsoftware.net/software/it-glue - Keeper: Enterprise-grade password and secrets management with strong compliance features. https://mspsoftware.net/software/keeper - CyberQP: Privileged access management built for MSP technicians working across many clients. https://mspsoftware.net/software/cyberqp ### FAQ #### How much does Bitwarden cost? Bitwarden starts at US$4.00 per user per month, according to the vendor. #### Does Bitwarden offer a free trial? There is a genuinely free version. #### Is Bitwarden cloud or on-premises? Bitwarden is available as cloud and on-premises. #### Does Bitwarden's free tier work for a business? Bitwarden's free tier is aimed at individuals rather than teams, and the product data on file describes it as genuinely usable rather than a crippled trial. A business wanting a shared organisation vault, admin controls and single sign-on should expect to move to a paid business plan, which is still published at a markedly lower price than most competitors. #### Can Bitwarden be self-hosted by a client instead of the MSP? Yes, Bitwarden can be self-hosted on either the MSP's or the client's own server rather than only through Bitwarden's hosted cloud service. Whoever hosts it takes on responsibility for uptime, backups and updates, so MSPs should agree explicitly with the client who is responsible for that maintenance before choosing self-hosting. #### Is Bitwarden's open-source code independently audited? Yes, Bitwarden's code is open source and independently audited, which the product data on file notes as a specific reassurance for security-conscious clients over a closed-source competitor. MSPs can point clients to these independent audits directly when a client asks how they can verify Bitwarden's security claims themselves. #### What features are limited to Bitwarden's higher business tier? The existing product data on file notes that some enterprise features, such as advanced reporting, sit behind Bitwarden's higher published business tier rather than the base plan. MSPs should confirm exactly which reporting and admin features their chosen tier includes before promising them to a client on a lower-priced plan. ## Blackpoint Cyber > MDR built around a proprietary SOC platform and a 24-hour analyst team. Blackpoint Cyber is a managed detection and response provider with its own SOC platform covering Microsoft 365, network and endpoint signals, staffed by an in-house analyst team that can respond to and isolate threats automatically. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/blackpoint-cyber - Vendor: Blackpoint Cyber, https://mspsoftware.net/vendors/blackpoint-cyber, website https://blackpointcyber.com - Categories: MDR and SOC (primary), EDR and XDR - Deployment: cloud. Platforms: Windows and web. HQ: United States. Founded: 2014. - Support: 24/7. ### From the vendor Blackpoint Cyber is a managed detection and response provider built around its own SOC platform, covering MDR for Microsoft 365 and network activity alongside endpoint response, staffed by an in-house analyst team that can respond to and isolate a compromised device or account without waiting for the MSP to act first. It suits MSPs who want an all-in-one response service covering cloud identity and network signals as well as the endpoint, rather than an EDR agent that only raises alerts for a technician to triage manually. Because response actions can happen automatically, MSPs should understand what Blackpoint's analysts are authorised to do on their own before an incident occurs, rather than during one. Pricing is per endpoint or per protected user per month, quoted to MSP partners at wholesale rates rather than published, with the MSP setting its own client-facing price. Blackpoint Cyber integrates with several third-party PSA platforms for ticket creation, and its own portal is built for multi-tenant use, so a technician can see response actions taken automatically across every client alongside detections that still need manual review, rather than logging into each client's environment separately. Before buying, confirm exactly which PSA integrations are supported for automated ticketing, and ask what level of automatic response, such as isolating a device or disabling a compromised account, is enabled by default versus requiring MSP approval first, since that changes how much oversight a technician retains during an active incident. It is also worth asking how findings that still need manual review are surfaced to a technician, by email, PSA ticket, or only inside Blackpoint's own portal, since that affects how quickly a lower-confidence detection actually gets looked at. ### Our take Blackpoint Cyber suits MSPs who want response to cover Microsoft 365 and network signals, not just the endpoint, and who are comfortable with an analyst team taking automatic action on a compromised device or account. Confirm what triggers an automatic response versus what requires MSP sign-off first, since that balance matters during an actual incident. Pricing is wholesale and quoted rather than published, so get a specific per-endpoint or per-user rate before setting a retail price. It is a reasonable fit alongside an MSP's existing PSA, provided the specific PSA integration needed is confirmed as supported. ### Pricing Blackpoint Cyber does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | 24-hour human-staffed SOC | yes | | | Managed threat response and isolation | yes | | | Network monitoring | yes | | | Microsoft 365 monitoring | yes | | | PSA integration for ticketing | yes | | | Multi-tenant console | yes | | | Dedicated incident response | yes | | ### Alternatives - Huntress: Managed EDR with a human-staffed SOC built specifically for MSPs. https://mspsoftware.net/software/huntress - Todyl: A single SASE-style agent bundling network security, EDR and identity. https://mspsoftware.net/software/todyl - ConnectSecure: Vulnerability scanning and compliance evidence built for MSPs to run across clients. https://mspsoftware.net/software/connectsecure - SentinelOne: AI-driven EDR and XDR with autonomous, one-click threat rollback. https://mspsoftware.net/software/sentinelone ### FAQ #### Is Blackpoint Cyber cloud or on-premises? Blackpoint Cyber is available as cloud. #### Does Blackpoint Cyber cover Microsoft 365 and network activity, or only endpoints? Blackpoint Cyber's MDR platform covers Microsoft 365 and network activity alongside endpoint response, not just the endpoint agent that some competing MDR products are built around. This is one of its main differentiators, giving an in-house analyst team visibility into cloud identity and network signals as well as device-level threats when deciding how to respond to an incident. #### Can Blackpoint Cyber's analysts take action without MSP approval? Blackpoint's in-house analyst team can respond to and isolate a compromised device or account automatically as part of its managed response, rather than only alerting the MSP and waiting for approval. MSPs evaluating Blackpoint should ask exactly what actions are authorised automatically versus what requires MSP sign-off first, since this affects how much control a technician retains during an active incident. #### Does Blackpoint Cyber create tickets in a PSA automatically? Blackpoint Cyber integrates with several third-party PSA platforms for automatic ticket creation, so detections and response actions can appear in an existing service desk queue. Coverage is limited to specific supported PSAs rather than every platform on the market, so confirm the exact PSA in use is supported before assuming tickets will be created without manual entry. #### How does Blackpoint Cyber price its MDR service? Blackpoint Cyber is priced per endpoint or per protected user per month, quoted to MSP partners at wholesale rates rather than published as a fixed list price, with the MSP setting its own client-facing price. Because pricing can be structured either way depending on the modules used, confirm which basis applies before comparing it against another MDR provider's quote. ## CIPP > Open-source multi-tenant console for managing and securing Microsoft 365. CIPP, or CyberDrain Improved Partner Portal, is an open-source, self-hosted console for managing Microsoft 365 tenants at scale, with no per-tenant licence fee beyond the MSP's own Azure hosting cost. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/cipp - Vendor: CyberDrain, https://mspsoftware.net/vendors/cyberdrain, website https://cipp.app - Categories: Microsoft 365 and cloud management (primary), Vulnerability and compliance - Free version: yes. - Deployment: on-premises. Platforms: web. HQ: Netherlands. ### From the vendor CIPP, short for CyberDrain Improved Partner Portal, is an open-source, self-hosted console for managing Microsoft 365 tenants at scale, covering user and licence administration, security baseline checks such as conditional access and MFA coverage, and standard configuration templates an MSP applies across many clients at once. Because it is free and open source, hosted on the MSP's own Azure subscription, it has no per-tenant licence fee, funded instead through community contributions and optional paid support from its maintainers. CIPP suits MSPs comfortable hosting their own application, typically on Azure, who want the depth of Microsoft's own management APIs without paying a per-tenant licence fee for a commercial multi-tenant console, and who are willing to run and update the software themselves. It integrates directly with Microsoft Graph and Partner Center APIs, and with PSA and RMM platforms through webhooks, so alerts about a tenant falling out of policy can open a ticket automatically. Because CIPP is self-hosted and community-maintained rather than backed by a vendor support contract, MSPs should be realistic about the internal Azure and update-management skills needed to run it reliably, and should budget the underlying Azure hosting cost separately from the licence-free software itself, since free software is not the same as a zero total cost of ownership. MSPs new to CIPP should also budget time to read its community documentation and join its support channels before rolling it out to production clients, since troubleshooting an open-source, community-maintained tool typically works differently from opening a ticket with a commercial vendor's support desk. ### Our take CIPP is genuinely free of licence fees, but that is not the same as free to run: budget the Azure hosting cost and the internal time to keep it patched and updated. It suits an MSP with real Azure and DevOps comfort more than one wanting a fully managed, vendor-supported console. The depth of Microsoft Graph API access it exposes is a real advantage over some commercial alternatives. Consider the optional paid support from its maintainers if you want a safety net beyond community help. ### Pricing CIPP does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Tenant and user provisioning | yes | | | Licence assignment | yes | | | Security baseline templates | yes | | | Conditional access management | yes | | | Multi-tenant console | yes | | | Shadow SaaS discovery | no | | | Microsoft Graph API integration | yes | | | PSA integration | yes | | ### Alternatives - Augmentt: Discovers shadow SaaS and manages Microsoft 365 licensing and security across tenants. https://mspsoftware.net/software/augmentt - Afi: AI-assisted SaaS backup for Microsoft 365 and Google Workspace. https://mspsoftware.net/software/afi - Microsoft Defender for Business: Endpoint protection built into the Microsoft 365 Business Premium licence. https://mspsoftware.net/software/defender-for-business ### FAQ #### Does CIPP offer a free trial? There is a genuinely free version. #### Is CIPP cloud or on-premises? CIPP is available as on-premises. #### Does CIPP have any licence fee at all? No, CIPP is free and open source with no per-tenant licence fee, unlike commercial multi-tenant Microsoft 365 consoles. The only cost is the underlying Azure hosting the MSP runs it on, plus the optional paid support some MSPs choose to buy from its maintainers for a safety net beyond community help. #### What skills does an MSP need to run CIPP reliably? Because CIPP is self-hosted on the MSP's own Azure subscription rather than a vendor-managed service, an MSP needs real comfort with Azure hosting and ongoing software updates to run it reliably. MSPs without that internal capability should weigh the licence-fee savings against the operational risk of running unsupported infrastructure themselves. #### Does CIPP integrate with PSA and RMM platforms? Yes, CIPP integrates with PSA and RMM platforms through webhooks, so alerts about a Microsoft 365 tenant falling out of policy, such as failing a conditional access or MFA check, can open a ticket automatically. This lets policy drift feed directly into an MSP's normal ticketing workflow rather than requiring a technician to check CIPP separately. #### Is paid support available for CIPP? Yes, optional paid support is available from CIPP's maintainers, in addition to the community contributions that fund the open-source project generally. MSPs who want a vendor-style support relationship despite CIPP being free and self-hosted should ask its maintainers directly what that paid support covers and costs. ## Cisco Umbrella > Cisco's DNS and secure web gateway, built for larger, multi-site clients. Cisco Umbrella is a cloud security platform built around DNS-layer filtering, with optional secure web gateway, firewall and cloud access security broker features, aimed at larger, multi-site organisations. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/cisco-umbrella - Vendor: Cisco, https://mspsoftware.net/vendors/cisco, website https://umbrella.cisco.com - Categories: DNS and web filtering (primary), Identity and access - Deployment: cloud. Platforms: Windows, macOS, iOS, Android and web. HQ: United States. Founded: 1984. ### From the vendor Cisco Umbrella is a cloud security platform built around DNS-layer filtering, with an optional secure web gateway, firewall and cloud access security broker functionality for organisations that need more than basic content filtering. It suits MSPs serving larger, multi-site clients who need consistent policy across many locations and remote users, and those already invested in Cisco networking equipment, since Umbrella integrates directly with existing Cisco routers and switches rather than requiring a separate appliance. It also supports roaming client software for laptops that travel off a Cisco-equipped network, extending the same DNS policy to remote and hybrid staff. It is a heavier, more enterprise-oriented product than a DNS-only filter, which suits a service desk supporting mid-market clients better than a very small business with one site and a handful of users. Pricing is per user per year, quoted through a Cisco partner or distributor rather than published as a simple monthly figure, with packages bundling different combinations of DNS filtering, secure web gateway and cloud access security broker features, so the final cost depends heavily on which package a client needs. Cisco Umbrella integrates with Cisco Duo for identity and with the wider Cisco security portfolio, and with SIEM platforms for larger security operations, plus a documented API for automation. MSPs evaluating Umbrella against a lighter DNS filtering product such as DNSFilter should weigh whether a client actually needs the secure web gateway and CASB features, since those add real cost and configuration overhead that a smaller client with simple DNS filtering needs may not require. ### Our take Cisco Umbrella suits MSPs with larger, multi-site clients that already run Cisco networking gear, where the direct integration with existing routers and switches saves separate appliance deployment. It is more than most smaller clients need: a straightforward DNS filter such as DNSFilter will cover a single-site business at lower cost and simpler setup. Get a package-specific quote from a Cisco partner before proposing it, since Umbrella's packages bundle different combinations of DNS filtering, secure web gateway and CASB features at different price points. ### Pricing Cisco Umbrella does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | DNS-layer blocking | yes | | | Secure web gateway | yes | | | Per-site policy | yes | | | Network-wide router deployment | yes | | ### Integrations - Cisco Duo, https://mspsoftware.net/software/duo ### Alternatives - DNSFilter: DNS-layer web filtering and threat blocking, deployable in minutes per site. https://mspsoftware.net/software/dnsfilter - Todyl: A single SASE-style agent bundling network security, EDR and identity. https://mspsoftware.net/software/todyl ### FAQ #### What does Cisco Umbrella integrate with? Cisco Umbrella integrates with Cisco Duo. #### Is Cisco Umbrella cloud or on-premises? Cisco Umbrella is available as cloud. #### Does Cisco Umbrella require Cisco networking equipment? No, Umbrella works as a standalone cloud security service without Cisco routers or switches. It integrates directly with existing Cisco networking equipment when a client already has it, which simplifies deployment, but it can also be deployed through roaming client software or manual DNS configuration for clients on other vendors' network gear. #### What is the difference between Cisco Umbrella and DNSFilter? Both filter malicious destinations at the DNS layer, but Umbrella adds optional secure web gateway, firewall and cloud access security broker functionality aimed at larger, multi-site organisations, with pricing quoted through a Cisco partner. DNSFilter publishes simpler tiered pricing and is aimed at MSPs wanting DNS-layer filtering without the added enterprise features or the quote-only sales process. #### Does Cisco Umbrella integrate with Cisco Duo? Yes. Cisco Umbrella integrates with Cisco Duo for multi-factor authentication and device trust, since both are part of Cisco's wider security portfolio following Cisco's acquisitions of each product. MSPs already using Duo for identity can add Umbrella for DNS and web filtering under the same Cisco partner relationship rather than a separate vendor. #### Is Cisco Umbrella suitable for a small, single-site client? It can be used for a small client, but its packaging and per-user annual pricing, quoted through a Cisco partner, are built with larger and multi-site organisations in mind. A smaller, single-site client with simple filtering needs is often better served by a lighter, published-pricing DNS filter, with Umbrella reserved for clients that need its secure web gateway or CASB features. ## ConnectSecure > Vulnerability scanning and compliance evidence built for MSPs to run across clients. ConnectSecure is a vulnerability scanning and compliance reporting product for MSPs, scanning client networks and endpoints for vulnerabilities, misconfigurations and missing patches and turning results into client-facing risk reports. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/connectsecure - Vendor: ConnectSecure, https://mspsoftware.net/vendors/connectsecure, website https://connectsecure.com - Categories: Vulnerability and compliance (primary), MDR and SOC - Deployment: cloud. Platforms: web. HQ: United States. ### From the vendor ConnectSecure, formerly known as CyberCNS, scans client networks and endpoints for vulnerabilities, misconfigurations and missing patches, then packages the results into risk scores and reports aimed at supporting compliance frameworks such as CMMC, HIPAA or PCI, rather than just listing raw CVE numbers. It suits MSPs building or expanding a vulnerability management or virtual CISO offering who need reporting a non-technical client contact can actually understand, and those that need structured evidence for a compliance audit rather than a bare scan output a client cannot interpret on their own. It suits MSPs of most sizes, though the wholesale pricing model rewards MSPs with an established retail security practice able to set and defend their own markup, more than a shop that is new to selling security services. Pricing is per endpoint per month, quoted to MSP partners at wholesale rates with the MSP setting its own retail price, rather than published as a fixed list price, so margin on this product depends on what the MSP itself charges the client. ConnectSecure integrates with major PSA and RMM platforms for ticket creation from scan findings, and its console is built for multi-tenant use, so a technician can review risk posture and remediation progress across every client from a single dashboard rather than a per-client login. MSPs adding ConnectSecure to a security stack that already includes an EDR or MDR product should be clear with clients about what each layer actually covers, since vulnerability scanning finds different problems, missing patches and misconfigurations, than an EDR agent watching for active malicious behaviour. ### Our take ConnectSecure suits MSPs building a vulnerability management or virtual CISO offering who need reports a client's owner or compliance contact can follow, not just a raw list of CVEs for a technician. Because pricing is wholesale to the MSP with the MSP setting its own retail price, the actual client-facing cost is the MSP's own decision, not a fixed vendor number. Be clear with clients that vulnerability scanning covers different ground than an EDR or MDR product already in their stack. ### Pricing ConnectSecure does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Network vulnerability scanning | yes | | | Missing patch detection | yes | | | Compliance framework mapping | yes | | | Risk scoring | yes | | | PSA integration for remediation tickets | yes | | | Client-facing reports | yes | | | Multi-tenant console | yes | | | Automated evidence collection | yes | | ### Alternatives - Vanta: Automates the evidence collection behind SOC 2 and similar compliance frameworks. https://mspsoftware.net/software/vanta - Augmentt: Discovers shadow SaaS and manages Microsoft 365 licensing and security across tenants. https://mspsoftware.net/software/augmentt - CIPP: Open-source multi-tenant console for managing and securing Microsoft 365. https://mspsoftware.net/software/cipp - ThreatLocker: Default-deny application control and ringfencing to stop what has not been approved. https://mspsoftware.net/software/threatlocker ### FAQ #### Is ConnectSecure cloud or on-premises? ConnectSecure is available as cloud. #### Does ConnectSecure replace an EDR or antivirus product? No. ConnectSecure scans for vulnerabilities, misconfigurations and missing patches rather than watching endpoints for active malicious behaviour, which is what an EDR product does. MSPs typically run ConnectSecure alongside an EDR or MDR product, not instead of one, since the two cover different kinds of risk. #### Is ConnectSecure priced per client or per MSP? ConnectSecure is priced per endpoint per month, quoted to the MSP at wholesale rates, with the MSP setting its own retail price to bill each client. This means the margin on the product, and how it appears on a client's invoice, is entirely up to the MSP rather than fixed by ConnectSecure. #### Can ConnectSecure support a specific compliance framework such as HIPAA? ConnectSecure packages its scan results into risk scores and reports aimed at supporting frameworks such as CMMC, HIPAA and PCI, giving a non-technical client contact evidence they can use toward an audit. MSPs should confirm with ConnectSecure which specific framework requirements are covered for a given client's situation, since compliance needs vary by industry and contract. #### Can one technician manage ConnectSecure across several clients? Yes. ConnectSecure's console is built for multi-tenant management, so a technician can review vulnerability findings and remediation progress across every client from a single dashboard rather than logging into a separate portal per client. This is the standard way MSPs operate the product across a client base. ## ConnectWise PSA > Ticketing, contracts and billing for a service desk, from ConnectWise. ConnectWise PSA, formerly ConnectWise Manage, is a professional services automation platform for ticketing, contracts, time tracking, project management and billing, built for established MSPs that need detailed, configurable billing and contract rules. