CyberQP is a cloud-based zero trust access management platform combining privileged access management and end-user access management, priced per endpoint with 30-day free trial, designed for MSP service desks.
Listing updated . Checked by MSP Software .
CyberQP is a zero trust access management platform from CyberQP for service desks and IT operations teams managing multiple customer environments. It combines privileged access management (QGuard) to rotate and vault local admin and service account passwords across managed endpoints, and end-user access management (QDesk) to verify caller identity before help desk support is given and enable just-in-time admin rights elevation for end users. It suits MSPs reducing standing admin access and implementing cyber insurance or compliance requirements that mandate documented help desk identity verification and privileged credential control. The platform has been adopted by over 1,200 MSPs worldwide for automating the rotation of local admin passwords, eliminating shared credentials, and preventing social engineering attacks against help desks through verification of support requests.
Pricing is per managed endpoint with a minimum of 500 endpoints, quoted directly through their account team rather than published; a 30-day free trial is available without requiring a credit card. CyberQP integrates with major RMM platforms including NinjaOne, Datto RMM, ConnectWise Automate and N-able N-central through pre-built deployment scripts, PSA ticketing tools such as ConnectWise PSA, Datto AutoTask and HaloPSA, documentation platforms including IT Glue and Hudu, and identity providers such as Microsoft Active Directory, Microsoft 365 and Entra ID. The platform also supports Microsoft Intune and PowerShell deployment for organizations not using the listed RMM platforms. It runs as a cloud-hosted SaaS platform with no on-premises option. CyberQP is based in Vancouver, British Columbia. MSPs should obtain a current per-endpoint quote based on their endpoint count before committing, and confirm that their specific RMM and ticketing tools are on the current integration list, as coverage can change.
Microsoft Entra ID Cloud identity and SSO platform for Microsoft 365 and cloud applications, priced per user monthly. No reviews yet · from £5.40 vs Microsoft Entra ID
Cisco Duo Multi-factor authentication and device trust for logins and VPNs. No reviews yet · from US$3.00 vs Cisco Duo| Feature | Supported | Note |
|---|---|---|
| Multi-factor authentication | yes | QGuard and QDesk both use number-matching multi-factor authentication and support Microsoft Authenticator push notifications for verification. |
| Single sign-on | no | CyberQP integrates with SSO providers but does not provide native SSO functionality. |
| Conditional access and device trust | yes | Just-in-time access and just-in-time admin rights elevation provide conditional privilege access based on context and need. |
| Privileged access management | yes | Core feature via QGuard: automated password rotation, credential vault, account discovery, just-in-time access to eliminate persistent standing privilege. |
| Passwordless and passkey support | yes | QGuard offers passwordless authentication for IT professionals using number-matching multi-factor authentication. |
| Directory sync | no | Integrates with Microsoft Active Directory and Entra ID but does not provide native directory synchronization. |
| Session and risk monitoring | yes | Account discovery and remediation features identify overprivileged and orphaned accounts to prevent privilege sprawl. |
| Legacy VPN and app support | yes | Supports Windows Local Accounts and legacy ticketing system integration for service desk environments. |
| Self-service password reset | yes | QDesk includes self-serve password reset and account management capabilities integrated with PSA ticketing systems. |
| Breach monitoring | no | |
| RADIUS and SAML support | unknown | Integrates with identity providers but does not explicitly document native RADIUS or SAML support in published materials. |
| Admin audit log | yes | Maintains role-based access controls and comprehensive audit trails for all privileged access and identity verification events. |
| Feature | Supported | Note |
|---|---|---|
| Shared team vaults | yes | QGuard credential vault stores shared privileged accounts and break-glass credentials for team access. |
| Role-based access control | yes | Implements role-based access controls and least privilege for all privileged account access. |
| Breach monitoring | no | |
| Password health reports | unknown | Provides compliance framework mappings but password health reports not explicitly documented. |
| SSO integration | yes | Integrates with Microsoft Entra ID and other identity providers for access federation. |
| FIDO2 and hardware key support | unknown | Uses number-matching MFA and Authenticator support but FIDO2 hardware key support not explicitly documented. |
| Secrets management | yes | QGuard credential vault stores and rotates service account and break-glass passwords with automated rotation. |
| Browser extension | no | Platform integrates with PSA and documentation tools but does not offer a native browser extension. |
| Mobile app | unknown | Mobile support for verification methods (push notifications) but native mobile app not explicitly documented. |
| Event logging and audit trail | yes | Comprehensive audit trail for all access events, credential usage, and compliance reporting. |
| Emergency access | yes | Break-glass accounts and break-glass password rotation are core QGuard features for emergency access scenarios. |
| Multi-tenant MSP console | yes | Platform is designed for MSP multi-tenant model with separate console access per customer environment. |
CyberQP combines privileged access management and end-user access management for service desks and IT teams managing multiple customer environments. The platform rotates and vaults local admin and service account passwords automatically, removes standing admin privileges by granting just-in-time elevated access only when needed, verifies the identity of callers before a technician provides help desk support to prevent social engineering attacks, and enables just-in-time admin rights elevation for end users within the ticketing system. It is designed to help MSPs reduce cyber insurance premiums and comply with security frameworks such as NIST 800-53 and CIS V8.
CyberQP is priced per managed endpoint with a minimum of 500 endpoints, and custom quotes are provided based on your specific environment. All pricing is quoted directly through a CyberQP account manager rather than published on their website. A 30-day free trial is available without requiring a credit card, so MSPs can evaluate the platform before committing to a paid plan.
CyberQP integrates with major RMM platforms including NinjaOne, Datto RMM, ConnectWise Automate and N-able N-central, and with PSA ticketing tools such as ConnectWise PSA, Datto AutoTask and HaloPSA. It also connects to documentation platforms including IT Glue and Hudu, and identity providers such as Microsoft Active Directory and Entra ID. MSPs should confirm their specific RMM and ticketing tools are on the current integration list before purchasing, as integration coverage can change.
CyberQP's identity verification feature in QDesk protects service desks against social engineering and impersonation attacks by requiring the caller to verify their identity through SMS, email, push notification or Microsoft Authenticator before a technician grants access or resets passwords. This addresses a common attack vector where bad actors impersonate employees over the phone to trick help desk staff into resetting passwords or granting access, which several MSPs have experienced after security incidents or been asked about by cyber insurers.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review