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/connectwise-psa - Vendor: ConnectWise, https://mspsoftware.net/vendors/connectwise, website https://www.connectwise.com/platform/business-management/psa - Categories: PSA and ticketing (primary), Billing and reconciliation - Deployment: cloud. Platforms: web. HQ: United States. Founded: 1982. ### From the vendor ConnectWise PSA, formerly known as ConnectWise Manage, is a professional services automation platform covering ticketing, contracts, time tracking, project management and billing for a technology service desk. It suits established MSPs with more than a handful of technicians who need detailed contract and billing rules, since its depth and configurability come with a steeper setup process than lighter PSAs, often involving a partner-led implementation rather than a quick self-serve start. Reported typical customer sizes run from 16 to 50 technicians up through 200 and above, which fits its reputation as a PSA for larger, more established operations rather than a one or two person shop. Pricing is per user per month, quoted by a ConnectWise account manager rather than published, typically on an annual agreement alongside other ConnectWise products. It integrates natively with ConnectWise RMM and ScreenConnect, and with a wide range of third-party RMM, quoting, documentation and accounting tools, including QuickBooks and Xero for invoicing, through its API and a marketplace of partner integrations built up over more than two decades in the MSP market. ConnectWise was founded in 1982 and is based in the United States, which is part of why its partner marketplace is as broad as it is, built up over decades rather than years, and why so many older, established MSPs are already standardised on it. Because implementation is typically partner-led and pricing is quote-only, MSPs should budget for setup time and cost on top of the monthly per-user fee, and confirm in writing what is included in the initial implementation before signing an annual agreement. ### Our take ConnectWise PSA suits an MSP that has outgrown a lighter PSA and needs genuinely configurable contract and billing rules, not a first PSA for a very small team. The setup cost is real: budget for a partner-led implementation rather than expecting to configure it yourself in a weekend. Because pricing is quote-only and usually annual, get the full first-year cost in writing, including implementation fees, before comparing it against HaloPSA or Autotask. If you already run ConnectWise RMM or ScreenConnect, ask about bundled pricing across the stack. ### Pricing ConnectWise PSA does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Ticketing with SLA timers | yes | | | Contract and agreement management | yes | | | Time tracking and timesheets | yes | | | Billing and invoicing | yes | | | Project management | yes | | | Client self-service portal | yes | | | RMM integration | yes | | | Accounting integration | yes | | | Reporting and dashboards | yes | | | Workflow and ticket automation | yes | | ### Integrations - ConnectWise RMM, https://mspsoftware.net/software/connectwise-rmm - ScreenConnect, https://mspsoftware.net/software/screenconnect - QuickBooks, https://quickbooks.intuit.com - Xero, https://www.xero.com Listed products that integrate with ConnectWise PSA: Auvik, ConnectWise RMM, N-able N-central, NinjaOne, ScreenConnect and Zomentum. ### Alternatives - Autotask: Kaseya's PSA for ticketing, contracts and billing, paired with Datto RMM. 5 out of 5 from 1 review. https://mspsoftware.net/software/autotask. Compare: https://mspsoftware.net/compare/autotask-vs-connectwise-psa - HaloPSA: Service desk, contracts and billing on a per-technician price with no per-user fees. https://mspsoftware.net/software/halopsa. Compare: https://mspsoftware.net/compare/connectwise-psa-vs-halopsa - Syncro: Combined PSA and RMM priced per technician, with no per-endpoint fee. https://mspsoftware.net/software/syncro ### FAQ #### What does ConnectWise PSA integrate with? ConnectWise PSA integrates with ConnectWise RMM, ScreenConnect, QuickBooks, Xero. #### Is ConnectWise PSA cloud or on-premises? ConnectWise PSA is available as cloud. #### Who is ConnectWise PSA for? MSPs report using ConnectWise PSA at sizes of 16-50, 51-200, 200+ technicians. #### Is ConnectWise PSA suitable for a small MSP with only a few technicians? ConnectWise PSA is generally aimed at more established MSPs, with reported typical customer sizes starting around 16 to 50 technicians and running up to 200 and above. Its depth of contract and billing configuration is a strength for larger, more complex operations, but it comes with a steeper setup process, often a partner-led implementation, than a lighter PSA like HaloPSA or Syncro. A very small or solo MSP may find those simpler, published-price alternatives a better fit. #### Does setting up ConnectWise PSA require a partner-led implementation? Implementation is commonly partner-led rather than a self-serve setup, given the depth of ConnectWise PSA's contract and billing configuration options. MSPs should budget time and cost for this beyond the monthly per-user fee, and confirm directly with their ConnectWise account manager or implementation partner what is included in that process before signing an annual agreement. #### Does ConnectWise PSA integrate with QuickBooks and Xero? Yes, ConnectWise PSA integrates with accounting platforms including QuickBooks and Xero for invoicing, alongside a wide range of third-party RMM, quoting and documentation tools through its API and long-established partner marketplace. MSPs relying on a specific accounting workflow should confirm the current integration still covers the features they need, such as automated invoice sync, directly with ConnectWise. #### Is ConnectWise PSA sold on its own or bundled with ConnectWise RMM? ConnectWise PSA can be bought on its own, but pricing is typically quoted alongside other ConnectWise products such as ConnectWise RMM and ScreenConnect under one annual agreement. MSPs should ask their account manager for both a standalone PSA quote and a bundled quote covering any other ConnectWise products they plan to use, since ConnectWise's pricing is not published and depends on the full conversation. ## ConnectWise RMM > Cloud RMM from ConnectWise, built to pair with its own PSA. ConnectWise RMM is ConnectWise's cloud-based remote monitoring and management platform for Windows and Mac endpoints, built to integrate natively with ConnectWise PSA and with ConnectWise ScreenConnect built in for remote support. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/connectwise-rmm - Vendor: ConnectWise, https://mspsoftware.net/vendors/connectwise, website https://www.connectwise.com/platform/unified-management/rmm - Categories: RMM and patching (primary), Remote access and support - Deployment: cloud. Platforms: Windows, macOS and web. HQ: United States. Founded: 1982. ### From the vendor ConnectWise RMM is ConnectWise's cloud-based remote monitoring and management product, covering patch management, scripting, monitoring policies and remote access into Windows and Mac endpoints, with ConnectWise ScreenConnect built in for support sessions rather than sold as a separate add-on. It suits MSPs already standardised on ConnectWise PSA, since alerts, assets and tickets pass between the two products without a separate integration to configure and maintain, though ConnectWise RMM can also run against other PSAs if an MSP prefers to mix vendors. Pricing is per managed endpoint per month, quoted through a ConnectWise sales conversation rather than published, and it is commonly bundled with ConnectWise PSA and ScreenConnect into a single agreement rather than sold on its own. It integrates natively with ConnectWise PSA, with ConnectWise Automate's script library for MSPs migrating off that older ConnectWise product, and with ConnectWise's own BCDR and security tools, plus third-party documentation and ticketing systems through ConnectWise's API and app marketplace. ConnectWise itself dates back to 1982 and is based in the United States, and the RMM agent runs on both Windows and Mac endpoints, managed from a web console, so there is no separate desktop application for the technician side to install and keep updated. MSPs evaluating it should ask specifically whether they are being quoted the standalone RMM or a bundled package with PSA and ScreenConnect, since the bundled pricing and the standalone pricing are not the same conversation, and should confirm current per-endpoint cost in writing before comparing it against NinjaOne or Datto RMM. ### Our take ConnectWise RMM is the natural choice for a shop already running ConnectWise PSA, since the native hand-off between the two removes a whole category of integration work other RMM and PSA pairings still need. It is a harder sell on its own merits against NinjaOne or Datto RMM if you are not using ConnectWise PSA already. Because ConnectWise sells it through a sales conversation rather than a published price list, get a written quote that clearly separates standalone RMM pricing from any bundled PSA and ScreenConnect package before you sign. If you are migrating off ConnectWise Automate, ask specifically how script library migration works. ### Pricing ConnectWise RMM does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Patch management | yes | | | Scripting | yes | | | Remote access | yes | | | Monitoring and alerting | yes | | | Software deployment | yes | | | Backup integration | yes | | | PSA integration | yes | | | Automation policies | yes | | ### Integrations - ConnectWise PSA, https://mspsoftware.net/software/connectwise-psa - ScreenConnect, https://mspsoftware.net/software/screenconnect Listed products that integrate with ConnectWise RMM: ConnectWise PSA and ScreenConnect. ### Alternatives - Datto RMM: Kaseya's cloud RMM, built to pair with Autotask PSA and Datto BCDR. https://mspsoftware.net/software/datto-rmm - N-able N-central: On-premises or cloud RMM built for larger, more complex managed estates. https://mspsoftware.net/software/n-central - NinjaOne: Cloud RMM for patching, scripting and remote control from one lightweight agent. https://mspsoftware.net/software/ninjaone - ScreenConnect: ConnectWise's remote support and unattended access tool. https://mspsoftware.net/software/screenconnect. Compare: https://mspsoftware.net/compare/connectwise-rmm-vs-screenconnect ### FAQ #### What does ConnectWise RMM integrate with? ConnectWise RMM integrates with ConnectWise PSA, ScreenConnect. #### Is ConnectWise RMM cloud or on-premises? ConnectWise RMM is available as cloud. #### Do I need ConnectWise PSA to use ConnectWise RMM? No, ConnectWise RMM can run against other PSA platforms, but its main advantage over competitors is the native integration with ConnectWise PSA, where alerts, assets and tickets pass between the two products without a separate connector. An MSP not using ConnectWise PSA can still use ConnectWise RMM, but loses that specific benefit and may find a standalone-focused RMM like NinjaOne a more natural fit. #### Is ScreenConnect included with ConnectWise RMM or a separate purchase? ScreenConnect-based remote access is built into ConnectWise RMM as standard for support sessions, rather than sold as a separate line item within the RMM itself. ScreenConnect is also sold and used as its own standalone remote access product outside of ConnectWise RMM, so MSPs already using ScreenConnect elsewhere will find the same interface here. #### Is ConnectWise RMM cheaper bundled with ConnectWise PSA than bought standalone? ConnectWise commonly bundles RMM with PSA and ScreenConnect into a single agreement, and pricing is quoted through a sales conversation rather than published, so there is no fixed answer without a quote. MSPs should ask ConnectWise directly for both a standalone RMM price and a bundled price covering their expected endpoint count, then compare the two in writing rather than assuming the bundle is automatically cheaper. #### Can I migrate scripts from ConnectWise Automate to ConnectWise RMM? ConnectWise RMM integrates with ConnectWise Automate's script library specifically to support MSPs migrating off that older ConnectWise product. This is aimed at existing ConnectWise Automate customers moving to the newer cloud RMM rather than a general script import tool for other platforms. MSPs planning this migration should confirm the current migration process and any gaps directly with ConnectWise before committing to a cutover date. ## Cove Data Protection > N-able's cloud-first backup for servers, workstations and Microsoft 365. Cove Data Protection is a cloud-hosted backup service from N-able that protects physical and virtual servers, workstations and Microsoft 365 mailboxes and files without requiring an on-site backup appliance. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/cove-data-protection - Vendor: N-able, https://mspsoftware.net/vendors/n-able, website https://www.n-able.com/products/cove-data-protection - Categories: Backup and disaster recovery (primary), Microsoft 365 and Google Workspace backup - Deployment: cloud. Platforms: Windows and web. HQ: United States. ### From the vendor Cove Data Protection, formerly known simply as Cove and now part of N-able, is a cloud-first backup platform for physical and virtual servers, workstations, and Microsoft 365 mailboxes and files. Everything runs from a web console, so there is no on-site backup appliance to rack, patch or replace, which sets it apart from backup products built around a local hardware or virtual appliance. It suits MSPs who want to standardise on one backup product across server, endpoint and SaaS workloads instead of running separate tools for each, and MSPs who would rather manage backups entirely through a cloud service than maintain local backup hardware at every client site. Image-based bare-metal recovery is supported on servers, so a failed machine can be rebuilt from its backup rather than reinstalled from scratch. Pricing is per protected device or per Microsoft 365 seat, billed monthly with usage-based cloud storage charges on top, and it is quoted through an N-able account manager rather than published as a fixed list price. Cove integrates with N-central, N-able's RMM, so backup job status and failures appear alongside a client's other monitoring alerts instead of in a separate console, which matters most to MSPs already running N-central. Restores can target Azure or the client's own hardware. Before buying, an MSP should confirm current per-device and per-seat pricing directly with N-able, since it is not published, and check how the Microsoft 365 backup licensing works for the specific mix of mailboxes, OneDrive and SharePoint sites being protected, since usage-based cloud storage can move the total cost depending on data volume. ### Our take Cove suits MSPs who want one backup vendor across servers, workstations and Microsoft 365 rather than stitching together separate tools for each workload. It is a natural fit for anyone already running N-central, since backup alerts land in the same console as other RMM alerts. Because pricing is quoted rather than published and includes a usage-based cloud storage component, ask for a total estimate against a specific client's data volume rather than comparing a single headline number against competitors. Confirm how bare-metal recovery works for the server operating systems actually in use before relying on it as the primary recovery path. ### Pricing Cove Data Protection does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Image-based backup | yes | | | Local backup appliance | no | | | Cloud storage included | yes | | | Bare-metal recovery | yes | | | Offsite replication | yes | | | VMware and Hyper-V support | yes | | | RMM integration | yes | | ### Integrations - N-able N-central, https://mspsoftware.net/software/n-central Listed products that integrate with Cove Data Protection: N-able N-central. ### Alternatives - Datto BCDR: Backup appliance with image-based server backup and instant local or cloud virtualisation. https://mspsoftware.net/software/datto-bcdr - Dropsuite: SaaS backup for Microsoft 365 and Google Workspace, sold through MSP partners. https://mspsoftware.net/software/dropsuite - Veeam: Backup and recovery for servers and virtual machines, run by the MSP or through a partner. https://mspsoftware.net/software/veeam ### FAQ #### What does Cove Data Protection integrate with? Cove Data Protection integrates with N-able N-central. #### Is Cove Data Protection cloud or on-premises? Cove Data Protection is available as cloud. #### Does Cove Data Protection need an on-site backup appliance? No. Cove runs entirely from a cloud console, so there is no local hardware or virtual appliance to install, patch or replace at a client site. Servers, workstations and Microsoft 365 data all back up directly to N-able's cloud, which is the main way it differs from appliance-based backup products that keep a local copy on site as well as one in the cloud. #### Does Cove Data Protection work with N-able N-central? Yes. Cove integrates with N-central, N-able's RMM platform, so backup job status and failures show up alongside a client's other monitoring alerts rather than in a separate login. MSPs who are not already running N-central can still use Cove standalone, but the combined alerting is one of the reasons N-central users pick it over a competing backup product. #### Can Cove Data Protection restore a failed server as a virtual machine? Cove supports image-based bare-metal recovery for servers, so a failed machine can be rebuilt from its backup rather than reinstalled and reconfigured from nothing. Restores can target Azure or the client's own hardware. MSPs should confirm bare-metal recovery support for their specific server operating systems and hypervisors before relying on it as the primary recovery plan for a critical server. #### How is Cove Data Protection billed for Microsoft 365 backup? Microsoft 365 backup is billed per protected seat, on top of the usage-based cloud storage charge that applies to all data Cove stores, and the total is quoted through an N-able account manager rather than published. Because storage cost scales with data volume, MSPs should ask for a total monthly estimate against a specific client's actual mailbox and file sizes rather than a per-seat number alone. ## CyberQP > Privileged access management built for MSP technicians working across many clients. CyberQP is a privileged access management product built for MSPs, rotating and vaulting local admin and service account passwords across client environments and verifying help desk callers' identity before support is given. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/cyberqp - Vendor: CyberQP, https://mspsoftware.net/vendors/cyberqp, website https://www.cyberqp.com - Categories: Identity and access (primary), Password management - Deployment: cloud. Platforms: web. HQ: Canada. Founded: 2019. ### From the vendor CyberQP, formerly known as Quikpass, provides privileged access management aimed specifically at how MSPs work: rotating and vaulting local admin and service account passwords across every client automatically, rather than relying on shared or unchanged credentials, and verifying a caller's identity before an end user is helped over the phone, to close a common social-engineering gap in a service desk's own process. It suits MSPs who want to reduce standing admin access and shared passwords across client environments as part of a cyber insurance or compliance push, and those that have identified help desk identity verification as a weak point after a client incident or an insurer's questionnaire. It typically suits MSPs of most sizes, from a single technician managing a handful of clients to a larger team, since the core problem it addresses, standing admin access left unmanaged across many environments, scales with client count rather than technician headcount. Pricing is per technician or per managed endpoint per month, quoted through a CyberQP account manager rather than published, so an MSP should get a current quote scaled to its technician count and endpoint base before committing. CyberQP integrates with major RMM platforms to rotate local admin credentials automatically across managed endpoints without a technician doing it by hand, and with documentation tools so vaulted credentials stay linked to the right client record. It is positioned as a layer that sits alongside a general-purpose password manager such as Bitwarden or Keeper rather than replacing one, handling privileged local and service account credentials specifically, so MSPs evaluating it should confirm how it divides responsibility with whatever password manager they already use for day-to-day team passwords. ### Our take CyberQP suits MSPs that have been asked by a cyber insurer, or by a client after an incident, to show how they control standing admin access and verify help desk callers, since both are specific things CyberQP is built to address. It sits alongside, rather than replaces, a general password manager, so confirm with the vendor how the two are meant to divide responsibility before buying both. Get a current per-technician or per-endpoint quote, since list pricing is not published. ### Pricing CyberQP does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Multi-factor authentication | no | | | Single sign-on | no | | | Conditional access and device trust | no | | | Privileged access management | yes | | | Passwordless and passkey support | no | | | RADIUS and SAML support | no | | ### Alternatives - Duo: Cisco's multi-factor authentication and device trust for logins and VPNs. https://mspsoftware.net/software/duo. Compare: https://mspsoftware.net/compare/cyberqp-vs-duo - Bitwarden: Open-source password manager with a free tier and published, low-cost business pricing. https://mspsoftware.net/software/bitwarden - Keeper: Enterprise-grade password and secrets management with strong compliance features. https://mspsoftware.net/software/keeper - Todyl: A single SASE-style agent bundling network security, EDR and identity. https://mspsoftware.net/software/todyl ### FAQ #### Is CyberQP cloud or on-premises? CyberQP is available as cloud. #### How is CyberQP different from a general password manager? CyberQP focuses specifically on privileged credentials an MSP controls across client environments, such as local admin and service account passwords, rotating them automatically rather than leaving them static. A general-purpose password manager such as Bitwarden or Keeper is typically used for day-to-day team and client passwords instead. Many MSPs run both, with CyberQP handling privileged access and the password manager handling everything else. #### What is CyberQP's help desk verification feature for? It verifies that a caller asking the service desk for help is actually who they claim to be, before a technician resets a password or grants access. This addresses a specific social-engineering weakness where an attacker impersonates an employee over the phone, which several MSPs have been asked about directly by cyber insurers after industry incidents. #### Does CyberQP require a specific RMM platform? CyberQP integrates with major RMM platforms to automate local admin credential rotation across managed endpoints, but it is not limited to a single vendor's RMM. An MSP should confirm that its specific RMM platform is supported before buying, since integration depth can vary between platforms. #### Is CyberQP sold as a fixed monthly price? No, pricing is per technician or per managed endpoint per month, quoted directly by a CyberQP account manager rather than published as a fixed list price. The exact figure depends on an MSP's technician count and the number of endpoints being protected, so a current quote is needed before proposing it to a client. ## Datto BCDR > Backup appliance with image-based server backup and instant local or cloud virtualisation. Datto BCDR is an image-based backup appliance for physical and virtual servers that can boot a failed server as a virtual machine locally or in Datto's cloud within minutes, aimed at clients that cannot tolerate long recovery times. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/datto-bcdr - Vendor: Datto, https://mspsoftware.net/vendors/datto, website https://www.datto.com/products/bcdr/ - Categories: Backup and disaster recovery (primary) - Deployment: on-premises and cloud. Platforms: Windows, Linux and web. HQ: United States. Founded: 2007. ### From the vendor Datto BCDR, short for business continuity and disaster recovery, backs up physical and virtual servers image by image, either to a local hardware or virtual appliance or straight to Datto's cloud, and can boot a failed server as a virtual machine locally or in the cloud within minutes. It suits MSPs whose clients cannot tolerate long recovery times for a critical file server, application server or domain controller, since the point of the product is fast, tested failover rather than simply an off-site copy of the data. It supports both Windows and Linux server backup, with agentless options available for some hypervisors. Pricing is per appliance plus a per-terabyte cloud storage fee, quoted by a Kaseya account manager rather than published, usually on a multi-year hardware and subscription agreement rather than a simple monthly rate. It integrates with Autotask and Datto RMM so backup status and alerts appear alongside a client's other tickets and assets rather than in a separate console to check daily. Datto, now part of Kaseya, was founded in 2007 and is based in the United States, and the BCDR line remains one of its longest-running and best-known products, sold both as a physical hardware appliance and as a cloud-only alternative depending on how much local, on-site recovery a client needs. Because the pricing combines a hardware cost with an ongoing storage fee, MSPs should get the full multi-year cost in writing, including what happens to storage pricing as a client's data volume grows, and confirm which of a client's servers and hypervisors are actually supported before assuming full coverage. ### Our take Datto BCDR is built around fast, tested failover for critical servers rather than being a general-purpose backup product, so it suits a client that genuinely cannot afford hours of downtime on a file, application or domain server. A client with lighter recovery time requirements may be paying for more product than they need. Because pricing combines hardware and a multi-year agreement with per-terabyte storage costs, get the full contract cost in writing before comparing it against a purely cloud-based backup option. Confirm the client's specific servers and hypervisors are supported before assuming full coverage. ### Pricing Datto BCDR does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Image-based backup | yes | | | Local backup appliance | yes | | | Cloud storage included | yes | | | Instant local or cloud virtualisation | yes | | | Offsite replication | yes | | | VMware and Hyper-V support | yes | | | RMM integration | yes | | ### Integrations - Autotask, https://mspsoftware.net/software/autotask - Datto RMM, https://mspsoftware.net/software/datto-rmm Listed products that integrate with Datto BCDR: Autotask and Datto RMM. ### Alternatives - Cove Data Protection: N-able's cloud-first backup for servers, workstations and Microsoft 365. https://mspsoftware.net/software/cove-data-protection - Dropsuite: SaaS backup for Microsoft 365 and Google Workspace, sold through MSP partners. https://mspsoftware.net/software/dropsuite - Veeam: Backup and recovery for servers and virtual machines, run by the MSP or through a partner. https://mspsoftware.net/software/veeam ### FAQ #### What does Datto BCDR integrate with? Datto BCDR integrates with Autotask, Datto RMM. #### Is Datto BCDR cloud or on-premises? Datto BCDR is available as on-premises and cloud. #### How is Datto BCDR priced? Datto BCDR is priced per appliance plus a per-terabyte cloud storage fee, quoted by a Kaseya account manager rather than published, usually under a multi-year hardware and subscription agreement. Because the cost combines upfront hardware with an ongoing storage fee that grows with a client's data volume, MSPs should get the full multi-year cost in writing, including how storage pricing scales, before comparing it against a purely cloud-based backup product. #### How fast can Datto BCDR recover a failed server? Datto BCDR can boot a failed server as a virtual machine, either locally on the appliance or in Datto's cloud, within minutes rather than requiring a full restore before the server is usable again. This instant virtualisation is the core reason clients with low tolerance for downtime on a critical file, application or domain server choose Datto BCDR over a simpler backup product that only stores an off-site copy. #### Does Datto BCDR require a local hardware appliance, or can it back up straight to the cloud? Datto BCDR supports both: backups can go to a local hardware or virtual appliance, or straight to Datto's cloud without local hardware. A local appliance allows faster on-site recovery for the most time-sensitive failures, while a cloud-only setup avoids hardware costs and maintenance. MSPs should discuss which model fits a specific client's recovery time expectations and budget with their Kaseya account manager. #### Does Datto BCDR support Linux servers as well as Windows? Yes, Datto BCDR supports both Windows and Linux server backup, with agentless options available for some hypervisors rather than requiring an agent on every virtual machine. MSPs with mixed Windows and Linux environments should confirm exactly which operating system versions and hypervisors are supported for agentless backup before assuming full coverage across a client's entire server estate. ## Datto RMM > Kaseya's cloud RMM, built to pair with Autotask PSA and Datto BCDR. Datto RMM is Kaseya's cloud-based remote monitoring and management platform for Windows and Mac endpoints, built to work natively with Autotask PSA and Datto BCDR while also running standalone against other PSA tools. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/datto-rmm - Vendor: Datto, https://mspsoftware.net/vendors/datto, website https://www.datto.com/products/rmm/ - Categories: RMM and patching (primary), Remote access and support - Deployment: cloud. Platforms: Windows, macOS and web. HQ: United States. Founded: 2007. ### From the vendor Datto RMM is a cloud-based remote monitoring and management platform, part of Kaseya's Datto product line, aimed at MSPs managing Windows and Mac endpoints across many clients from one console. It handles patch management, monitoring policies, scripting through a component library, and software deployment, and it includes ransomware detection and ScreenConnect-based remote access as standard rather than as separate purchases. It suits MSPs that already use, or are considering, Autotask PSA and Datto BCDR, since the three products share client, ticket and asset data with each other, though Datto RMM also runs standalone against other PSAs without that hand-off. Pricing is per managed endpoint per month, quoted directly by a Kaseya account manager rather than published, and it is usually sold on an annual contract. Datto RMM integrates natively with Autotask and IT Glue, so device data and tickets flow between the three products without a separate connector to configure, and with Datto BCDR so backup jobs and alerts sit alongside a client's other RMM data. It also connects to third-party PSA, documentation and security tools through webhooks and a REST API for MSPs not standardised on the full Kaseya stack. Datto RMM traces back to Datto, founded in 2007 and now part of Kaseya, and it runs on Windows and Mac endpoints with a web console for the technician side, so there is no native Linux agent to plan around. Anyone comparing it against a standalone RMM should get a written quote for their device count and confirm the length of the annual contract before signing, since Kaseya's sales process is quote-only. ### Our take Datto RMM makes most sense for an MSP that is already running, or seriously considering, Autotask PSA and Datto BCDR, since the native hand-off between the three is the main reason to pick it over a lighter standalone RMM. It still works against other PSAs through its API, so it is not a hard requirement. Because pricing is quote-only and contracts are usually annual, get the full first-year cost in writing, including any bundling discount with Autotask or BCDR, before comparing it against NinjaOne or ConnectWise RMM. Confirm your ransomware detection and remote access needs are covered by what ships as standard rather than a paid add-on. ### Pricing Datto RMM does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Patch management | yes | | | Scripting | yes | | | Remote access | yes | | | Monitoring and alerting | yes | | | Software deployment | yes | | | Backup integration | yes | | | PSA integration | yes | | | Reporting | yes | | | Automation policies | yes | | | Third-party application patching | yes | | ### Integrations - Autotask, https://mspsoftware.net/software/autotask - IT Glue, https://mspsoftware.net/software/it-glue - Datto BCDR, https://mspsoftware.net/software/datto-bcdr Listed products that integrate with Datto RMM: Autotask, Datto BCDR, HaloPSA, Hudu and IT Glue. ### Alternatives - N-able N-central: On-premises or cloud RMM built for larger, more complex managed estates. https://mspsoftware.net/software/n-central - NinjaOne: Cloud RMM for patching, scripting and remote control from one lightweight agent. https://mspsoftware.net/software/ninjaone - ConnectWise RMM: Cloud RMM from ConnectWise, built to pair with its own PSA. https://mspsoftware.net/software/connectwise-rmm - ScreenConnect: ConnectWise's remote support and unattended access tool. https://mspsoftware.net/software/screenconnect. Compare: https://mspsoftware.net/compare/datto-rmm-vs-screenconnect ### FAQ #### What does Datto RMM integrate with? Datto RMM integrates with Autotask, IT Glue, Datto BCDR. #### Is Datto RMM cloud or on-premises? Datto RMM is available as cloud. #### Does Datto RMM require Autotask PSA to work? No. Datto RMM runs standalone and integrates with third-party PSA platforms through webhooks and a REST API, so an MSP does not have to run Autotask to use it. The native, pre-built integration with Autotask and Datto BCDR is the main reason MSPs already on those products choose Datto RMM, since ticket and asset data pass between all three without a separate connector, but it is not a requirement to get started. #### Is Datto RMM sold on a monthly or annual contract? Datto RMM is typically sold on an annual contract, quoted directly by a Kaseya account manager rather than published on the website. Pricing is per managed endpoint per month, billed under that annual agreement, and often discounted when bundled with Autotask PSA or Datto BCDR. MSPs should ask for the full first-year cost and contract length in writing before comparing it with a month-to-month RMM. #### What remote access tool does Datto RMM use? Datto RMM includes ScreenConnect-based remote access built in, rather than requiring a separate remote support product. ScreenConnect is also sold as its own standalone tool by ConnectWise, so MSPs already familiar with it from another product will recognise the interface. This is bundled into the Datto RMM agent rather than priced or licensed separately. #### Does Datto RMM include ransomware detection? Yes, built-in ransomware detection is part of the core Datto RMM agent rather than a separate add-on. It runs alongside the standard patch management, scripting and monitoring features. MSPs should still confirm with their account manager exactly what the detection covers and how it fits alongside any dedicated EDR product they run, since it is not a replacement for a full endpoint detection and response platform. ## DNSFilter > DNS-layer web filtering and threat blocking, deployable in minutes per site. DNSFilter is a cloud-based DNS filtering service that blocks malicious and unwanted websites before a connection is made, using machine-learning categorisation, with policy applied both on and off the client network. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/dnsfilter - Vendor: DNSFilter, https://mspsoftware.net/vendors/dnsfilter, website https://www.dnsfilter.com - Categories: DNS and web filtering (primary), Network monitoring - Free trial: yes. Free version: no. - Deployment: cloud. Platforms: Windows, macOS, iOS, Android and web. HQ: United States. Founded: 2015. ### From the vendor DNSFilter blocks malicious and unwanted destinations at the DNS layer before a connection is even made, using its own machine-learning content categorisation rather than a static block list, and applies policy both on and off the client network through lightweight roaming agents installed on laptops. It suits MSPs of most sizes who want a quick-to-deploy layer of protection against phishing and malware domains without touching every endpoint individually, since a site can typically be pointed at DNSFilter through a router or DNS setting change in minutes rather than a full agent rollout. It fits well alongside an existing RMM and PSA stack rather than requiring a particular one, and works for both single-site clients and organisations with many locations that need consistent policy applied everywhere. Pricing is published in tiers on DNSFilter's own site rather than quote-only, starting from around $1 per user per year on its lowest published tier, which lets an MSP model margin before a sales conversation instead of waiting on a quote. A free trial is available; there is no free version. DNSFilter integrates with major RMM and PSA platforms for deployment and billing automation, and its multi-tenant dashboard lets a technician review policy and threat activity across every client site from one screen rather than logging into each site separately. MSPs comparing DNSFilter against Cisco Umbrella, or against a DNS filtering module bundled into a broader security suite such as Todyl, should check which published tier actually includes roaming client support and the reporting depth they need, since the entry-level tier is priced lower than what most MSPs will actually deploy. ### Our take DNSFilter suits MSPs who want a fast-to-deploy DNS filtering layer with published, low-cost pricing rather than a quote-only sales process, particularly for smaller clients where a full secure web gateway would be overkill. Check which published tier actually includes roaming protection for laptops that leave the office network, since the cheapest tier may not. It is worth comparing against a DNS filtering module already bundled into a broader security stack a client has, to avoid paying for overlapping coverage. ### Pricing DNSFilter starts at US$1.00 per user per year, according to the vendor (pricing page: https://www.dnsfilter.com/pricing). ### Features | Feature | Supported | Note | | --- | --- | --- | | DNS-layer blocking | yes | | | Content category filtering | yes | | | Roaming agent for off-network devices | yes | | | Multi-tenant dashboard | yes | | | Per-site policy | yes | | | RMM integration | yes | | | Threat intelligence feed | yes | | | Network-wide router deployment | yes | | ### Alternatives - Todyl: A single SASE-style agent bundling network security, EDR and identity. https://mspsoftware.net/software/todyl. Compare: https://mspsoftware.net/compare/dnsfilter-vs-todyl - Cisco Umbrella: Cisco's DNS and secure web gateway, built for larger, multi-site clients. https://mspsoftware.net/software/cisco-umbrella ### FAQ #### How much does DNSFilter cost? DNSFilter starts at US$1.00 per user per year, according to the vendor. #### Does DNSFilter offer a free trial? DNSFilter offers a free trial. There is no free version. #### Is DNSFilter cloud or on-premises? DNSFilter is available as cloud. #### Does DNSFilter protect laptops that leave the office network? Yes, when the roaming client is deployed on a device. DNSFilter applies the same DNS-layer filtering policy whether a laptop is on the client's office network or connecting from home, a coffee shop or a client site elsewhere, using a lightweight agent rather than relying on the router alone. MSPs should confirm which pricing tier includes roaming client support before quoting a client that has remote or hybrid staff. #### How is DNSFilter priced compared with a quote-only competitor like Cisco Umbrella? DNSFilter publishes its pricing in tiers directly on its website, so an MSP can see the cost per user before a sales conversation, unlike Cisco Umbrella, which is quoted through a partner or distributor. This makes DNSFilter easier to model into a client quote quickly, though MSPs should still check which tier includes the specific features, such as roaming protection, that a client needs. #### Does DNSFilter need an agent installed on every endpoint? Not for basic site-level filtering: a router or DNS setting change at the site is enough to apply DNSFilter's policy to everything on that network. A lightweight roaming agent is only needed on devices that need protection away from the site, such as laptops used at home or on the road. #### Can one technician manage DNSFilter across many client sites? Yes. DNSFilter's dashboard is built for multi-tenant use, so a technician can review filtering policy and threat activity across every client site from a single screen, rather than logging into a separate console per site. This is the normal way MSPs operate DNSFilter across a client base. ## Domotz > Lightweight network monitoring and remote access via an affordable probe. Domotz is a network monitoring product that tracks uptime, bandwidth and configuration changes at a client site through a small probe, and provides remote access to devices behind it without opening inbound firewall ports. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/domotz - Vendor: Domotz, https://mspsoftware.net/vendors/domotz, website https://www.domotz.com - Categories: Network monitoring (primary), Remote access and support - Free trial: yes. Free version: no. - Deployment: cloud. Platforms: web, iOS and Android. HQ: United States. Founded: 2015. ### From the vendor Domotz monitors network devices and connected equipment at a client site through a small software or hardware probe, tracking uptime, bandwidth and configuration changes, and includes remote access to devices behind the probe without opening inbound firewall ports. It suits smaller MSPs and those serving clients with modest device counts per site, where Domotz's lower per-site pricing compared with some network monitoring competitors makes it viable to sell even on smaller, price-sensitive contracts. It typically fits MSPs running one to fifteen technicians, though larger teams use it too, and it also serves customers outside traditional MSP IT, such as smart building and audiovisual monitoring, because the probe covers a wider range of connected equipment than just standard networking gear. Deployment is quick, since a single probe covers everything discoverable on that site's network rather than needing an agent on each device. Pricing is per site per month, published in tiers on Domotz's own site rather than quote-only, starting from around £35 per site per month on its published entry tier, which makes it easy to model margin before a sales conversation. A free trial is available; there is no free version. Domotz integrates with several PSA platforms for alert-to-ticket automation, so device issues can open a ticket automatically rather than needing manual monitoring. MSPs comparing Domotz against Auvik should weigh Domotz's lower per-site cost and broader device type support against Auvik's deeper automatic topology mapping and wider PSA and documentation integration list, since the better fit depends on client network complexity and which existing tools need to connect to it. ### Our take Domotz suits smaller MSPs and those with clients that have modest device counts per site, where its lower per-site published pricing makes network monitoring viable to sell even on smaller contracts. It also works outside traditional IT for smart building and AV monitoring, a slightly different buyer than most network monitoring tools attract. Compare it against Auvik if a client's network is large or complex enough to need deeper automatic topology mapping, since Domotz favours affordability and simplicity over that depth. ### Pricing Domotz starts at £35.00 per site per month, according to the vendor (pricing page: https://www.domotz.com/pricing.php). ### Features | Feature | Supported | Note | | --- | --- | --- | | Device configuration backup | yes | | | Uptime and outage alerting | yes | | | Bandwidth monitoring | yes | | | Configuration change detection | yes | | | Remote access to devices | yes | | | Hardware probe option | yes | | ### Alternatives - Auvik: Automatically maps and monitors switches, firewalls and access points across sites. https://mspsoftware.net/software/auvik. Compare: https://mspsoftware.net/compare/auvik-vs-domotz - DNSFilter: DNS-layer web filtering and threat blocking, deployable in minutes per site. https://mspsoftware.net/software/dnsfilter. Compare: https://mspsoftware.net/compare/dnsfilter-vs-domotz - N-able N-central: On-premises or cloud RMM built for larger, more complex managed estates. https://mspsoftware.net/software/n-central. Compare: https://mspsoftware.net/compare/domotz-vs-n-central - Lifecycle Insights: Hardware and software lifecycle reporting pulled from RMM and procurement data. https://mspsoftware.net/software/lifecycle-insights ### FAQ #### How much does Domotz cost? Domotz starts at £35.00 per site per month, according to the vendor. #### Does Domotz offer a free trial? Domotz offers a free trial. There is no free version. #### Is Domotz cloud or on-premises? Domotz is available as cloud. #### Who is Domotz for? MSPs report using Domotz at sizes of 1-5, 6-15 technicians. #### Does Domotz require a hardware appliance? No, not necessarily. Domotz can run as a software probe installed on an existing device at the site, or as a small dedicated hardware probe where an MSP prefers one, giving flexibility depending on what is already on site and how much dedicated monitoring hardware a client is willing to have installed. #### Can Domotz provide remote access without opening firewall ports? Yes. Domotz includes remote access to devices behind its probe without requiring inbound firewall ports to be opened on the client's network, which reduces the network configuration work needed at each site compared with some remote access setups that need port forwarding configured manually. #### Is Domotz only for IT networks? No. Domotz also monitors connected equipment used in smart building and audiovisual setups, not only standard networking gear such as switches and routers. This gives it a customer base that extends beyond traditional MSP IT into AV and building integration, which is a different market than most network monitoring competitors serve. #### How does Domotz pricing compare with Auvik's? Domotz is priced per site per month with published tiers starting from around £35, generally lower than Auvik's per-device pricing for a site with many network devices. Domotz suits smaller sites and price-sensitive contracts well, while Auvik's deeper automatic mapping can justify its cost on larger, more complex networks. ## Dropsuite > SaaS backup for Microsoft 365 and Google Workspace, sold through MSP partners. Dropsuite is a cloud backup service for Microsoft 365 and Google Workspace mailboxes, files, Teams and shared drives, sold to MSPs through distributor and partner channels rather than directly to end customers. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/dropsuite - Vendor: Dropsuite, https://mspsoftware.net/vendors/dropsuite, website https://www.dropsuite.com - Categories: Microsoft 365 and Google Workspace backup (primary), Backup and disaster recovery - Deployment: cloud. Platforms: web. HQ: Singapore. Founded: 2011. ### From the vendor Dropsuite is a cloud backup service for Microsoft 365 and Google Workspace, covering mailboxes, files, Teams and shared drives, sold almost entirely through MSP and distributor partners rather than direct to end customers. It suits MSPs who want a lightweight, quick-to-deploy SaaS backup add-on to sell alongside an existing Microsoft 365 or Google Workspace management practice, without needing a large onboarding project per client. Because it is a partner-first product, an MSP evaluating it should expect to buy through a distributor or Dropsuite's partner programme rather than signing up directly as an end customer would with some competitors. Pricing is per protected user per month, usually wholesale to the MSP, with the MSP setting its own retail price to clients rather than a single published customer-facing figure existing for comparison. Dropsuite integrates with several PSA and billing platforms for usage-based invoicing, so protected user counts can flow into an MSP's own billing rather than being tracked manually each month, and it offers white-label branding so the backup portal can be presented under the MSP's own name rather than Dropsuite's. Self-service restore is available for end users where the MSP chooses to enable it, rather than being restricted to technician-only restores. Before buying, confirm which PSA and billing integrations are actually available for the platforms already in use, and check current wholesale pricing tiers directly with a distributor or Dropsuite partner manager, since retail pricing is set by the MSP rather than published. Also check whether Dropsuite's white-label portal supports the specific branding an MSP wants, such as a custom domain or logo, since white-label options can vary in depth between backup vendors. ### Our take Dropsuite suits MSPs adding a straightforward Microsoft 365 or Google Workspace backup add-on without wanting a large per-client onboarding project. Because it sells through partners rather than direct, expect to go through a distributor or Dropsuite's own partner programme to get pricing rather than a self-serve signup. The white-label portal and usage-based billing integration are worth confirming against the specific PSA and billing tools an MSP already runs before assuming they connect out of the box. It is a lighter-weight option than backup products that also cover servers and endpoints, so MSPs needing those too will need a separate product alongside it. ### Pricing Dropsuite does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Microsoft 365 mail backup | yes | | | Microsoft Teams backup | yes | | | Google Workspace backup | yes | | | Self-service restore for end users | yes | | | White-label portal | yes | | | PSA integration for billing | yes | | ### Alternatives - Afi: AI-assisted SaaS backup for Microsoft 365 and Google Workspace. https://mspsoftware.net/software/afi - Cove Data Protection: N-able's cloud-first backup for servers, workstations and Microsoft 365. https://mspsoftware.net/software/cove-data-protection - Veeam: Backup and recovery for servers and virtual machines, run by the MSP or through a partner. https://mspsoftware.net/software/veeam ### FAQ #### Is Dropsuite cloud or on-premises? Dropsuite is available as cloud. #### Can an MSP buy Dropsuite directly, or only through a partner? Dropsuite is sold almost entirely through MSP and distributor partner channels rather than as a direct self-serve signup for end customers. An MSP wanting to resell it should expect to go through a distributor or Dropsuite's own partner programme to get wholesale pricing, rather than finding a published retail price to compare against on Dropsuite's own site. #### Does Dropsuite offer white-label branding for the backup portal? Yes. Dropsuite offers white-label branding so an MSP can present the backup and restore portal under its own name rather than Dropsuite's, which matters for MSPs who want clients interacting with a branded self-service tool. Self-service restore for end users is available but is something the MSP chooses to switch on rather than a default. #### Does Dropsuite integrate with PSA billing systems? Dropsuite integrates with several PSA and billing platforms for usage-based invoicing, so protected user counts can be pulled into an MSP's own billing rather than tracked by hand each month. Which specific PSA integrations are available can change, so confirm current support for the exact platform in use before assuming automatic billing is included. #### Does Dropsuite back up Microsoft Teams and SharePoint, not just email? Yes. Dropsuite's Microsoft 365 backup covers mailboxes, files, Teams and shared drives, not only email, and it separately covers Google Workspace mail, files and shared drives for clients on that platform. MSPs supporting both Microsoft 365 and Google Workspace clients can typically run both under one Dropsuite account rather than needing separate products. ## Duo > Cisco's multi-factor authentication and device trust for logins and VPNs. Duo is Cisco's multi-factor authentication and device trust product, adding a second login factor, typically a phone app push notification, to VPNs, on-premises applications and cloud services. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/duo - Vendor: Cisco, https://mspsoftware.net/vendors/cisco, website https://duo.com - Categories: Identity and access (primary), Remote access and support - Free version: yes. - Deployment: cloud. Platforms: Windows, macOS, iOS, Android and web. HQ: United States. Founded: 2010. ### From the vendor Duo, part of Cisco since its 2018 acquisition, provides multi-factor authentication and device trust checks for logins to applications, VPNs and remote access tools, most commonly using a push notification to a phone app as the second factor. It suits MSPs adding MFA on top of systems that do not already include it well, such as legacy VPNs, on-premises applications or shared logins, since Duo is built to sit in front of almost any authentication flow rather than only Microsoft or Google accounts. It works for clients of any size, from a handful of users needing MFA on a single VPN to larger organisations standardising MFA across many applications at once. Platform support spans Windows, macOS, iOS and Android, so device trust checks work consistently regardless of what a client's staff use day to day. Pricing is per user per month, published in tiers directly on Duo's site, starting from around $3 per user per month, with a free tier available for very small deployments, which makes it easy for an MSP to quote without a sales call. Duo integrates with a very wide range of VPNs, firewalls, on-premises applications and cloud services through SAML, RADIUS and dedicated connectors, and with the wider Cisco security portfolio, including Cisco Umbrella, for organisations building on Cisco's network and identity products. MSPs comparing Duo against MFA built into Microsoft Entra ID or Google Workspace should check whether the client's applications actually need Duo's broader protocol support, since Duo earns its cost mainly where an organisation has systems that do not already support modern authentication on their own. ### Our take Duo suits MSPs adding MFA to systems that do not already have it built in well, particularly legacy VPNs and on-premises applications, more than clients who are fully on Microsoft 365 or Google Workspace and could use those platforms' own MFA. Its published, tiered pricing with a genuine free tier for small deployments makes it easy to quote without waiting on a partner call. Check which of a client's applications actually need Duo's SAML, RADIUS or dedicated connector support before recommending it over a platform's built-in MFA. ### Pricing Duo starts at US$3.00 per user per month, according to the vendor (pricing page: https://duo.com/pricing). ### Features | Feature | Supported | Note | | --- | --- | --- | | Multi-factor authentication | yes | | | Conditional access and device trust | yes | | | Privileged access management | no | | | Legacy VPN and app support | yes | | | RADIUS and SAML support | yes | | ### Integrations Listed products that integrate with Duo: Cisco Umbrella. ### Alternatives - Bitwarden: Open-source password manager with a free tier and published, low-cost business pricing. https://mspsoftware.net/software/bitwarden - Keeper: Enterprise-grade password and secrets management with strong compliance features. https://mspsoftware.net/software/keeper. Compare: https://mspsoftware.net/compare/duo-vs-keeper - CyberQP: Privileged access management built for MSP technicians working across many clients. https://mspsoftware.net/software/cyberqp. Compare: https://mspsoftware.net/compare/cyberqp-vs-duo - Todyl: A single SASE-style agent bundling network security, EDR and identity. https://mspsoftware.net/software/todyl. Compare: https://mspsoftware.net/compare/duo-vs-todyl ### FAQ #### How much does Duo cost? Duo starts at US$3.00 per user per month, according to the vendor. #### Does Duo offer a free trial? There is a genuinely free version. #### Is Duo cloud or on-premises? Duo is available as cloud. #### Is there a free version of Duo? Yes. Duo publishes a free tier on its pricing page aimed at very small deployments, alongside paid tiers priced per user per month with more features such as device trust policies and broader application support. MSPs can quote a client directly from the published pricing page without needing a sales conversation for smaller deployments. #### Does Duo work with applications that are not Microsoft or Google? Yes, that is one of Duo's main strengths. It connects to a very wide range of VPNs, firewalls, on-premises applications and cloud services through SAML, RADIUS and dedicated connectors, rather than being limited to Microsoft or Google accounts. This makes it a common choice for adding MFA to legacy or on-premises systems that do not have modern authentication built in. #### Do I need other Cisco products to use Duo? No. Duo can be deployed as a standalone MFA product without any other Cisco hardware or software. It does integrate with the wider Cisco security portfolio, including Cisco Umbrella, for organisations that are already building on Cisco's network and identity products, but this is optional rather than required. #### How does Duo compare with Microsoft Entra ID's built-in MFA? Microsoft Entra ID includes its own MFA for Microsoft 365 and Azure AD-connected applications at no extra product cost in many licence tiers. Duo is typically added where a client also needs MFA on systems Entra ID does not cover well, such as legacy VPNs or on-premises applications, rather than as a replacement for Entra ID's own MFA on Microsoft services. ## Gradient > Reconciles vendor and distributor billing against what each client should be charged. Gradient, or Gradient MSP, is a billing reconciliation tool that pulls vendor and distributor data and compares it against what each client is actually being charged, flagging under-billed or unused licences. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/gradient - Vendor: Gradient MSP, https://mspsoftware.net/vendors/gradient, website https://www.gradientmsp.com - Categories: Billing and reconciliation (primary), vCIO and asset lifecycle, Quoting and CPQ - Deployment: cloud. Platforms: web. HQ: Canada. Founded: 2018. ### From the vendor Gradient, also known as Gradient MSP, pulls billing and licence data from an MSP's vendors and distributors and reconciles it against what each client is actually being charged, flagging seats or licences a client is paying for but not using, and gaps where usage has grown past what is billed. It suits MSPs running several vendor relationships and distributor accounts who currently reconcile billing by hand in spreadsheets each month, a process prone to under-billing as client environments change between invoices. Pricing is per managed seat or per integration per month, quoted through a Gradient account manager rather than published as a fixed list price. It integrates with major distributors including Pax8, Ingram Micro and Sherweb, with Microsoft's partner billing data, and with PSA platforms for exporting reconciled billing, and its reporting is also used by some MSPs to support license utilisation conversations in a quarterly business review. MSPs evaluating Gradient should confirm which of their specific vendor and distributor relationships are actually supported before assuming full coverage, since reconciliation is only as complete as the integrations that feed it, and should weigh the per-seat or per-integration cost against the staff time currently spent reconciling billing by hand before deciding whether the tool pays for itself. MSPs should also ask how quickly Gradient's reconciliation reflects a change made mid-month with a distributor, since billing tools that only refresh on a monthly cycle can miss a licence change that needs correcting before the next invoice goes out, and can leave a client under-billed for longer than necessary. ### Our take Gradient earns its cost by catching under-billing an MSP would otherwise only find by accident, which is a real, recurring problem once you run more than a couple of vendor relationships. Its value depends entirely on your actual distributors being supported, so confirm coverage before buying. It suits MSPs currently reconciling billing by hand in a spreadsheet each month rather than those with a single, simple vendor relationship. Weigh the subscription cost against the staff time it replaces before deciding. ### Pricing Gradient does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Usage and licence reconciliation | yes | | | Distributor billing import | yes | | | PSA integration | yes | | | Seat and licence utilisation alerts | yes | | | Microsoft partner billing import | yes | | | Payment collection | no | | ### Alternatives - Autotask: Kaseya's PSA for ticketing, contracts and billing, paired with Datto RMM. 5 out of 5 from 1 review. https://mspsoftware.net/software/autotask. Compare: https://mspsoftware.net/compare/autotask-vs-gradient - ConnectWise PSA: Ticketing, contracts and billing for a service desk, from ConnectWise. https://mspsoftware.net/software/connectwise-psa - Zomentum: Quoting, proposals and e-signature built for the MSP sales process. https://mspsoftware.net/software/zomentum ### FAQ #### Is Gradient cloud or on-premises? Gradient is available as cloud. #### Which distributors does Gradient reconcile billing against? Gradient integrates with major distributors including Pax8, Ingram Micro and Sherweb, along with Microsoft's own partner billing data, to reconcile what an MSP is billed against what each client should be charged. MSPs using a distributor not named here should confirm current coverage directly with Gradient before assuming full reconciliation across their vendor relationships. #### Is Gradient priced per seat or per integration? Gradient is priced per managed seat or per integration per month, quoted through a Gradient account manager rather than published as a fixed list price. Which basis applies depends on the specific agreement, so MSPs should confirm during that conversation which pricing model will actually apply to their vendor and distributor mix. #### Can Gradient's reports be used in a client-facing quarterly business review? Yes, some MSPs use Gradient's reporting to support license utilisation conversations in a quarterly business review, beyond its core billing reconciliation purpose. This can help make the case for right-sizing a client's licence counts using data the MSP already has rather than building a separate utilisation report by hand. #### Does Gradient replace manual billing reconciliation entirely? Gradient is designed to automate reconciliation that MSPs currently do by hand in spreadsheets, but its coverage is only as complete as the vendor and distributor integrations that feed it. MSPs should weigh the subscription cost against the staff time currently spent on manual reconciliation, and confirm their specific vendors are supported, before assuming it removes all manual checking. ## HaloPSA > Service desk, contracts and billing on a per-technician price with no per-user fees. HaloPSA is a professional services automation platform for ticketing, contracts, billing and project management, priced per technician with published, tiered pricing starting at 66 pounds per technician per month. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/halopsa - Vendor: HaloPSA, https://mspsoftware.net/vendors/halo, website https://halopsa.com - Categories: PSA and ticketing (primary), Documentation - Free trial: yes. Free version: no. - Deployment: cloud. Platforms: web. HQ: United Kingdom. ### From the vendor HaloPSA is a professional services automation platform covering ticketing, contracts, billing, project management and a configurable workflow engine, sold on a per-technician licence rather than per named user or per client. It suits MSPs who want to configure ticket workflows and forms themselves without a partner-led implementation, and those migrating off older PSAs who want published, comparatively simple pricing rather than a quote-only sales process. HaloPSA also offers a free trial, which makes it easier to evaluate hands-on before committing than a demo-only competitor. Pricing starts at 66 pounds per technician per month, published on HaloPSA's own site, with tiers based on feature depth rather than client or asset counts, and there is no genuinely free version once the trial ends. HaloPSA integrates with most major RMM platforms, including NinjaOne, Datto RMM and N-central, plus documentation tools such as IT Glue and Hudu, accounting systems including Xero and QuickBooks, and Microsoft 365, through a large library of pre-built integrations and an open API, without requiring a single-vendor stack. HaloPSA is based in the United Kingdom, which is worth knowing for a UK MSP weighing support hours, and its console runs entirely through the web with no desktop client to install, which matters for a distributed team working across several time zones. MSPs should check that the published per-technician price covers the specific feature tier they need, since HaloPSA's tiering is based on functionality rather than a single flat price, and confirm their existing RMM or documentation tool is on the current integration list. ### Our take HaloPSA stands out for publishing its pricing and offering a free trial, which suits an MSP that wants to evaluate a PSA hands-on before a sales call rather than sitting through a demo first. It suits shops that want to configure their own workflows rather than pay for a partner-led implementation. Because pricing is tiered by feature depth rather than a single number, check which tier includes what you actually need before comparing the headline per-technician price against ConnectWise PSA or Autotask. Confirm your existing RMM and documentation tools are on the current integration list. ### Pricing HaloPSA starts at £66.00 per technician per month, according to the vendor (pricing page: https://halopsa.com/pricing/). ### Features | Feature | Supported | Note | | --- | --- | --- | | Ticketing with SLA timers | yes | | | Contract and agreement management | yes | | | Billing and invoicing | yes | | | Project management | yes | | | Client self-service portal | yes | | | RMM integration | yes | | | Accounting integration | yes | | | Workflow and ticket automation | yes | | ### Integrations - NinjaOne, https://mspsoftware.net/software/ninjaone - Datto RMM, https://mspsoftware.net/software/datto-rmm - N-able N-central, https://mspsoftware.net/software/n-central - IT Glue, https://mspsoftware.net/software/it-glue - Hudu, https://mspsoftware.net/software/hudu - Xero, https://www.xero.com - QuickBooks, https://quickbooks.intuit.com Listed products that integrate with HaloPSA: Auvik and NinjaOne. ### Alternatives - ConnectWise PSA: Ticketing, contracts and billing for a service desk, from ConnectWise. https://mspsoftware.net/software/connectwise-psa. Compare: https://mspsoftware.net/compare/connectwise-psa-vs-halopsa - Autotask: Kaseya's PSA for ticketing, contracts and billing, paired with Datto RMM. 5 out of 5 from 1 review. https://mspsoftware.net/software/autotask. Compare: https://mspsoftware.net/compare/autotask-vs-halopsa - Syncro: Combined PSA and RMM priced per technician, with no per-endpoint fee. https://mspsoftware.net/software/syncro ### FAQ #### How much does HaloPSA cost? HaloPSA starts at £66.00 per technician per month, according to the vendor. #### Does HaloPSA offer a free trial? HaloPSA offers a free trial. There is no free version. #### What does HaloPSA integrate with? HaloPSA integrates with NinjaOne, Datto RMM, N-able N-central, IT Glue, Hudu, Xero. #### Is HaloPSA cloud or on-premises? HaloPSA is available as cloud. #### How is HaloPSA priced compared with per-user PSAs? HaloPSA is sold on a per-technician licence rather than per named user or per client, with published pricing starting at 66 pounds per technician per month. This differs from PSAs such as ConnectWise PSA or Autotask, which are typically quoted per user rather than published outright. The tiering is based on feature depth, so MSPs should confirm which tier includes the specific functionality they need before comparing the headline price. #### Can I trial HaloPSA before buying? Yes, HaloPSA offers a free trial, which lets an MSP evaluate the platform hands-on rather than relying only on a sales demo. There is no separate free version once the trial period ends, so ongoing use requires a paid, per-technician subscription at one of HaloPSA's published tiers. #### Does HaloPSA work with RMMs other than NinjaOne? Yes, HaloPSA integrates with most major RMM platforms, including NinjaOne, Datto RMM and N-central, rather than being built around a single RMM vendor. It also connects to documentation tools such as IT Glue and Hudu, accounting systems including Xero and QuickBooks, and Microsoft 365. MSPs should confirm their specific RMM is on HaloPSA's current integration list before switching, since coverage can change. #### Does HaloPSA require a partner-led implementation like ConnectWise PSA? No, HaloPSA is designed for MSPs to configure ticket workflows and forms themselves, without requiring a partner-led implementation as is common with some larger, more configurable PSAs. This suits MSPs migrating off an older PSA who want to get started on published pricing without a lengthy sales and setup process, though larger or more complex operations may still choose professional setup help. ## Hudu > Self-hosted or cloud documentation for passwords, configurations and procedures. Hudu is a documentation platform for client passwords, configurations, procedures and network diagrams, available as a cloud subscription or self-hosted on the MSP's own infrastructure at the same published price. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/hudu - Vendor: Hudu, https://mspsoftware.net/vendors/hudu, website https://www.usehudu.com - Categories: Documentation (primary), Password management - Free trial: yes. Free version: no. - Deployment: cloud and on-premises. Platforms: web. HQ: United States. ### From the vendor Hudu is a documentation platform for storing client configurations, passwords, procedures and network diagrams, available as a cloud subscription or self-hosted on the MSP's own infrastructure. It suits MSPs who want a modern interface and flexible custom asset layouts, such as custom fields for firewalls, servers and Wi-Fi networks, without being locked into a single hosting model, and those who value owning their documentation data outright with the self-hosted option rather than depending entirely on a vendor's cloud. Hudu also offers a free trial to test the interface and asset layouts before committing. Pricing starts at 27 dollars per technician per month, published on Hudu's site, with the same price whether the account is hosted by Hudu or self-hosted, so choosing self-hosting is a technical decision rather than a cost-saving one. There is no separate free version once the trial ends. It integrates with RMM platforms including NinjaOne and Datto RMM to pull device data automatically into asset records, with PSA tools for cross-linking tickets to documentation, and with password managers alongside its own built-in password storage. Hudu is based in the United States, and its cloud and self-hosted options are both accessed through a web console, so day-to-day use looks the same either way once it is set up, and switching from one hosting model to the other later does not mean relearning the interface. MSPs choosing between the cloud and self-hosted options should weigh Hudu's identical pricing against the ongoing maintenance work of running the self-hosted version themselves, and confirm their RMM's Hudu integration still covers automatic device import before relying on it. ### Our take Hudu suits an MSP that wants a modern documentation tool with flexible custom asset layouts, and the self-hosted option is a genuine differentiator for shops that want to own their documentation data outright. Since self-hosting costs the same as the cloud plan, only choose it if you actually want the operational control, not to save money. Use the free trial to build out a real client's asset layout before committing, since the value here is in how well the custom fields fit your documentation style. Confirm your RMM's integration still pulls device data automatically before switching from another documentation tool. ### Pricing Hudu starts at US$27.00 per technician per month, according to the vendor (pricing page: https://www.usehudu.com/pricing). ### Features | Feature | Supported | Note | | --- | --- | --- | | Password storage | yes | | | Network diagrams | yes | | | Custom asset templates | yes | | | RMM integration | yes | | | PSA integration | yes | | | API access | yes | | | Self-hosted option | yes | | ### Integrations - NinjaOne, https://mspsoftware.net/software/ninjaone - Datto RMM, https://mspsoftware.net/software/datto-rmm Listed products that integrate with Hudu: Auvik and HaloPSA. ### Alternatives - IT Glue: Kaseya's documentation platform for passwords, configurations and procedures. https://mspsoftware.net/software/it-glue. Compare: https://mspsoftware.net/compare/hudu-vs-it-glue - HaloPSA: Service desk, contracts and billing on a per-technician price with no per-user fees. https://mspsoftware.net/software/halopsa. Compare: https://mspsoftware.net/compare/halopsa-vs-hudu - Auvik: Automatically maps and monitors switches, firewalls and access points across sites. https://mspsoftware.net/software/auvik. Compare: https://mspsoftware.net/compare/auvik-vs-hudu ### FAQ #### How much does Hudu cost? Hudu starts at US$27.00 per technician per month, according to the vendor. #### Does Hudu offer a free trial? Hudu offers a free trial. There is no free version. #### What does Hudu integrate with? Hudu integrates with NinjaOne, Datto RMM. #### Is Hudu cloud or on-premises? Hudu is available as cloud and on-premises. #### Is self-hosted Hudu cheaper than the cloud version? No, Hudu charges the same published price, starting at 27 dollars per technician per month, whether the account is hosted by Hudu or self-hosted on the MSP's own infrastructure. Choosing self-hosting is therefore a decision about data control and server maintenance rather than cost, since an MSP running the self-hosted version takes on the work of maintaining that server for no lower subscription price. #### Does Hudu automatically pull device data from an RMM? Yes, Hudu integrates with RMM platforms including NinjaOne and Datto RMM to pull device data automatically into asset records, rather than requiring manual entry for every device. It also integrates with PSA tools for cross-linking tickets to documentation. MSPs should confirm their specific RMM's integration still covers automatic import of the device fields they rely on before switching documentation tools. #### Does Hudu have its own password manager, or does it need a separate one? Hudu includes built-in password storage as part of the documentation platform, so a small MSP could use it without a separate dedicated password manager. It also integrates with standalone password managers for MSPs that prefer to keep passwords in a dedicated tool rather than alongside general documentation. Which approach fits depends on how much separation an MSP wants between documentation and credential storage. #### Can I trial Hudu before subscribing? Yes, Hudu offers a free trial so an MSP can build out custom asset layouts and test the interface with real client data before committing. There is no ongoing free version once the trial period ends. MSPs should use the trial to confirm their RMM integration and custom field structure work the way they expect before migrating documentation from another tool. ## Huntress > Managed EDR with a human-staffed SOC built specifically for MSPs. Huntress is a managed detection and response service for the MSP channel that pairs its own endpoint agent with a 24 hour, human-staffed security operations centre that investigates and explains threats. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/huntress - Vendor: Huntress, https://mspsoftware.net/vendors/huntress, website https://www.huntress.com - Categories: MDR and SOC (primary), EDR and XDR - Deployment: cloud. Platforms: Windows, macOS and web. HQ: United States. Founded: 2015. - Support: 24/7. ### From the vendor Huntress is a managed detection and response service built specifically for the MSP channel, pairing its own lightweight EDR agent with a 24 hour, human-staffed security operations centre that investigates and explains threats in plain language rather than handing a technician a raw alert feed to interpret. It suits MSPs who want a security offering they can resell without hiring their own analysts, since Huntress positions itself as a partner working alongside an MSP's existing service desk rather than a replacement for it or a tool that requires an MSP to build its own SOC. Huntress also offers identity threat detection and a managed security awareness training product alongside its core managed EDR. Pricing is per endpoint per month, quoted to MSP partners at wholesale rates with the MSP setting its own retail price to clients, rather than a single public list price to compare against competitors directly. Huntress integrates with most major PSA and RMM platforms, so detections open tickets automatically in a service desk's existing queue rather than requiring a technician to check a separate console. Its own console is also built around multi-tenant management, so one technician can review every client's alerts from a single screen. Before buying, confirm which specific PSA and RMM integrations are set up and working for the platforms already in use, and ask what a Huntress-detected threat looks like end to end, from detection through to the ticket a technician actually receives, since the workflow between detection and resolution is central to what the product is selling. ### Our take Huntress suits MSPs who want a resellable managed detection service without hiring or training their own security analysts. It is built to sit alongside an existing service desk rather than replace it, so confirm how a Huntress detection actually turns into a ticket in the PSA already in use. Because pricing is wholesale and quoted rather than published, get a specific per-endpoint rate before setting a retail price for clients. It suits MSPs of most sizes, since the resale model does not require a large in-house security team to operate. ### Pricing Huntress does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | 24-hour human-staffed SOC | yes | | | Managed threat response and isolation | yes | | | Own endpoint telemetry agent | yes | | | Identity threat detection | yes | | | PSA integration for ticketing | yes | | | Multi-tenant console | yes | | ### Alternatives - Todyl: A single SASE-style agent bundling network security, EDR and identity. https://mspsoftware.net/software/todyl - Blackpoint Cyber: MDR built around a proprietary SOC platform and a 24-hour analyst team. https://mspsoftware.net/software/blackpoint-cyber - ConnectSecure: Vulnerability scanning and compliance evidence built for MSPs to run across clients. https://mspsoftware.net/software/connectsecure - SentinelOne: AI-driven EDR and XDR with autonomous, one-click threat rollback. https://mspsoftware.net/software/sentinelone ### FAQ #### Is Huntress cloud or on-premises? Huntress is available as cloud. #### Does an MSP need its own security analysts to sell Huntress? No. Huntress pairs its endpoint agent with its own 24 hour, human-staffed security operations centre, so an MSP does not need to hire or train its own analysts to offer managed detection and response. Huntress positions itself as a partner working alongside an MSP's existing service desk, investigating and explaining threats rather than leaving raw alerts for a technician to interpret. #### Does Huntress open tickets automatically in a PSA? Yes, Huntress integrates with most major PSA and RMM platforms so detections open tickets automatically in a service desk's existing queue rather than requiring a technician to check a separate console. Confirm current integration support for the specific PSA and RMM already in use, since coverage and depth can vary between platforms. #### Does Huntress cover anything beyond endpoint detection and response? Yes. Alongside its core managed EDR, Huntress also offers identity threat detection and a managed security awareness training product, which some MSPs buy separately or alongside the core service. Each is priced and quoted separately, so confirm which modules are actually included in a given quote rather than assuming they are bundled by default. #### How is Huntress priced for MSP partners? Huntress is priced per endpoint per month, quoted to MSP partners at wholesale rates, with the MSP setting its own retail price for clients rather than a single published list price existing for comparison. An MSP should get a current wholesale rate directly from Huntress before quoting a client, since it is not published on the public site. ## IT Glue > Kaseya's documentation platform for passwords, configurations and procedures. IT Glue is Kaseya's documentation platform for client passwords, configurations, network diagrams and standard operating procedures, built with audit-friendly access controls and version history and native integration with Datto RMM and Autotask. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/it-glue - Vendor: IT Glue, https://mspsoftware.net/vendors/it-glue, website https://www.itglue.com - Categories: Documentation (primary), Password management - Deployment: cloud. Platforms: web. HQ: Canada. Founded: 2013. ### From the vendor IT Glue is a documentation platform for client passwords, configurations, network diagrams and standard operating procedures, and one of the longer-established products in the category. It suits MSPs of most sizes who want tight integration with the rest of the Kaseya and Datto product line, and organisations that need audit-friendly access controls and version history on every documented item rather than a simpler, less structured wiki-style tool. It is part of the same Kaseya family as Datto RMM and Autotask, and MSPs already using either often evaluate IT Glue as the natural documentation partner. Pricing is per user per month, quoted through a Kaseya account manager rather than published, typically on an annual contract and often bundled with Datto RMM or Autotask. It integrates natively with Datto RMM and Autotask so device and ticket data populate documentation automatically, and connects to a wide range of third-party RMM, PSA and network scanning tools, including Auvik and N-central, through IT Glue's own integrations library and API, alongside a Chrome extension for quick lookup while working in other systems. IT Glue was founded in 2013 and is based in Canada, unlike most of the other Kaseya-owned products in this list, though it has been fully folded into Kaseya's sales and account management structure since the acquisition, so a UK or European MSP dealing with IT Glue day to day will still mostly be dealing with Kaseya's own regional teams. MSPs comparing it against Hudu, a newer competitor with published pricing, should get IT Glue's full annual cost in writing, including any Kaseya-stack bundling discount, before deciding between the two. ### Our take IT Glue is the natural documentation choice for an MSP already committed to Datto RMM or Autotask, given the native integration between them, and its access controls and version history suit shops that need an audit trail on documentation changes. It is a harder sell purely on its own merits against Hudu, which publishes pricing and offers a comparable feature set. Because IT Glue's pricing is quote-only and usually annual, get the full first-year cost in writing, including any Kaseya-stack bundling discount, before comparing it against a published-price alternative. Confirm your RMM's integration still auto-populates the specific asset fields you rely on. ### Pricing IT Glue does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Password storage | yes | | | Network diagrams | yes | | | Version history | yes | | | Access controls and permissions | yes | | | RMM integration | yes | | | PSA integration | yes | | | SOP and process templates | yes | | | API access | yes | | | Self-hosted option | no | | ### Integrations - Datto RMM, https://mspsoftware.net/software/datto-rmm - Autotask, https://mspsoftware.net/software/autotask - Auvik, https://mspsoftware.net/software/auvik - N-able N-central, https://mspsoftware.net/software/n-central Listed products that integrate with IT Glue: Autotask, Auvik, Datto RMM, HaloPSA and Syncro. ### Alternatives - Hudu: Self-hosted or cloud documentation for passwords, configurations and procedures. https://mspsoftware.net/software/hudu. Compare: https://mspsoftware.net/compare/hudu-vs-it-glue - HaloPSA: Service desk, contracts and billing on a per-technician price with no per-user fees. https://mspsoftware.net/software/halopsa. Compare: https://mspsoftware.net/compare/halopsa-vs-it-glue - Auvik: Automatically maps and monitors switches, firewalls and access points across sites. https://mspsoftware.net/software/auvik ### FAQ #### What does IT Glue integrate with? IT Glue integrates with Datto RMM, Autotask, Auvik, N-able N-central. #### Is IT Glue cloud or on-premises? IT Glue is available as cloud. #### Does IT Glue require Datto RMM or Autotask to use? No, IT Glue connects to a wide range of third-party RMM, PSA and network scanning tools, including Auvik and N-central, through its own integrations library and API, so it does not require Datto RMM or Autotask. The native integration with those two Kaseya products, which auto-populates device and ticket data into documentation, is the main reason MSPs already using them choose IT Glue, but it is not a requirement. #### How does IT Glue's access control and version history work? IT Glue is built with audit-friendly access controls and version history on every documented item, so an MSP can see who changed a password or configuration record and when. This suits organisations that need to demonstrate documentation governance, for example to a compliance auditor or a larger client, more than a simpler wiki-style documentation tool would. MSPs should confirm exactly which access control features are included at their pricing tier. #### Is IT Glue's pricing published, or is it a quote? IT Glue's pricing is quoted through a Kaseya account manager rather than published on its website, and it is billed per user per month, typically on an annual contract. It is often discounted when bundled with Datto RMM or Autotask. MSPs should get the full annual cost in writing, including any bundling discount, since there is no public list price to reference beforehand. #### Does IT Glue have a Chrome extension? Yes, IT Glue offers a Chrome extension for quick lookup of documentation while working in other systems, such as an RMM console or a client's own admin portal, without switching browser tabs to the main IT Glue interface. This is aimed at technicians who need fast access to a password or configuration note mid-ticket rather than a full documentation editing workflow. ## Keeper > Enterprise-grade password and secrets management with strong compliance features. Keeper is a password and secrets manager with a shared team vault, role-based access controls and audit-ready compliance reporting, sold to businesses directly and to MSPs through a separate partner programme. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/keeper - Vendor: Keeper Security, https://mspsoftware.net/vendors/keeper, website https://www.keepersecurity.com - Categories: Password management (primary), Identity and access - Free trial: yes. Free version: no. - Deployment: cloud. Platforms: Windows, macOS, Linux, iOS, Android and web. HQ: United States. Founded: 2009. ### From the vendor Keeper is a password and secrets manager with a shared team vault, admin console and detailed access controls, plus a separate secrets management product for storing API keys and infrastructure credentials, aimed at businesses that need audit-ready compliance reporting alongside day-to-day password sharing. It offers a free trial, though the product data on file shows no permanently free tier. Keeper suits MSPs serving clients in regulated industries who need role-based access, event logging and breach monitoring as standard, rather than a lighter consumer-style vault. Pricing is per user per year, published in business tiers on Keeper's site, with a separate MSP partner programme offering wholesale rates and a multi-tenant admin console. It integrates with major identity providers for single sign-on, supports FIDO2 hardware keys and biometric unlock, and its MSP console lets a technician manage vaults and enforce password policy across every client from one login rather than per-tenant administration. MSPs should confirm whether they are buying through Keeper's standard published business tiers or the separate MSP partner programme, since the wholesale rate and included multi-tenant features differ from the direct business pricing, and should check which compliance reporting features are included at their chosen tier before promising specific audit deliverables to a client. It is also worth confirming how Keeper's breach monitoring alerts flow into an MSP's own ticketing process, since a security feature that only surfaces inside Keeper's own console is less useful to a busy service desk than one that opens a ticket automatically, and worth asking whether onboarding a large client vault takes noticeably longer than a smaller team's. ### Our take Keeper is worth the extra cost over a lighter password manager mainly when a client's compliance requirements demand audit-ready reporting and breach monitoring as standard. Its MSP partner programme, with wholesale pricing and multi-tenant management, is the route most MSPs should actually buy through rather than standard business tiers. Confirm which compliance reporting features are included at your tier before committing to specific audit deliverables for a client. It suits MSPs already comfortable managing role-based access controls rather than a simple shared vault. ### Pricing Keeper does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Shared team vaults | yes | | | Role-based access control | yes | | | Breach monitoring | yes | | | SSO integration | yes | | | FIDO2 and hardware key support | yes | | | Secrets management | yes | | | Event logging and audit trail | yes | | | Multi-tenant MSP console | yes | | ### Alternatives - Hudu: Self-hosted or cloud documentation for passwords, configurations and procedures. https://mspsoftware.net/software/hudu. Compare: https://mspsoftware.net/compare/hudu-vs-keeper - Bitwarden: Open-source password manager with a free tier and published, low-cost business pricing. https://mspsoftware.net/software/bitwarden - IT Glue: Kaseya's documentation platform for passwords, configurations and procedures. https://mspsoftware.net/software/it-glue - CyberQP: Privileged access management built for MSP technicians working across many clients. https://mspsoftware.net/software/cyberqp ### FAQ #### Does Keeper offer a free trial? Keeper offers a free trial. There is no free version. #### Is Keeper cloud or on-premises? Keeper is available as cloud. #### What is the difference between Keeper's business pricing and its MSP partner programme? Keeper's standard business pricing is published in tiers on its own site, while its separate MSP partner programme offers wholesale rates and a multi-tenant admin console built for managing several client vaults from one login. MSPs should confirm which route they are actually buying through, since pricing and included multi-tenant features differ between the two. #### Does Keeper support single sign-on? Yes, Keeper integrates with major identity providers for single sign-on, alongside support for FIDO2 hardware keys and biometric unlock. This lets a business tie vault access to its existing identity provider rather than managing separate Keeper credentials for every user. #### What compliance reporting does Keeper offer? Keeper is built with audit-ready compliance reporting and breach monitoring as part of its business and MSP offering, which is one of its main differentiators from a lighter password manager. The exact reporting features available depend on the pricing tier, so MSPs should confirm what is included before promising specific audit deliverables to a client in a regulated industry. #### Does Keeper offer secrets management alongside password storage? Yes, Keeper offers a separate secrets management product for storing API keys and infrastructure credentials, distinct from its core team password vault. MSPs needing both password sharing and infrastructure secrets management should confirm whether this is priced as an add-on to the base plan or requires a separate subscription. ## KnowBe4 > Phishing simulation and security awareness training with a large content library. KnowBe4 is a security awareness platform that runs simulated phishing campaigns and delivers training modules to a client's staff, with a large content library and client-facing reporting metrics such as Phish-Prone Percentage. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/knowbe4 - Vendor: KnowBe4, https://mspsoftware.net/vendors/knowbe4, website https://www.knowbe4.com - Categories: Security awareness and phishing simulation (primary), Email security - Free trial: yes. Free version: no. - Deployment: cloud. Platforms: web. HQ: United States. Founded: 2010. ### From the vendor KnowBe4 runs simulated phishing campaigns against a client's staff and delivers short training modules, with one of the largest content libraries in the category and a Phish-Prone Percentage metric MSPs commonly use in client-facing reporting to show improvement over time. It offers a free trial, though the product data on file shows no permanently free tier. KnowBe4 suits MSPs building a security awareness offering who want breadth of training content across many languages and topics, and those who want polished, ready-made reporting for quarterly business reviews rather than building their own. Pricing is per user per year, quoted through a KnowBe4 partner or reseller rather than published as a single list price, with tiers based on how much of the content library and how many simulated phishing templates are included. It integrates with Microsoft 365 and Google Workspace for user sync and mailbox reporting of suspicious emails through its PhishER add-on, and with PSA platforms for automated billing based on user counts across an MSP's client base. MSPs evaluating KnowBe4 should confirm which content library tier and how many phishing template categories are included at their quoted price, since the breadth that makes KnowBe4 attractive is also what is metered by tier, and should check whether PhishER is bundled or a separate add-on before assuming mailbox reporting is included. MSPs reporting Phish-Prone Percentage to clients in a quarterly business review should also confirm how frequently campaign data refreshes, so the figure presented reflects recent staff behaviour rather than a stale snapshot from an earlier simulation round. ### Our take KnowBe4's Phish-Prone Percentage metric is a genuinely useful, ready-made way to show a client measurable improvement over time in a quarterly business review. Its content library breadth is the main reason to pick it over a smaller competitor, so confirm your quoted tier actually includes the languages and topics you need. PhishER, for mailbox-reported suspicious email, is worth checking as a separate line item rather than assuming it is bundled. It suits MSPs who want polished, client-ready reporting without building it themselves. ### Pricing KnowBe4 does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Phishing simulation campaigns | yes | | | Training content library | yes | | | Phish-reporting button | yes | | | Multi-language content | yes | | | Client-facing reporting | yes | | | Microsoft 365 and Google user sync | yes | | | PSA integration for billing | yes | | ### Alternatives - Mimecast: Email security, continuity and archiving layered on top of Exchange or Google. https://mspsoftware.net/software/mimecast - Proofpoint Essentials: Email security for small and mid-sized businesses from an enterprise security vendor. https://mspsoftware.net/software/proofpoint-essentials ### FAQ #### Does KnowBe4 offer a free trial? KnowBe4 offers a free trial. There is no free version. #### Is KnowBe4 cloud or on-premises? KnowBe4 is available as cloud. #### Is PhishER included with KnowBe4 or a separate add-on? PhishER, KnowBe4's tool for mailbox reporting of suspicious emails, integrates with Microsoft 365 and Google Workspace, but the existing product data on file does not confirm whether it is bundled into every KnowBe4 tier or sold separately. MSPs should confirm this directly with a KnowBe4 partner before assuming mailbox reporting is included in a quoted price. #### What is KnowBe4's Phish-Prone Percentage used for? Phish-Prone Percentage is a metric KnowBe4 generates from simulated phishing campaign results, and MSPs commonly use it in client-facing quarterly business review reporting to show measurable improvement in staff awareness over time. It gives a simple, trackable number a non-technical client contact can understand without needing to interpret raw campaign data. #### How is KnowBe4 priced across an MSP's client base? KnowBe4 is quoted through a partner or reseller per user per year rather than published as a single list price, with tiers based on content library depth and how many phishing template categories are included. MSPs billing several clients should confirm how KnowBe4's PSA billing integration handles user counts that change month to month across many tenants. #### Does KnowBe4 support multiple languages? Yes, breadth of training content across many languages and topics is one of KnowBe4's stated strengths on file, which suits MSPs serving multinational or multilingual client staff. MSPs should confirm which specific languages are included at their quoted content library tier before promising multilingual training to a client. ## Lifecycle Insights > Hardware and software lifecycle reporting pulled from RMM and procurement data. Lifecycle Insights is a lifecycle reporting tool that pulls hardware and software age, warranty and end-of-life data from an MSP's RMM and procurement records to support vCIO and quarterly business review conversations. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/lifecycle-insights - Vendor: Lifecycle Insights, https://mspsoftware.net/vendors/lifecycle-insights, website https://www.lifecycleinsights.io - Categories: vCIO and asset lifecycle (primary), Network monitoring - Deployment: cloud. Platforms: web. ### From the vendor Lifecycle Insights reports on the age, warranty status and end-of-life dates of client hardware and software, pulled from an MSP's RMM and procurement records, and is used to support the asset-replacement and budgeting conversations that come up in a vCIO engagement or quarterly business review. It suits MSPs who want lifecycle and asset-age reporting as a distinct, lighter-weight tool rather than a bundled module inside a larger vCIO or documentation platform. Pricing is per managed endpoint per month, quoted directly rather than published as a fixed list price. It integrates with common RMM platforms to import device inventory automatically rather than requiring manual asset entry, and its output is designed to be dropped into a client-facing report or presentation. This is a newer, smaller product in the category, and MSPs evaluating it should confirm current integration coverage and pricing directly, since both change faster here than for the more established lifecycle tools such as ScalePad, and should ask for references from other MSPs of a similar size, given the product's shorter track record compared with more established competitors in this category. Because this is a smaller vendor than most others in this list, MSPs should also ask directly about the company's funding and stability, its typical support response times, and its product roadmap, rather than assuming the same level of longevity or dedicated account management that a larger, longer-established lifecycle reporting vendor would offer as standard. None of that detail is public enough to state as fact here, which is itself a reason to confirm it directly before committing a client-facing reporting workflow to it. ### Our take Lifecycle Insights is worth a look mainly if ScalePad or a similar established tool feels heavier than you need, but treat it as the newer, smaller option it genuinely is. Confirm current integration coverage and pricing directly rather than assuming parity with more established competitors, since both are more likely to have changed recently than for a longer-established vendor. Ask for references from MSPs of a similar size given its shorter track record, and ask directly about the company's stability and support responsiveness. It suits an MSP wanting lightweight lifecycle reporting without a larger bundled platform, provided that due diligence is done first. ### Pricing Lifecycle Insights does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Asset lifecycle and warranty tracking | yes | | | RMM data import | yes | | | Client-facing QBR reports | yes | | | Procurement integration | yes | | ### Alternatives - Gradient: Reconciles vendor and distributor billing against what each client should be charged. https://mspsoftware.net/software/gradient - ScalePad: Turns asset age and warranty data into lifecycle reports for QBRs. https://mspsoftware.net/software/scalepad ### FAQ #### Is Lifecycle Insights cloud or on-premises? Lifecycle Insights is available as cloud. #### How does Lifecycle Insights compare to ScalePad? Lifecycle Insights and ScalePad both turn RMM and procurement data into client-facing lifecycle reports, but Lifecycle Insights is described on file as a newer, smaller product with a shorter track record. MSPs comparing the two should ask Lifecycle Insights directly about current integration coverage and pricing, and consider references from similarly sized MSPs, before assuming feature parity with the more established tool. #### Does Lifecycle Insights require manual asset entry? No, Lifecycle Insights integrates with common RMM platforms to import device inventory automatically rather than requiring a technician to enter hardware and software details by hand. MSPs should confirm their specific RMM is currently supported, since integration coverage for this newer product can change faster than for more established competitors. #### Is Lifecycle Insights aimed at vCIO reporting specifically? Yes, Lifecycle Insights is used to support the asset-replacement and budgeting conversations that come up in a vCIO engagement or quarterly business review, rather than being a general-purpose documentation or asset management tool. Its output is designed to be dropped directly into a client-facing report or presentation. #### Why does the site recommend confirming pricing directly for Lifecycle Insights? Lifecycle Insights is a newer, smaller product in its category, and the existing product data on file notes that both its integration coverage and pricing change faster than for more established lifecycle tools. Confirming current details directly with the vendor, rather than relying on a snapshot that may be out of date, is standard practice recommended for any newer entrant in a fast-moving category. ## Microsoft Defender for Business > Endpoint protection built into the Microsoft 365 Business Premium licence. Microsoft Defender for Business is Microsoft's endpoint detection and response product for small and medium businesses, included in Microsoft 365 Business Premium or available as a standalone add-on. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/defender-for-business - Vendor: Microsoft, https://mspsoftware.net/vendors/microsoft, website https://www.microsoft.com/en-us/security/business/endpoint-security/microsoft-defender-business - Categories: EDR and XDR (primary), Microsoft 365 and cloud management - Deployment: cloud. Platforms: Windows, macOS, iOS, Android and web. HQ: United States. Founded: 1975. ### From the vendor Microsoft Defender for Business is Microsoft's endpoint detection and response product aimed at small and medium businesses, included in Microsoft 365 Business Premium or available as a standalone add-on for organisations that do not have Business Premium. It covers antivirus, attack surface reduction rules, and automated investigation and remediation, all managed from the Microsoft 365 admin centre alongside a client's other Microsoft licensing rather than a separate dedicated security console. It suits MSPs already standardised on Microsoft 365 Business Premium for clients, where Defender is effectively already paid for as part of that bundle, more than MSPs who want a dedicated security console kept entirely separate from Microsoft's own admin tools. Pricing is per user per month, either bundled into Microsoft 365 Business Premium or sold as a standalone add-on, and it is published on Microsoft's own licensing pages rather than quoted privately, which makes it straightforward to check current pricing directly. Defender for Business integrates natively with the wider Microsoft security stack, including Microsoft Entra ID for identity and Microsoft Intune for device management, and with Microsoft 365 Lighthouse for MSPs managing several client tenants from one place. It depends on a client already being, or being willing to become, a Microsoft 365 customer, so it is not a fit for endpoints outside that ecosystem. Before buying, confirm whether the standalone add-on or the Business Premium bundle is the better fit for a given client's existing Microsoft licensing, since the effective cost differs depending on what they already have. It is also worth checking which specific attack surface reduction rules are enabled by default versus requiring manual configuration, since Defender's protection out of the box is not identical to how it behaves once fully configured. ### Our take Defender for Business is the obvious first option to check for any client already on Microsoft 365 Business Premium, since it is effectively already included rather than an extra line item. It suits MSPs comfortable managing security through the Microsoft 365 admin centre and Lighthouse rather than a separate dedicated console. It is less suited to a client outside the Microsoft 365 ecosystem or an MSP that wants one security console covering non-Microsoft endpoints as well. Check current published pricing on Microsoft's own licensing pages before quoting, since it can change with Microsoft's wider licensing updates. ### Pricing Microsoft Defender for Business does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Automated remediation | yes | | | Application allow-listing | yes | | | RMM integration | no | | ### Integrations - Microsoft Entra ID, https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id - Microsoft Intune, https://www.microsoft.com/en-us/security/business/microsoft-intune ### Alternatives - Blackpoint Cyber: MDR built around a proprietary SOC platform and a 24-hour analyst team. https://mspsoftware.net/software/blackpoint-cyber - Huntress: Managed EDR with a human-staffed SOC built specifically for MSPs. https://mspsoftware.net/software/huntress - SentinelOne: AI-driven EDR and XDR with autonomous, one-click threat rollback. https://mspsoftware.net/software/sentinelone - ThreatLocker: Default-deny application control and ringfencing to stop what has not been approved. https://mspsoftware.net/software/threatlocker ### FAQ #### What does Microsoft Defender for Business integrate with? Microsoft Defender for Business integrates with Microsoft Entra ID, Microsoft Intune. #### Is Microsoft Defender for Business cloud or on-premises? Microsoft Defender for Business is available as cloud. #### Is Defender for Business included in Microsoft 365 Business Premium, or a separate cost? Defender for Business is included in Microsoft 365 Business Premium, so a client already on that licence is not paying for it as a separate line item. It is also sold as a standalone add-on for organisations that want Defender for Business without the rest of the Business Premium bundle, priced separately on Microsoft's published licensing pages. #### Does Defender for Business work with Microsoft Intune and Entra ID? Yes, Defender for Business integrates natively with Microsoft Entra ID for identity and Microsoft Intune for device management, since all three are part of the same Microsoft security and management stack. MSPs managing several client tenants can also use Microsoft 365 Lighthouse to review Defender status across every tenant from one place rather than switching between tenant admin centres. #### Does Defender for Business protect devices that are not on Microsoft 365? Defender for Business depends on a client already being, or becoming, a Microsoft 365 customer, since it is managed through the Microsoft 365 admin centre rather than a standalone console. It is not a general-purpose EDR product for environments outside the Microsoft ecosystem, so MSPs with non-Microsoft-365 clients would need a separate EDR product for those endpoints. #### Is Defender for Business managed from a separate console from the rest of Microsoft 365? No, it is managed from the Microsoft 365 admin centre alongside a client's other Microsoft licensing, rather than a dedicated standalone security console. MSPs managing several clients can use Microsoft 365 Lighthouse for a consolidated view. This suits MSPs already comfortable working inside Microsoft's own admin tools rather than wanting every security product in one separate dashboard. ## Mimecast > Email security, continuity and archiving layered on top of Exchange or Google. Mimecast is an email security platform that filters phishing, malware and spoofed messages before they reach a mailbox, and separately offers email continuity, archiving and security awareness training as additional modules. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/mimecast - Vendor: Mimecast, https://mspsoftware.net/vendors/mimecast, website https://www.mimecast.com - Categories: Email security (primary), Security awareness and phishing simulation - Deployment: cloud. Platforms: web. HQ: United Kingdom. Founded: 2003. ### From the vendor Mimecast is an email security platform that filters phishing, malware and spoofed messages before they reach a client's mailbox, and it also offers email continuity, so mail keeps flowing if the primary mail server is down, along with archiving and a security awareness training module. It suits MSPs serving clients in regulated industries where email archiving and continuity guarantees matter alongside filtering, and larger client organisations where a dedicated email security layer justifies the added cost over relying on Microsoft's or Google's built-in filtering alone. Smaller, less regulated clients may not need the full breadth of modules Mimecast offers. Pricing is per mailbox per month, quoted through a Mimecast partner or reseller rather than published as a single list price, and it is usually bundled across whichever modules a given client needs rather than sold as separate standalone products with separate prices. Mimecast integrates with Microsoft 365 and Google Workspace as its two supported mail platforms, and with SIEM and SOAR tools for larger security operations that want Mimecast's alerts feeding into a broader security stack. An API is available for MSPs building automated provisioning across many client tenants, rather than adding and removing mailboxes by hand in each one. Before buying, confirm exactly which modules, filtering, continuity, archiving and security awareness training, are included in a given quote, since Mimecast bundles them selectively rather than as one fixed package, and check the archiving retention period matches any regulatory requirement the client actually has. It is also worth confirming how Mimecast's pricing changes as a client adds or removes mailboxes mid-contract, since some email security vendors true up seat counts only at renewal rather than continuously. ### Our take Mimecast suits MSPs with clients in regulated industries who need archiving and continuity guarantees on top of filtering, not just spam and phishing protection. It is a heavier, more expensive option than relying on Microsoft's or Google's own filtering, so it makes most sense where a client's compliance requirements or risk profile actually justify the extra layer. Confirm exactly which modules are included in a quote before assuming continuity or archiving are bundled with basic filtering. It is less suited to a small, unregulated client who is well served by their existing mail platform's built-in protection. ### Pricing Mimecast does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Phishing and malware filtering | yes | | | Email continuity | yes | | | Archiving | yes | | | Security awareness training bundle | yes | | | Microsoft 365 integration | yes | | ### Alternatives - Proofpoint Essentials: Email security for small and mid-sized businesses from an enterprise security vendor. https://mspsoftware.net/software/proofpoint-essentials - KnowBe4: Phishing simulation and security awareness training with a large content library. https://mspsoftware.net/software/knowbe4 - Avanan: Check Point's API-based email security that sits inside Microsoft 365 or Google Workspace. https://mspsoftware.net/software/avanan ### FAQ #### Is Mimecast cloud or on-premises? Mimecast is available as cloud. #### Does Mimecast keep email flowing if the primary mail server goes down? Yes, email continuity is one of Mimecast's modules, designed to keep mail flowing if a client's primary Microsoft 365 or Google Workspace mail service is unavailable, rather than leaving users unable to send or receive email during an outage. It is a separate module from core filtering, so confirm it is included in a given quote rather than assuming it comes bundled by default. #### Does Mimecast work with Google Workspace, or only Microsoft 365? Mimecast supports both Microsoft 365 and Google Workspace as mail platforms, so an MSP does not need a separate email security product for clients split across the two. Confirm current feature parity between the two platforms for the specific modules being bought, since not every feature is guaranteed to behave identically on both. #### Are archiving and security awareness training included with Mimecast's core filtering? Not automatically. Mimecast bundles filtering, continuity, archiving and security awareness training selectively depending on what a client needs, rather than as one fixed package with everything included. An MSP should confirm exactly which modules are covered in a specific quote, since assuming archiving or training are included by default can lead to a client being under-provisioned. #### Can an MSP automate mailbox provisioning across many Mimecast tenants? Yes, Mimecast provides an API that MSPs can use to automate provisioning, such as adding or removing mailboxes, across many client tenants rather than making changes by hand in each one. This matters most to MSPs managing a larger number of Mimecast tenants where manual administration would otherwise be a significant recurring workload. ## N-able N-central > On-premises or cloud RMM built for larger, more complex managed estates. N-central is N-able's remote monitoring and management platform for larger managed IT estates, available either as a cloud-hosted service or self-hosted on the MSP's own server, covering patch management, scripting, remote control and network device monitoring. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/n-central - Vendor: N-able, https://mspsoftware.net/vendors/n-able, website https://www.n-able.com/products/n-central - Categories: RMM and patching (primary), Network monitoring - Deployment: cloud and on-premises. Platforms: Windows and web. HQ: United States. ### From the vendor N-central is N-able's remote monitoring and management platform, available either as a hosted cloud instance or self-hosted on the MSP's own server, which sets it apart from most cloud-only RMM competitors. It covers patch management, scripting through Automation Manager, remote control, and monitoring that extends beyond endpoints to network devices and virtual machines. It suits larger MSPs and internal IT departments managing thousands of devices or complex, segmented client networks, where self-hosting or deeper monitoring control matters more than getting started in minutes, and reported typical customer sizes run from 51 to 200 technicians and above. Pricing is per device per month, quoted by an N-able account manager rather than published, with volume pricing available for larger managed estates. N-central integrates with N-able's own Cove Data Protection, Passportal and Mail Assure products, giving a single vendor for RMM, backup and email security if an MSP wants to consolidate, and with third-party PSA platforms including ConnectWise and Autotask through its API so ticket and asset data can flow both ways. The self-hosted option means an MSP takes on responsibility for patching and maintaining the N-central server itself, a real operational cost to weigh against the cloud-hosted option. N-central runs its own console primarily on Windows and through the web, and N-able is based in the United States. Anyone evaluating N-central should get a written quote at their actual device count before comparing it with a cloud-only RMM, and should ask specifically what the self-hosted option costs in server infrastructure on top of the licence. ### Our take N-central is built for larger, more complex managed estates rather than a small shop's first RMM, and the self-hosted option is its clearest differentiator against cloud-only competitors like NinjaOne. That option comes with real maintenance overhead, so only take it if you actually need the control it buys you. Because pricing is quote-only and scales with device count, get volume pricing in writing before comparing total cost against a simpler cloud RMM. If you already run other N-able products such as Cove Data Protection, ask about bundled pricing across the stack. ### Pricing N-able N-central does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Patch management | yes | | | Scripting | yes | | | Remote access | yes | | | Monitoring and alerting | yes | | | Software deployment | yes | | | Network discovery | yes | | | Backup integration | yes | | | PSA integration | yes | | | Reporting | yes | | | Automation policies | yes | | | Third-party application patching | yes | | ### Integrations - Cove Data Protection, https://mspsoftware.net/software/cove-data-protection - ConnectWise PSA, https://mspsoftware.net/software/connectwise-psa - Autotask, https://mspsoftware.net/software/autotask Listed products that integrate with N-able N-central: Cove Data Protection, HaloPSA and IT Glue. ### Alternatives - NinjaOne: Cloud RMM for patching, scripting and remote control from one lightweight agent. https://mspsoftware.net/software/ninjaone - Datto RMM: Kaseya's cloud RMM, built to pair with Autotask PSA and Datto BCDR. https://mspsoftware.net/software/datto-rmm - ConnectWise RMM: Cloud RMM from ConnectWise, built to pair with its own PSA. https://mspsoftware.net/software/connectwise-rmm - ScreenConnect: ConnectWise's remote support and unattended access tool. https://mspsoftware.net/software/screenconnect. Compare: https://mspsoftware.net/compare/n-central-vs-screenconnect ### FAQ #### What does N-able N-central integrate with? N-able N-central integrates with Cove Data Protection, ConnectWise PSA, Autotask. #### Is N-able N-central cloud or on-premises? N-able N-central is available as cloud and on-premises. #### Who is N-able N-central for? MSPs report using N-able N-central at sizes of 51-200, 200+ technicians. #### Can N-central be self-hosted instead of cloud-hosted? Yes. N-central is one of the few mainstream RMM platforms still offered as a self-hosted option, running on the MSP's own server, alongside a standard cloud-hosted instance. Self-hosting gives an MSP more control over data location and server configuration, but it also means taking on the work of patching and maintaining that server. Most competing RMMs, including NinjaOne and Datto RMM, are cloud-only, so this is a genuine differentiator worth weighing against the added operational overhead. #### What size of MSP is N-central built for? N-central is aimed at larger MSPs and IT departments, with typical reported managed sizes of 51 to 200 technicians and above, rather than solo technicians or very small shops. Its network device and virtual machine monitoring, plus the self-hosted option, suit teams managing thousands of devices or complex, segmented client networks. A smaller MSP may find a lighter, cloud-only RMM faster to set up and cheaper to run. #### Does N-central integrate with ConnectWise and Autotask? Yes, N-central integrates with third-party PSA platforms including ConnectWise and Autotask through its API, so ticket and asset data can pass both ways even if an MSP is not using N-able's own products. It also integrates natively with N-able's Cove Data Protection, Passportal and Mail Assure for MSPs who want RMM, backup, password management and email security from one vendor. #### Does N-central monitor network devices beyond endpoints? Yes. Unlike many endpoint-focused RMMs, N-central's monitoring extends to network devices and virtual machines, not just Windows workstations and servers. This is part of why it suits MSPs managing more complex, segmented client networks. MSPs should confirm exactly which device types and hypervisors are supported for their specific network gear before relying on it as a full network monitoring replacement. ## NinjaOne > Cloud RMM for patching, scripting and remote control from one lightweight agent. NinjaOne is a cloud-based remote monitoring and management platform that lets MSPs and IT teams patch, script, deploy software and remotely control Windows, macOS and Linux endpoints from one lightweight agent and console. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/ninjaone - Vendor: NinjaOne, https://mspsoftware.net/vendors/ninjaone, website https://www.ninjaone.com - Categories: RMM and patching (primary), Remote access and support - Free trial: yes. - Deployment: cloud. Platforms: Windows, macOS, Linux and web. HQ: United States. Founded: 2013. ### From the vendor NinjaOne is a cloud-based remote monitoring and management platform for Windows, macOS and Linux endpoints, run entirely from a single lightweight agent and one web console. It covers automated patch management, scripting, software deployment and remote control as core features, with basic backup and mobile device management available as add-on modules rather than built in by default. It suits MSPs and internal IT teams that want a fast, modern RMM without running on-premises infrastructure, and those consolidating several point tools onto fewer agents per endpoint to cut down on what a technician has to install and maintain on every machine. NinjaOne also supports vulnerability and event log management as optional layers on top of the core agent. Pricing is per managed endpoint per month, billed directly to the MSP rather than published as a fixed list price, and it typically scales down per endpoint as a client base grows. NinjaOne integrates with the major PSA platforms, including ConnectWise PSA, HaloPSA, Autotask and Syncro, so an alert can open a ticket with device context already attached instead of a technician copying details across by hand. It also connects to documentation, backup and security tools through a documented API and a growing app marketplace, though the exact list of pre-built integrations is worth checking directly since it changes over time. NinjaOne was founded in 2013 and is based in the United States, and it offers a free trial, so an MSP can test the console against a handful of real endpoints before signing anything. MSPs comparing RMMs should confirm current per-endpoint pricing with a NinjaOne rep, since it is not published, and check that any specific third-party tool they already run has a maintained integration before switching. ### Our take NinjaOne suits MSPs who want a fast, modern RMM console without babysitting on-premises servers, especially smaller and mid-sized teams consolidating tools onto one agent per endpoint. Its backup and mobile device management are add-ons rather than core strengths, so a shop that needs deep BCDR or MDM should treat those as separate buying decisions. Because pricing is not published, get a written quote covering per-endpoint cost at your expected device count before comparing it against a PSA-bundled RMM like Datto or ConnectWise. Check which of your existing PSA and security tools already have a maintained NinjaOne integration before you commit. ### Pricing NinjaOne does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Patch management | yes | | | Scripting | yes | | | Remote access | yes | | | Monitoring and alerting | yes | | | Software deployment | yes | | | Network discovery | yes | | | Mobile device management | yes | | | Backup integration | yes | | | PSA integration | yes | | | Reporting | yes | | | Automation policies | yes | | | Third-party application patching | yes | | ### Integrations - ConnectWise PSA, https://mspsoftware.net/software/connectwise-psa - HaloPSA, https://mspsoftware.net/software/halopsa - Autotask, https://mspsoftware.net/software/autotask - Syncro, https://mspsoftware.net/software/syncro Listed products that integrate with NinjaOne: HaloPSA and Hudu. ### Alternatives - N-able N-central: On-premises or cloud RMM built for larger, more complex managed estates. https://mspsoftware.net/software/n-central - Datto RMM: Kaseya's cloud RMM, built to pair with Autotask PSA and Datto BCDR. https://mspsoftware.net/software/datto-rmm - ConnectWise RMM: Cloud RMM from ConnectWise, built to pair with its own PSA. https://mspsoftware.net/software/connectwise-rmm - ScreenConnect: ConnectWise's remote support and unattended access tool. https://mspsoftware.net/software/screenconnect. Compare: https://mspsoftware.net/compare/ninjaone-vs-screenconnect ### FAQ #### Does NinjaOne offer a free trial? NinjaOne offers a free trial. #### What does NinjaOne integrate with? NinjaOne integrates with ConnectWise PSA, HaloPSA, Autotask, Syncro. #### Is NinjaOne cloud or on-premises? NinjaOne is available as cloud. #### Is NinjaOne priced per endpoint or per technician? NinjaOne is priced per managed endpoint per month rather than per technician, so cost scales with the number of devices under management. The vendor does not publish a list price, and billing typically scales down per endpoint at higher volumes. MSPs should get a written quote for their expected device count, since a per-endpoint model can work out cheaper or more expensive than a per-technician PSA-bundled RMM depending on how many devices each technician manages. #### Does NinjaOne integrate with HaloPSA and Syncro as well as ConnectWise and Autotask? Yes. NinjaOne lists integrations with ConnectWise PSA, HaloPSA, Autotask and Syncro, so alerts and device data can flow into any of these ticketing systems rather than only the ConnectWise or Datto product lines. This makes NinjaOne a workable choice for MSPs who are not locked into a single PSA vendor. Confirm the specific integration still covers the features you need, such as two-way ticket sync, directly with NinjaOne before switching. #### Are backup and mobile device management included in NinjaOne's core RMM price? No. NinjaOne's core agent covers patching, scripting, software deployment and remote control, while backup and mobile device management are separate add-on modules with their own pricing. An MSP evaluating NinjaOne purely as an RMM should not assume BCDR or MDM functionality is bundled in, and should price those modules separately, or compare them against a dedicated backup or MDM product, before deciding whether to add them. #### Does NinjaOne run on-premises or only in the cloud? NinjaOne is cloud-only: there is no self-hosted or on-premises version of the console. Every managed endpoint reports to NinjaOne's hosted infrastructure through the lightweight agent, so MSPs do not need to run or patch their own RMM server. This suits shops that want to avoid maintaining backend infrastructure, but it means an MSP cannot keep RMM data entirely on its own servers for a client with strict data residency requirements. ## Proofpoint Essentials > Email security for small and mid-sized businesses from an enterprise security vendor. Proofpoint Essentials is Proofpoint's email security product for small and mid-sized businesses, filtering phishing, malware and spam ahead of Microsoft 365 or Google Workspace mailboxes, with optional continuity, archiving and security awareness training. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/proofpoint-essentials - Vendor: Proofpoint, https://mspsoftware.net/vendors/proofpoint, website https://www.proofpoint.com/us/products/proofpoint-essentials - Categories: Email security (primary), Security awareness and phishing simulation - Deployment: cloud. Platforms: web. HQ: United States. Founded: 2002. ### From the vendor Proofpoint Essentials is Proofpoint's email security product for small and mid-sized businesses, built as a scaled-down version of the detection technology used in Proofpoint's enterprise product line. It filters phishing, malware, spam and spoofed messages before they reach a client's mailbox, and adds optional email continuity so mail keeps flowing if the primary server goes down, archiving for regulatory retention, and a security awareness training add-on. The product suits MSPs who want a recognised enterprise security brand behind their email offering without the cost or complexity of Proofpoint's full enterprise line, and clients who have outgrown the filtering built into Microsoft 365 or Google Workspace on its own. It works well for MSPs managing several client tenants from one place, since the partner console is built for that rather than per-tenant logins. It typically suits established MSPs with a dedicated security offering rather than a solo shop just starting to sell managed security, since the value comes from consistent policy and reporting across many client tenants over time. Pricing is per user per month, quoted through a Proofpoint partner rather than published as a fixed list price, and is usually sold and billed by the MSP on the client's behalf. Proofpoint Essentials integrates with Microsoft 365 and Google Workspace, the two mail platforms it supports, and the partner console lets an MSP apply the same filtering policy and review threats across every client tenant from a single login. MSPs comparing it against Microsoft's or Google's native filtering, or against Mimecast, should get a current per-user quote from a Proofpoint partner before committing, since list pricing is not published and can vary by contract length and bundled modules. ### Our take Proofpoint Essentials suits MSPs who want an established enterprise security name attached to their email offering, particularly for clients in regulated industries who ask about vendor pedigree. It is worth comparing directly against Mimecast and against Microsoft's own filtering before adding a third layer, since the value depends on how much phishing is already getting through native filtering. Ask a Proofpoint partner for the current per-user price and confirm which modules, continuity, archiving and security awareness training, are included at that tier, since Essentials is sold as a bundle of add-ons rather than one fixed package. ### Pricing Proofpoint Essentials does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Phishing and malware filtering | yes | | | Email continuity | yes | | | Archiving | yes | | | Security awareness training bundle | yes | | | Microsoft 365 integration | yes | | ### Alternatives - Mimecast: Email security, continuity and archiving layered on top of Exchange or Google. https://mspsoftware.net/software/mimecast - KnowBe4: Phishing simulation and security awareness training with a large content library. https://mspsoftware.net/software/knowbe4 - Avanan: Check Point's API-based email security that sits inside Microsoft 365 or Google Workspace. https://mspsoftware.net/software/avanan ### FAQ #### Is Proofpoint Essentials cloud or on-premises? Proofpoint Essentials is available as cloud. #### Does Proofpoint Essentials replace Microsoft 365's built-in filtering? No. Proofpoint Essentials is typically added on top of Microsoft 365 or Google Workspace's native filtering rather than replacing it, catching phishing and malware that gets through the platform's own defences. MSPs usually keep the native filtering active and layer Essentials in front of or alongside it, rather than switching mail flow entirely away from Microsoft or Google. #### Can one MSP manage Proofpoint Essentials for several clients? Yes. Proofpoint Essentials is sold through a partner console built for multi-tenant management, so an MSP technician can review filtering policy, threats and quarantined mail across every client from a single login rather than signing in to each tenant separately. This is the normal way MSPs deploy and bill the product. #### Does Proofpoint Essentials include email continuity and archiving? Continuity and archiving are available as add-on modules rather than included by default. Continuity keeps mail flowing to a backup inbox if a client's primary mail server or Microsoft 365 tenant goes down, and archiving retains messages for regulatory or legal retention requirements. An MSP should confirm with its Proofpoint partner which modules are included at a given price point. #### Is Proofpoint Essentials sold direct or only through partners? Proofpoint Essentials is sold and quoted through Proofpoint partners and resellers rather than direct to end customers or as a self-service online purchase. Most MSPs buy it as a partner themselves and manage billing and provisioning for their clients through the partner console, rather than each client holding a separate Proofpoint account. ## ScalePad > Turns asset age and warranty data into lifecycle reports for QBRs. ScalePad, formerly Warranty Master, is a reporting tool that pulls hardware age and warranty data from an MSP's RMM and turns it into client-facing lifecycle reports for quarterly business reviews. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/scalepad - Vendor: ScalePad, https://mspsoftware.net/vendors/scalepad, website https://www.scalepad.com - Categories: vCIO and asset lifecycle (primary), Quoting and CPQ - Deployment: cloud. Platforms: web. HQ: Canada. Founded: 2016. ### From the vendor ScalePad, formerly known as Warranty Master, pulls hardware age and warranty data from an MSP's RMM and turns it into client-facing lifecycle reports, flagging devices approaching end of warranty or end of useful life, which an MSP uses to support hardware replacement conversations in a quarterly business review. It suits MSPs running a vCIO or QBR practice who want polished, automatically generated reports rather than building spreadsheets by hand from RMM exports each quarter. Pricing is per managed endpoint per month, quoted through a ScalePad account manager rather than published as a fixed list price, with additional modules such as backup radar and digital business review reporting sold as add-ons. It integrates natively with most major RMM platforms to pull device and warranty data automatically, and with PSA tools for linking recommendations to quotes, positioning itself as a reporting and sales-enablement layer on top of data an MSP already has rather than a new source of truth. MSPs evaluating ScalePad should confirm their specific RMM is on its list of native integrations before assuming automatic data pull works out of the box, and should decide deliberately which add-on modules, such as backup radar, are worth the extra per-endpoint cost versus the core lifecycle reporting alone. MSPs building a regular QBR cadence around ScalePad's reports should also confirm how easily the output can be customised with their own branding and commentary, since a report that looks obviously templated is less persuasive to a client than one that reads as the MSP's own analysis. ### Our take ScalePad turns data an MSP already has sitting in its RMM into client-facing reports that are genuinely useful in a quarterly business review, rather than asking you to gather new information. Confirm your RMM is natively supported before assuming automatic data pull works immediately. Decide deliberately which add-on modules are worth paying for versus the core lifecycle reporting alone. It suits MSPs already running QBRs who want to stop building these reports by hand. ### Pricing ScalePad does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Asset lifecycle and warranty tracking | yes | | | RMM data import | yes | | | Client-facing QBR reports | yes | | | PSA integration | yes | | | Hardware refresh recommendations | yes | | ### Alternatives - Gradient: Reconciles vendor and distributor billing against what each client should be charged. https://mspsoftware.net/software/gradient - Lifecycle Insights: Hardware and software lifecycle reporting pulled from RMM and procurement data. https://mspsoftware.net/software/lifecycle-insights ### FAQ #### Is ScalePad cloud or on-premises? ScalePad is available as cloud. #### Does ScalePad work with every major RMM platform? ScalePad integrates natively with most major RMM platforms to pull device and warranty data automatically, though the product data on file does not confirm universal coverage. MSPs should check that their specific RMM is on ScalePad's current native integration list before assuming automatic data pull will work without manual setup. #### What add-on modules does ScalePad offer beyond lifecycle reporting? ScalePad offers additional modules such as backup radar and digital business review reporting, sold as add-ons on top of its core lifecycle reporting. MSPs should decide deliberately which of these are worth the extra per-endpoint cost rather than assuming they are included in the base lifecycle reporting price. #### Can ScalePad reports be linked to a sales quote? Yes, ScalePad integrates with PSA tools for linking hardware replacement recommendations to quotes, so a lifecycle report flagging an ageing device can feed directly into a sales conversation. This positions ScalePad as a sales-enablement layer on top of data an MSP already holds in its RMM. #### Is ScalePad a source of truth for asset data or a reporting layer? ScalePad positions itself as a reporting and sales-enablement layer on top of asset data an MSP's RMM already holds, rather than a new source of truth for hardware inventory. MSPs should keep their RMM as the authoritative record and treat ScalePad's lifecycle reports as a presentation layer built from that existing data. ## ScreenConnect > ConnectWise's remote support and unattended access tool. ScreenConnect is ConnectWise's remote support and unattended access product, available as a ConnectWise-hosted cloud service or self-hosted on the MSP's own server, used both standalone and as the remote access component built into ConnectWise RMM and PSA. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/screenconnect - Vendor: ScreenConnect, https://mspsoftware.net/vendors/screenconnect, website https://screenconnect.connectwise.com - Categories: Remote access and support (primary), RMM and patching - Free trial: yes. Free version: no. - Deployment: cloud and on-premises. Platforms: Windows, macOS, Linux, iOS, Android and web. HQ: United States. Founded: 1982. ### From the vendor ScreenConnect, formerly known as ConnectWise Control, provides on-demand remote support sessions and unattended access to client machines, and can be self-hosted on the MSP's own server or run as a ConnectWise-hosted cloud instance. It suits MSPs who want a fast, low-latency remote access tool with white-label branding for the end-user-facing client, and those who value the self-hosting option for data residency or cost reasons, since a self-hosted licence has no per-technician or per-endpoint cap beyond the server's own capacity. It works for MSPs of any size, from a solo technician wanting simple unattended access to larger teams running many simultaneous support sessions. It also runs on Windows, macOS and Linux hosts and supports iOS and Android for mobile device support, so a technician is not limited to Windows-only endpoints. Pricing for hosted plans is per year per named technician, published in tiers on ConnectWise's site, starting from around $540 per technician per year on the published entry tier, with a free trial available and no free version. A separate self-hosted licence is priced per concurrent session rather than per technician. ScreenConnect integrates as the remote access component built into ConnectWise RMM and ConnectWise PSA, and is also sold and used standalone by MSPs running a different RMM or PSA, with an API and command-line tooling for scripted deployment and automation. MSPs already using ConnectWise RMM or PSA should check whether ScreenConnect is already bundled into their agreement before buying it separately, and those considering the self-hosted option should weigh the server maintenance involved against the hosted plan's simpler, published per-technician price. ### Our take ScreenConnect suits MSPs who want fast, white-labelled remote access with published, predictable per-technician pricing, and those who specifically want the self-hosting option for data residency or to avoid a per-technician cap. Check first whether it is already bundled into an existing ConnectWise RMM or PSA agreement before buying it as a separate line item. Self-hosting adds server maintenance responsibility in exchange for a licence based on concurrent sessions rather than named technicians, which suits larger teams differently than smaller ones. ### Pricing ScreenConnect starts at US$540.00 per technician per year, according to the vendor (pricing page: https://screenconnect.connectwise.com/pricing). ### Features | Feature | Supported | Note | | --- | --- | --- | | Unattended access | yes | | | On-demand support session | yes | | | Self-hosted option | yes | | | White-label branding | yes | | | Command-line scripted deployment | yes | | | PSA integration | yes | | ### Integrations - ConnectWise RMM, https://mspsoftware.net/software/connectwise-rmm - ConnectWise PSA, https://mspsoftware.net/software/connectwise-psa Listed products that integrate with ScreenConnect: ConnectWise PSA and ConnectWise RMM. ### Alternatives - Domotz: Lightweight network monitoring and remote access via an affordable probe. https://mspsoftware.net/software/domotz. Compare: https://mspsoftware.net/compare/domotz-vs-screenconnect - Duo: Cisco's multi-factor authentication and device trust for logins and VPNs. https://mspsoftware.net/software/duo. Compare: https://mspsoftware.net/compare/duo-vs-screenconnect - Splashtop: Remote support and unattended access priced simply per technician. https://mspsoftware.net/software/splashtop - NinjaOne: Cloud RMM for patching, scripting and remote control from one lightweight agent. https://mspsoftware.net/software/ninjaone. Compare: https://mspsoftware.net/compare/ninjaone-vs-screenconnect ### FAQ #### How much does ScreenConnect cost? ScreenConnect starts at US$540.00 per technician per year, according to the vendor. #### Does ScreenConnect offer a free trial? ScreenConnect offers a free trial. There is no free version. #### What does ScreenConnect integrate with? ScreenConnect integrates with ConnectWise RMM, ConnectWise PSA. #### Is ScreenConnect cloud or on-premises? ScreenConnect is available as cloud and on-premises. #### Can ScreenConnect be used without ConnectWise RMM or PSA? Yes. ScreenConnect is sold and used standalone by many MSPs running a different RMM or PSA platform, not only by ConnectWise customers. It is also built into ConnectWise RMM and ConnectWise PSA as their remote access component, so MSPs already on those products should check whether it is already included in their agreement. #### What is the difference between the hosted and self-hosted ScreenConnect licence? The hosted plan runs on ConnectWise's own infrastructure and is priced per year per named technician, published in tiers starting from around $540 per technician per year. The self-hosted licence runs on the MSP's own server and is priced per concurrent session instead, which can work out cheaper for a larger team with no per-technician cap, in exchange for maintaining the server. #### Is there a free trial of ScreenConnect? Yes, ScreenConnect offers a free trial, though there is no permanently free version. An MSP can trial the hosted plan before committing to a published per-technician annual price, or evaluate the self-hosted option before deciding between the two licensing models. #### Does ScreenConnect support white-label branding? Yes. ScreenConnect supports white-label branding for the client-facing side of a remote support session, so end users see the MSP's own name and branding rather than ConnectWise's. This is commonly used by MSPs who want a consistent, branded support experience regardless of which remote access tool sits behind it. ## SentinelOne > AI-driven EDR and XDR with autonomous, one-click threat rollback. SentinelOne is an endpoint detection and response platform that uses on-device machine learning to autonomously detect, contain and roll back malicious activity on an endpoint without requiring a full reimage. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/sentinelone - Vendor: SentinelOne, https://mspsoftware.net/vendors/sentinelone, website https://www.sentinelone.com - Categories: EDR and XDR (primary), MDR and SOC - Deployment: cloud. Platforms: Windows, macOS, Linux and web. HQ: United States. Founded: 2013. ### From the vendor SentinelOne is an endpoint detection and response platform that uses on-device machine learning to detect and automatically contain malicious activity on an endpoint, without needing to send every decision back to a cloud service first. Its rollback feature can restore an endpoint to its pre-attack state, undoing file encryption or other changes, without requiring a full reimage of the machine. It suits MSPs who want strong autonomous detection with minimal manual triage built into the agent itself, and it also suits MSPs building a security practice who plan to layer their own analysts, or a partner MDR service, on top of SentinelOne's raw telemetry rather than relying on the agent alone to handle everything. Pricing is per endpoint per month, quoted through a SentinelOne partner or distributor rather than published, with tiers based on how much extended detection and response functionality is included beyond core endpoint protection. SentinelOne integrates with major SIEM and SOAR platforms, and several third-party MDR providers build their managed services specifically on top of its API rather than treating it as just another EDR feed. RMM and PSA tools connect through partner-built connectors, so detections can flow into a service desk's normal ticket queue rather than a separate security console nobody checks. Before buying, an MSP should decide whether it wants SentinelOne's own response tooling alone or plans to add a third-party MDR service on top, since pricing and the alerting workflow differ meaningfully between those two ways of running it. It is also worth asking how SentinelOne's own reporting differentiates a fully autonomous containment from one that still needed a human analyst to intervene, since that distinction affects how much oversight a technician actually needs day to day. ### Our take SentinelOne suits MSPs who want strong autonomous detection and a genuine rollback option built into the agent, and who are comfortable either triaging alerts themselves or pairing it with a specific MDR partner. It is less of a fit for an MSP that wants a fully staffed SOC included in the base product, since that is a separate purchase layered on top. Confirm which tier includes the level of extended detection and response functionality actually needed, since pricing scales with that rather than endpoint count alone. Ask a prospective MDR partner which parts of SentinelOne's telemetry they actually monitor before assuming full coverage. ### Pricing SentinelOne does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Behavioural detection | yes | | | Automated remediation | yes | | | Rollback to pre-attack state | yes | | | Offline protection | yes | | | Managed MDR add-on | yes | | | SIEM and SOAR integration | yes | | ### Alternatives - Blackpoint Cyber: MDR built around a proprietary SOC platform and a 24-hour analyst team. https://mspsoftware.net/software/blackpoint-cyber - Huntress: Managed EDR with a human-staffed SOC built specifically for MSPs. https://mspsoftware.net/software/huntress - ThreatLocker: Default-deny application control and ringfencing to stop what has not been approved. https://mspsoftware.net/software/threatlocker - Microsoft Defender for Business: Endpoint protection built into the Microsoft 365 Business Premium licence. https://mspsoftware.net/software/defender-for-business ### FAQ #### Is SentinelOne cloud or on-premises? SentinelOne is available as cloud. #### Does SentinelOne include a staffed SOC, or just the endpoint agent? The core SentinelOne product is the endpoint agent and its own automated response tooling, not a staffed security operations centre. MSPs who want 24 hour human analyst monitoring on top of SentinelOne's telemetry typically add a third-party MDR provider that builds its service on SentinelOne's API, which is a separate purchase and a separate relationship from SentinelOne itself. #### What does SentinelOne's rollback feature actually do? Rollback restores an endpoint to its state before an attack, reversing file encryption or other malicious changes, without requiring a full reimage of the machine. It is one of the features that differentiates SentinelOne's autonomous response from EDR products that only detect and alert. MSPs should confirm which SentinelOne tier includes rollback, since it is tied to how much extended response functionality is licensed. #### Does SentinelOne send alerts into a PSA ticket queue? SentinelOne connects to RMM and PSA tools through partner-built connectors, so detections can open tickets in a service desk's normal queue rather than only appearing in a separate SentinelOne console. Which specific PSA connectors are available and how directly they are supported can vary, so confirm current integration coverage for the exact PSA in use before relying on it. #### How is SentinelOne priced across different response tiers? SentinelOne is priced per endpoint per month, quoted through a partner or distributor rather than published, with higher tiers unlocking more extended detection and response functionality rather than just covering more endpoints. An MSP should be clear on which specific capabilities, such as rollback or extended threat hunting, are included at the tier being quoted before comparing it against a competitor's price. ## Splashtop > Remote support and unattended access priced simply per technician. Splashtop is a remote support and unattended access product for MSPs, priced per technician per year with unlimited managed computers, and a growing set of basic RMM features bundled into some plans. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/splashtop - Vendor: Splashtop, https://mspsoftware.net/vendors/splashtop, website https://www.splashtop.com - Categories: Remote access and support (primary), RMM and patching - Free trial: yes. Free version: no. - Deployment: cloud. Platforms: Windows, macOS, iOS, Android and web. HQ: United States. Founded: 2006. ### From the vendor Splashtop provides remote support sessions and unattended access to client machines, with a separate consumer and business remote-desktop product line alongside its MSP-focused remote support offering, and a growing set of basic RMM features such as patch management bundled into some plans. Pricing starts from $259 per technician per year, published in tiers on Splashtop's site rather than quoted, with unlimited managed computers under most plans rather than a per-endpoint fee. Splashtop suits MSPs who want simple, published per-technician pricing rather than a quote-only sales process, and those who do not need Splashtop's RMM add-ons to be as deep as a dedicated RMM platform, using it mainly for fast, reliable remote access. It integrates with several PSA platforms for ticket-linked remote sessions, and with major RMM tools as an alternative remote access layer when an MSP prefers Splashtop's performance or pricing over the remote access built into their existing RMM. Because pricing is published per technician per year rather than monthly, MSPs should model the annual outlay against a monthly-billed competitor before comparing headline numbers directly, and should confirm whether a given plan's basic RMM features, such as patch management, are mature enough to rely on or are better treated as a bonus on top of a dedicated remote access tool rather than a reason to buy on their own. It is also worth checking current session-based versus device-based licensing terms directly, since remote access tools sometimes distinguish between the two in ways that affect cost for an MSP running many concurrent sessions across a busy service desk. ### Our take Splashtop is a straightforward choice when what you actually need is fast, reliable remote access rather than a full RMM, and its published per-technician pricing makes it easy to budget without a sales call. Do not expect its bundled patch management and other RMM-style extras to match a dedicated RMM's depth. It suits MSPs replacing a slower or more expensive remote access tool layered on top of an existing RMM. Compare the published annual price against monthly-billed competitors before assuming it is cheaper. ### Pricing Splashtop starts at US$259.00 per technician per year, according to the vendor (pricing page: https://www.splashtop.com/remote-support-pricing). ### Features | Feature | Supported | Note | | --- | --- | --- | | Unattended access | yes | | | On-demand support session | yes | | | Self-hosted option | no | | | PSA integration | yes | | ### Alternatives - Domotz: Lightweight network monitoring and remote access via an affordable probe. https://mspsoftware.net/software/domotz - ScreenConnect: ConnectWise's remote support and unattended access tool. https://mspsoftware.net/software/screenconnect - Duo: Cisco's multi-factor authentication and device trust for logins and VPNs. https://mspsoftware.net/software/duo - NinjaOne: Cloud RMM for patching, scripting and remote control from one lightweight agent. https://mspsoftware.net/software/ninjaone ### FAQ #### How much does Splashtop cost? Splashtop starts at US$259.00 per technician per year, according to the vendor. #### Does Splashtop offer a free trial? Splashtop offers a free trial. There is no free version. #### Is Splashtop cloud or on-premises? Splashtop is available as cloud. #### How does Splashtop's annual per-technician price compare to a monthly-billed competitor? Splashtop publishes its price as an annual figure per technician, starting from $259 per technician per year, rather than a monthly rate. To compare it fairly against a monthly-billed remote access tool, divide the annual figure to get a monthly equivalent, and check whether unlimited managed computers are included in both quotes before assuming the lower headline number is actually cheaper. #### Is Splashtop's built-in patch management as capable as a dedicated RMM? No, Splashtop's basic RMM-style features such as patch management are bundled into some plans as an addition to its core remote access product, not built to match a dedicated RMM platform's depth. MSPs wanting serious patch management and monitoring should treat Splashtop primarily as a remote access tool and pair it with a dedicated RMM rather than relying on its bundled extras alone. #### Does Splashtop charge per managed endpoint? No. Most Splashtop business plans include unlimited managed computers under the per-technician licence rather than charging per endpoint on top. This makes cost predictable as a client's device count grows, similar to how Syncro and Hudu price their own per-technician licences elsewhere in this category. #### What PSA integrations does Splashtop offer? Splashtop integrates with several PSA platforms so remote support sessions can be linked to a ticket rather than logged separately. The existing product data on file does not name every supported PSA, so an MSP running a specific platform should confirm current integration support directly with Splashtop before assuming ticket-linking works out of the box. ## Syncro > Combined PSA and RMM priced per technician, with no per-endpoint fee. Syncro is a combined PSA and RMM platform priced per technician with unlimited managed endpoints included, aimed at solo technicians and smaller MSPs, starting at 129 dollars per technician per month. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/syncro - Vendor: Syncro, https://mspsoftware.net/vendors/syncro, website https://syncromsp.com - Categories: PSA and ticketing (primary), RMM and patching - Free trial: yes. Free version: no. - Deployment: cloud. Platforms: Windows and web. HQ: United States. ### From the vendor Syncro combines PSA and RMM in one product: ticketing, contracts and invoicing alongside patch management, scripting and remote access, with unlimited managed endpoints included in the technician licence rather than billed per device. It suits smaller MSPs and solo technicians who want one tool instead of stitching together a separate PSA and RMM, and who value predictable, published pricing over a quote-only sales process. Reported typical customer sizes run from one to five technicians up to six to fifteen, which fits its reputation as a tool aimed at smaller shops rather than larger, more established service desks. Pricing starts at 129 dollars per technician per month, published on Syncro's site, with no separate per-endpoint charge, which makes cost predictable as a client's device count grows. Syncro offers a free trial but no free version once it ends. It integrates with QuickBooks and Xero for accounting, with Stripe for client payments, and with third-party tools including IT Glue for documentation through Zapier and a documented API, though it does not aim to match the deeper enterprise workflow configuration of larger standalone PSAs like ConnectWise PSA. Syncro is based in the United States, and its RMM agent runs on Windows with a web console for the PSA side, so there is no native Mac or Linux agent to plan around today. MSPs evaluating Syncro should confirm that combining PSA and RMM into one tool covers their needs, since a shop that later outgrows the combined approach would need to migrate both systems at once rather than swapping one piece independently. ### Our take Syncro suits a solo technician or small MSP that wants one bill and one login for PSA and RMM together, rather than integrating two separate products. It is a weaker fit for a larger, more established service desk that needs the deeper contract and billing configuration of ConnectWise PSA or Autotask. Because pricing is published and per-technician with unlimited endpoints, it is one of the easier products on this list to budget for without a sales call. Confirm your accounting and documentation integrations, such as QuickBooks or IT Glue, cover your workflow before switching. ### Pricing Syncro starts at US$129.00 per technician per month, according to the vendor (pricing page: https://syncromsp.com/pricing/). ### Features | Feature | Supported | Note | | --- | --- | --- | | Contract and agreement management | yes | | | Billing and invoicing | yes | | | RMM integration | yes | | | Accounting integration | yes | | ### Integrations - QuickBooks, https://quickbooks.intuit.com - Xero, https://www.xero.com - IT Glue, https://mspsoftware.net/software/it-glue Listed products that integrate with Syncro: NinjaOne. ### Alternatives - Autotask: Kaseya's PSA for ticketing, contracts and billing, paired with Datto RMM. 5 out of 5 from 1 review. https://mspsoftware.net/software/autotask - HaloPSA: Service desk, contracts and billing on a per-technician price with no per-user fees. https://mspsoftware.net/software/halopsa - ConnectWise PSA: Ticketing, contracts and billing for a service desk, from ConnectWise. https://mspsoftware.net/software/connectwise-psa ### FAQ #### How much does Syncro cost? Syncro starts at US$129.00 per technician per month, according to the vendor. #### Does Syncro offer a free trial? Syncro offers a free trial. There is no free version. #### What does Syncro integrate with? Syncro integrates with QuickBooks, Xero, IT Glue. #### Is Syncro cloud or on-premises? Syncro is available as cloud. #### Who is Syncro for? MSPs report using Syncro at sizes of 1-5, 6-15 technicians. #### Does Syncro charge extra per endpoint on top of the technician price? No. Syncro's per-technician licence includes unlimited managed endpoints, so there is no separate per-device fee as a client's environment grows. This differs from most standalone RMMs, which charge per managed endpoint, and it is one of Syncro's main selling points for MSPs who want predictable costs as they add client devices without a widening bill. #### Is Syncro better suited to a solo technician or a larger service desk? Syncro is generally aimed at solo technicians and smaller MSPs, with reported typical customer sizes from one to fifteen technicians, rather than larger, more established service desks. Its combined PSA and RMM approach suits a shop that wants one tool instead of integrating two separate products. A larger operation needing deeper contract and billing configuration may find a standalone PSA such as ConnectWise PSA or Autotask a better fit. #### Does Syncro integrate with accounting software? Yes, Syncro integrates with QuickBooks and Xero for accounting and with Stripe for collecting client payments. It also connects to third-party tools including IT Glue for documentation through Zapier and a documented API. MSPs relying on a specific accounting workflow should confirm the integration covers the features they need before switching from an existing PSA. #### Can I trial Syncro before paying? Yes, Syncro offers a free trial so an MSP can test both the PSA and RMM sides hands-on before committing. There is no separate free version once the trial ends; ongoing use requires the published per-technician subscription. MSPs should use the trial period to confirm their existing client devices and workflows migrate cleanly before cancelling any other PSA or RMM subscription. ## ThreatLocker > Default-deny application control and ringfencing to stop what has not been approved. ThreatLocker is an endpoint security product that uses default-deny application control, blocking any application, script or driver that has not been explicitly allowed, combined with ringfencing to limit what approved applications can do. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/threatlocker - Vendor: ThreatLocker, https://mspsoftware.net/vendors/threatlocker, website https://www.threatlocker.com - Categories: EDR and XDR (primary), Vulnerability and compliance - Free version: no. - Deployment: cloud. Platforms: Windows, macOS and web. HQ: United States. Founded: 2017. - Support: 24/7. ### From the vendor ThreatLocker takes a default-deny approach to endpoint security: instead of trying to detect malicious behaviour after it starts, it blocks any application, script or driver that has not been explicitly allowed to run, and ringfences approved applications so they cannot be misused to reach other parts of the system they were not intended to touch. It suits MSPs willing to invest time in building and maintaining allow lists for each client in exchange for stopping unknown threats, including novel ransomware, that signature or behaviour-based detection tools might miss entirely. It is not an install-and-forget product, and MSPs expecting a set-and-leave EDR agent should understand the ongoing policy management involved before adopting it. Pricing is per endpoint per month, quoted through a ThreatLocker account manager rather than published, and it usually includes onboarding support to help build a client's initial allow-list policies rather than leaving an MSP to work out ringfencing rules alone from a blank slate. ThreatLocker integrates with most PSA and RMM platforms for deployment and ticketing, and it also offers a Cyber Hero support team that can help triage and approve new software requests around the clock, so legitimate software is not left blocked for long while a technician is unavailable. Before buying, ask how much ongoing time the Cyber Hero support team is actually expected to save versus how much policy management remains the MSP's own responsibility, since that balance affects the real workload of running a default-deny model across many clients. It is also worth asking how ThreatLocker handles a newly deployed client during the initial learning period, since building an accurate baseline for a new environment typically takes longer than maintaining an already-tuned one. ### Our take ThreatLocker suits MSPs prepared to actively manage allow-list policies per client in exchange for blocking unknown threats that behaviour-based tools can miss, rather than those wanting a set-and-forget agent. The included onboarding support and Cyber Hero team genuinely reduce the ongoing workload, but they do not eliminate it, so confirm how requests for new, legitimate software are handled day to day before committing a client to default-deny. It is a stronger fit for security-conscious clients willing to tolerate some friction from blocked software than for a client that expects zero interruption to how they already work. ### Pricing ThreatLocker does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Behavioural detection | no | | | Automated remediation | no | | | Rollback to pre-attack state | no | | | Application allow-listing | yes | | | RMM integration | yes | | ### Alternatives - Blackpoint Cyber: MDR built around a proprietary SOC platform and a 24-hour analyst team. https://mspsoftware.net/software/blackpoint-cyber - Huntress: Managed EDR with a human-staffed SOC built specifically for MSPs. https://mspsoftware.net/software/huntress - SentinelOne: AI-driven EDR and XDR with autonomous, one-click threat rollback. https://mspsoftware.net/software/sentinelone - Microsoft Defender for Business: Endpoint protection built into the Microsoft 365 Business Premium licence. https://mspsoftware.net/software/defender-for-business ### FAQ #### Does ThreatLocker offer a free trial? There is no free version. #### Is ThreatLocker cloud or on-premises? ThreatLocker is available as cloud. #### Does ThreatLocker require ongoing management, or does it run itself once installed? ThreatLocker requires ongoing policy management, not a one-time setup. Because it blocks anything not explicitly allowed, an MSP needs to build and maintain allow lists per client and handle requests when a user needs new, legitimate software approved. ThreatLocker's included onboarding support and its Cyber Hero team help with this, but they do not remove the need for an MSP to stay involved. #### What does ThreatLocker's Cyber Hero support team actually do? The Cyber Hero team can triage and approve new software requests around the clock, so legitimate software a user needs is not left blocked for long periods when an MSP technician is unavailable. It reduces, but does not eliminate, the ongoing policy management involved in running a default-deny model, since an MSP still sets and reviews the underlying rules. #### What is ringfencing in ThreatLocker, and how is it different from application allow-listing? Allow-listing decides which applications, scripts and drivers are permitted to run at all. Ringfencing then restricts what an already-approved application is allowed to do, such as preventing a legitimate tool from reading unrelated files or launching other processes, so it cannot be misused to reach parts of the system it was not intended to touch even once it is allowed to run. #### Does ThreatLocker include help setting up initial policies? Yes, ThreatLocker pricing usually includes onboarding support to help build a client's initial allow-list and ringfencing policies rather than leaving an MSP to design them from a blank slate. This is significant given how much of running ThreatLocker well depends on getting the initial policy set right, so confirm what onboarding support is actually included at the quoted price. ## Todyl > A single SASE-style agent bundling network security, EDR and identity. Todyl is a security platform built around a single agent and dashboard that bundles SASE-style network security, endpoint detection and response, a managed SOC, DNS filtering and identity monitoring into modules an MSP enables as needed. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/todyl - Vendor: Todyl, https://mspsoftware.net/vendors/todyl, website https://www.todyl.com - Categories: MDR and SOC (primary), Identity and access, DNS and web filtering - Deployment: cloud. Platforms: Windows, macOS and web. HQ: United States. Founded: 2019. ### From the vendor Todyl is a security platform built around a single agent and one dashboard, combining a secure global network built in a SASE style, endpoint detection and response, a managed security operations centre, DNS and web filtering, and identity monitoring into modules an MSP switches on as needed rather than buying several separate point products from different vendors. It suits MSPs who want to consolidate a stack of two or three overlapping security vendors into one agent and one bill, at the cost of some depth in any single module compared with a best-of-breed specialist tool built to do only that one thing. An MSP already happy with a specific standalone EDR or filtering product may not gain much by switching to Todyl's version of the same module. Pricing is per user or per endpoint per month depending on which modules are enabled, quoted to MSP partners rather than published as a fixed list price, so the total cost depends on how many of the available modules a given client actually needs. Todyl integrates with major PSA platforms for ticketing and billing, and its managed SOC service can be run by Todyl's own analysts or handed to the MSP's own team, so it fits both a fully outsourced security offering and a more hybrid model where the MSP retains some of the response work. Before buying, list out exactly which modules are needed for a given client, since pricing scales with modules enabled, and confirm whether the SOC is being run by Todyl or by the MSP's own staff, since that changes both cost and who is responsible for responding to an alert. ### Our take Todyl suits MSPs who currently run two or three overlapping security tools and want to consolidate onto one agent and one bill, accepting some trade-off in depth per module for that simplicity. It is a weaker fit for an MSP that is already happy with a specific best-of-breed EDR or filtering product and does not want to migrate away from it. Because pricing depends on which modules are enabled, work out the actual module list needed for a client before asking for a quote. Confirm whether the managed SOC option is run by Todyl or handed to the MSP's own team, since that changes both the price and who is on the hook during an incident. ### Pricing Todyl does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | 24-hour human-staffed SOC | yes | | | Own endpoint telemetry agent | yes | | | Identity threat detection | yes | | | Network monitoring | yes | | | PSA integration for ticketing | yes | | | Works with third-party EDR | no | | ### Alternatives - Huntress: Managed EDR with a human-staffed SOC built specifically for MSPs. https://mspsoftware.net/software/huntress - Blackpoint Cyber: MDR built around a proprietary SOC platform and a 24-hour analyst team. https://mspsoftware.net/software/blackpoint-cyber - ConnectSecure: Vulnerability scanning and compliance evidence built for MSPs to run across clients. https://mspsoftware.net/software/connectsecure - SentinelOne: AI-driven EDR and XDR with autonomous, one-click threat rollback. https://mspsoftware.net/software/sentinelone ### FAQ #### Is Todyl cloud or on-premises? Todyl is available as cloud. #### Can an MSP buy just one Todyl module, or does it require the full platform? Todyl's network security, EDR, managed SOC, DNS and web filtering, and identity monitoring are separate modules an MSP switches on as needed rather than a single all-or-nothing platform purchase. Pricing is per user or per endpoint per month depending on which modules are enabled, so a client only needing one or two modules is not forced to pay for the rest. #### Is Todyl's managed SOC run by Todyl or by the MSP? Either. Todyl's SOC service can be run entirely by Todyl's own analysts for a fully outsourced security offering, or handed to the MSP's own team for a more hybrid model where the MSP retains some of the response work. Which option applies changes both the price and who is responsible for responding to an alert, so confirm this before buying. #### Does Todyl integrate with an MSP's existing PSA? Todyl integrates with major PSA platforms for ticketing and billing, so alerts and module usage can flow into an existing service desk workflow rather than a separate console only. Confirm current integration support for the specific PSA in use, since depth of integration can vary between platforms. #### Is Todyl cheaper than buying separate security point products? It depends on how many modules a client actually needs, since Todyl is priced per user or per endpoint per module enabled rather than a flat all-in fee. For an MSP currently paying for two or three overlapping tools, consolidating onto Todyl's modules can simplify billing, but a direct cost comparison requires quoting the specific modules needed rather than assuming a blanket saving. ## Vanta > Automates the evidence collection behind SOC 2 and similar compliance frameworks. Vanta is a compliance automation platform that connects to a company's cloud, identity and device tools to collect evidence and monitor controls continuously for frameworks such as SOC 2, ISO 27001 and HIPAA. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/vanta - Vendor: Vanta, https://mspsoftware.net/vendors/vanta, website https://www.vanta.com - Categories: Vulnerability and compliance (primary), Identity and access - Deployment: cloud. Platforms: web. HQ: United States. Founded: 2018. ### From the vendor Vanta automates much of the evidence collection and continuous monitoring behind compliance frameworks such as SOC 2, ISO 27001 and HIPAA, connecting to a company's cloud, identity and device tools to check controls automatically instead of a team gathering screenshots by hand ahead of an audit. It suits MSPs pursuing their own compliance certification to win larger clients who require it in a vendor questionnaire, and MSPs advising client businesses, often software or services companies, that need to pass a customer's security review or complete a formal audit themselves. It suits organisations of most sizes, though the per-year, scope-based pricing tends to favour those that can commit to a defined framework and integration list up front rather than one still working out its exact compliance requirements. Pricing is per year, based on which frameworks and how many integrations a company needs, quoted through a Vanta sales conversation rather than published as a fixed list price, so cost varies considerably by scope and should be confirmed directly before quoting a client. Vanta integrates with a wide range of cloud, identity and HR systems, including AWS, Google Workspace, Microsoft 365 and Okta, to pull evidence automatically, and works alongside, rather than replaces, a client's existing security tools such as EDR or vulnerability scanning. MSPs considering Vanta for a client, or for their own compliance programme, should check which of the actual tools in use are on Vanta's supported integration list, since a system without a native integration still needs manual evidence collection, reducing the automation benefit that is the main reason to buy it. ### Our take Vanta suits MSPs pursuing their own compliance certification to win enterprise clients, and MSPs advising client businesses that need to pass a customer's security questionnaire or a formal SOC 2 or ISO 27001 audit. Because pricing depends on frameworks and integration count and is not published, get a scoped quote before committing a client to it. Check the client's actual tool stack against Vanta's supported integrations first, since a tool without native support still needs manual evidence gathering. ### Pricing Vanta does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Network vulnerability scanning | no | | | Missing patch detection | no | | | Compliance framework mapping | yes | | | Dark web monitoring | no | | | External attack surface scanning | no | | | Automated evidence collection | yes | | ### Integrations - Microsoft 365, https://www.microsoft.com/en-us/microsoft-365 - Okta, https://www.okta.com ### Alternatives - ConnectSecure: Vulnerability scanning and compliance evidence built for MSPs to run across clients. https://mspsoftware.net/software/connectsecure - Augmentt: Discovers shadow SaaS and manages Microsoft 365 licensing and security across tenants. https://mspsoftware.net/software/augmentt - CIPP: Open-source multi-tenant console for managing and securing Microsoft 365. https://mspsoftware.net/software/cipp - ThreatLocker: Default-deny application control and ringfencing to stop what has not been approved. https://mspsoftware.net/software/threatlocker ### FAQ #### What does Vanta integrate with? Vanta integrates with Microsoft 365, Okta. #### Is Vanta cloud or on-premises? Vanta is available as cloud. #### Does Vanta replace a client's existing security tools? No. Vanta works alongside a client's existing security tools, such as EDR or vulnerability scanning, pulling evidence from them rather than replacing them. It is a compliance automation and evidence collection layer, not a security product in its own right, so an MSP still needs the underlying tools Vanta is monitoring. #### Which compliance frameworks does Vanta support? Vanta supports frameworks including SOC 2, ISO 27001 and HIPAA, automating much of the evidence collection and continuous control monitoring each one requires. Exactly which frameworks are included depends on the pricing tier a company buys, since Vanta is priced per year based partly on which frameworks are in scope. #### Can an MSP use Vanta for its own compliance, not just a client's? Yes. MSPs use Vanta both ways: to pursue their own SOC 2 or similar certification when a larger client's procurement process requires it, and to help client businesses, often software or services companies, pass their own customer security reviews or audits. The pricing and setup are the same either way. #### What happens if a tool in the stack has no native Vanta integration? Vanta automates evidence collection only for systems on its supported integration list, which includes major cloud, identity and HR platforms such as AWS, Microsoft 365 and Okta. A tool without a native integration still needs evidence gathered manually, which reduces the time saving that is the main reason to buy Vanta in the first place. ## Veeam > Backup and recovery for servers and virtual machines, run by the MSP or through a partner. Veeam is backup and replication software for virtual machines, physical servers and cloud workloads, run by the MSP on its own infrastructure or resold through a distributor as part of an MSP's backup-as-a-service offering. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/veeam - Vendor: Veeam, https://mspsoftware.net/vendors/veeam, website https://www.veeam.com - Categories: Backup and disaster recovery (primary), Microsoft 365 and Google Workspace backup - Deployment: on-premises. Platforms: Windows and web. Founded: 2006. ### From the vendor Veeam is backup and replication software for virtual machines, physical servers and cloud workloads, widely used both by MSPs running their own backup infrastructure for clients and by larger IT teams managing it in-house. Its image-based, application-aware backup is built specifically around VMware and Hyper-V, so it suits environments already standardised on one of those hypervisors more than mixed or niche virtualisation setups. MSPs who want to own the backup repository themselves, rather than depend entirely on a vendor's cloud storage, are a natural fit, since Veeam is commonly resold under an MSP's own backup-as-a-service offering with the MSP controlling where data is stored. A separate Veeam product covers Microsoft 365 backup for mailboxes, OneDrive and SharePoint, distinct from the core server and VM product. Pricing is per socket or per workload depending on the product line, and it is typically sold through a distributor rather than published as a simple per-seat figure, since most MSPs are pricing their own backup-as-a-service offering built on top of it rather than reselling a fixed retail price. Veeam integrates with most major storage, hypervisor and cloud platforms, and MSPs commonly layer their own PSA ticketing and monitoring around Veeam's own alerting and reporting console rather than getting alerts inside a single unified dashboard out of the box. Before buying, confirm current licensing terms with a Veeam distributor for the specific product line needed, core backup, Microsoft 365 backup, or both, and check what integration work is required to route Veeam's own alerts into an existing PSA, since that is not automatic. ### Our take Veeam suits MSPs who want to run and own their backup infrastructure rather than depend on a vendor-hosted cloud service, and who are already standardised on VMware or Hyper-V. It is less of a fit for an MSP that wants a single cloud console covering servers, endpoints and Microsoft 365 in one place without separate licensing and separate alerting to manage. Because pricing runs through a distributor rather than a published list, get a specific quote for the actual mix of sockets, workloads and any Microsoft 365 seats needed before comparing it against a fully cloud-hosted competitor. ### Pricing Veeam does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Image-based backup | yes | | | Cloud storage included | no | | | Application-aware backup | yes | | | VMware and Hyper-V support | yes | | ### Alternatives - Cove Data Protection: N-able's cloud-first backup for servers, workstations and Microsoft 365. https://mspsoftware.net/software/cove-data-protection - Datto BCDR: Backup appliance with image-based server backup and instant local or cloud virtualisation. https://mspsoftware.net/software/datto-bcdr - Dropsuite: SaaS backup for Microsoft 365 and Google Workspace, sold through MSP partners. https://mspsoftware.net/software/dropsuite ### FAQ #### Is Veeam cloud or on-premises? Veeam is available as on-premises. #### Does Veeam require the MSP to run its own backup infrastructure? Veeam is typically run by the MSP on its own backup repository rather than delivered as a fully hosted cloud service, which is different from cloud-first backup products. Many MSPs resell it as part of their own backup-as-a-service offering, controlling where the data is stored, though this means the MSP is responsible for the storage infrastructure Veeam backs up to, not just the software licence. #### Does Veeam back up Microsoft 365 as well as servers? Server and virtual machine backup and Microsoft 365 backup for mailboxes, OneDrive and SharePoint are separate Veeam products with their own licensing, not one bundled package. An MSP that needs both should confirm pricing and licensing for each product line separately with a Veeam distributor, since they are not automatically included with one another. #### Does Veeam work with hypervisors other than VMware and Hyper-V? Veeam's image-based, application-aware backup is built specifically around VMware and Hyper-V, so it is the strongest fit for environments already standardised on one of those two. MSPs running other or mixed virtualisation platforms should confirm current hypervisor support directly with Veeam or a distributor before assuming full feature parity. #### Does Veeam alert into a PSA automatically? Not out of the box. Veeam has its own alerting and reporting console, and MSPs commonly layer their own PSA ticketing and monitoring on top of it rather than getting tickets created automatically without configuration. Anyone evaluating Veeam should check what integration work, scripting or a third-party connector, is required to route its alerts into the PSA already in use. ## Zomentum > Quoting, proposals and e-signature built for the MSP sales process. Zomentum is a quoting and proposal platform built for the MSP sales process, with e-signature, payment collection and live distributor pricing catalogues aimed at replacing static, spreadsheet-based quotes. Listing updated 5 September 2026. Checked by MSP Software 3 September 2026. - Page: https://mspsoftware.net/software/zomentum - Vendor: Zomentum, https://mspsoftware.net/vendors/zomentum, website https://www.zomentum.com - Categories: Quoting and CPQ (primary), Billing and reconciliation - Deployment: cloud. Platforms: web. HQ: United States. Founded: 2020. ### From the vendor Zomentum builds quotes and proposals with built-in e-signature and payment collection, aimed specifically at the MSP sales process, pulling in product and pricing catalogues from distributors so a technician is not typing vendor pricing in by hand. It suits MSPs who currently send quotes as static documents or spreadsheets and want a faster, more consistent proposal process with a clear audit trail of what was sent, viewed and signed. Pricing is per user per month, quoted through a Zomentum sales conversation rather than a single published figure, with tiers based on how much of the CRM and automation functionality is included beyond basic quoting. It integrates with major distributors for live product and pricing catalogues, with PSA platforms including ConnectWise and Autotask for client and contact sync, and with accounting tools for invoicing once a deal closes, so a signed quote can flow through to billing without re-entering data. MSPs evaluating Zomentum should confirm which distributor catalogues are actually live and current for their own vendor relationships, since the value of automatic pricing depends entirely on that data being accurate, and should check whether the CRM and automation features they want sit in a higher tier than basic quoting before assuming the entry price covers them. It is also worth asking for a demo built around a real quote from your own catalogue rather than a generic sample, since the practical time saved depends heavily on how well Zomentum's distributor data actually matches what you sell day to day, and on how quickly staff adapt to a new proposal tool. ### Our take Zomentum's real value is cutting the manual work of typing distributor pricing into a quote by hand, so its usefulness depends on your specific distributors being well supported. Confirm that before assuming the automation will save time. It suits MSPs replacing static, spreadsheet-based quoting with something that tracks what a prospect actually opened and signed. Basic quoting and full CRM automation are priced differently, so check which tier you actually need. Ask for a demo against your own product catalogue rather than a generic one. ### Pricing Zomentum does not publish a list price. ### Features | Feature | Supported | Note | | --- | --- | --- | | Proposal and quote builder | yes | | | E-signature | yes | | | Live distributor catalogue and pricing | yes | | | CRM and pipeline tracking | yes | | | PSA integration | yes | | | Payment collection | yes | | | Accounting integration | yes | | ### Integrations - ConnectWise PSA, https://mspsoftware.net/software/connectwise-psa - Autotask, https://mspsoftware.net/software/autotask ### Alternatives - Gradient: Reconciles vendor and distributor billing against what each client should be charged. https://mspsoftware.net/software/gradient - ScalePad: Turns asset age and warranty data into lifecycle reports for QBRs. https://mspsoftware.net/software/scalepad ### FAQ #### What does Zomentum integrate with? Zomentum integrates with ConnectWise PSA, Autotask. #### Is Zomentum cloud or on-premises? Zomentum is available as cloud. #### Which distributors does Zomentum pull live pricing from? Zomentum integrates with major distributors for live product and pricing catalogues, though the existing product data on file does not name every supported distributor individually. Since the value of automatic pricing depends entirely on an MSP's own distributor relationships being covered, MSPs should confirm their specific distributors are live and current before relying on automated catalogue pricing in a quote. #### Does Zomentum replace a PSA's own quoting feature? Zomentum is a dedicated quoting and proposal tool that integrates with PSA platforms including ConnectWise and Autotask for client and contact sync, rather than replacing the PSA itself. MSPs use it alongside their existing PSA specifically for the quoting, e-signature and payment collection steps of the sales process. #### What CRM features does Zomentum include beyond basic quoting? Zomentum offers CRM and sales automation functionality in addition to basic quoting, but this sits in a higher pricing tier than the entry-level quoting features according to the product data on file. MSPs should confirm during a Zomentum sales conversation exactly which CRM and automation features are included at their quoted price before assuming the entry tier covers them. #### Can a client pay an invoice directly through a Zomentum quote? Yes, Zomentum includes built-in payment collection alongside e-signature, so a client can sign and pay from the same document rather than receiving a separate invoice afterward. It also integrates with accounting tools so a signed, paid quote can flow through to billing without the MSP re-entering the data. ## Feeds - [New and updated listings](https://mspsoftware.net/feed.xml): Atom, 50 most recently updated listings. - [Newly published reviews](https://mspsoftware.net/reviews/feed.xml): Atom, 50 most recent reviews, rating and product only. ## About the data - [How reviews work](https://mspsoftware.net/how-reviews-work): moderation and incentive rules. - [Why reported pricing](https://mspsoftware.net/why-reported-pricing): aggregates from 3 or more independent reporters only. - [About](https://mspsoftware.net/about): who runs the site. ## Optional - [API, feeds and MCP server](https://mspsoftware.net/api) - [For vendors](https://mspsoftware.net/for-vendors) - [Privacy](https://mspsoftware.net/privacy) - [Cookies](https://mspsoftware.net/cookies) - [Terms](https://mspsoftware.net/terms)