RMM, remote support, security, and GRC in one agent
The RMM and security platform built by auditors, for MSPs and IT teams.
Lavawall® is a multi-tenant RMM and remote support platform for MSPs and IT teams, with patching, security monitoring, Microsoft 365 and Google Workspace breach detection, and compliance built into the same agent and console. Run your clients' computers or your own, with training and phishing simulations and evidence for over 160 compliance frameworks. Month-to-month, start with one module, and escalate to CISSP/CISA experts when you need a human.
Last updated
- Live in minutes, not months
- Month-to-month, cancel anytime
- Add modules as you grow
- Replace your other tools at your own pace
Start free trial. No credit card Log in
I run an MSP → · I'm on an internal IT team →
Checks email, TLS, DNS, open services, WordPress, and accessibility. Scan only domains you own or have permission to assess.
14-day full trial · 2 domains scanned free forever · cancel any month · also in Canadian French
Built by ThreeShield, the CISSP/CISA cybersecurity auditors who have served Calgary MSPs, startups, and European manufacturers since 2006. Scripts ThreeShield licensed to a major aerospace manufacturer later became part of Lavawall®.
When things go wrong
Start with the problem in front of you
Someone clicked a phishing link
The first-hour checklist, then one-click reporting that gives the person plain-English risk feedback, and follows up with training so it doesn't happen twice.
A Microsoft 365 account was compromised
Revoke access, investigate, and recover, then let Lavawall correlate risky sign-ins, OAuth grants, and mailbox rules automatically.
An employee is leaving with your files
Preserve evidence before the account dies, and see every mass download and external share from the last 60 days.
Worried about ransomware right now
The warning signs, what to do in the first hour, and active Akira IOC hunting across your fleet.
Your RMM renewal quote just arrived
High-water-mark billing again? Get better insights, more patching, faster remote access, and automatic endpoint log reviews, month-to-month.
RMM makes your techs hunt for what's actually wrong?
A technician shouldn't have to dig for the cause. Lavawall® tells them the moment they connect: high temperature, missing patches, a pending reboot, failed system integrity, disk trouble, and the processes hogging CPU, memory, or disk. Issues get fixed on first contact instead of the third callback.
A client sent a security questionnaire
Stop guessing on answers that become contractual. Map questions to controls you already have, or can turn on today.
Cyber insurance renewal is due
Scan yourself before the insurer does, and answer the questionnaire truthfully.
Hit with a compliance fire-drill?
Lavawall®'s GRC engine auto-maps your controls to over 160 Canadian, US, European, UK, Australian, and international frameworks, and generates the policies and documentation to get you compliant fast.
Concerned about shadow IT and AI use?
Lavawall® SaaS Discovery matches email metadata against 1,277 SaaS and AI apps, shows who signed up, and lists the AI agents on your managed Windows computers.
Everything you need, on one agent
Start with the module that solves this month's problem. Each runs on the same Lavawall® agent and console.
Run IT
Monitoring, scripting, and patching for 7,400+ apps, with remote support that tells techs what is wrong the moment they connect.
Protect endpoints and the cloud
Breach detection for Microsoft 365 and Google Workspace, admin elevation without a kernel driver, and backup.
Secure AI use
See shadow AI sign-ups and the AI agents on your computers, and govern them with six AI frameworks.
Train people
Courses for each person's industry, region, and role, safe phishing simulations, and one-click reporting.
Prove compliance
Controls mapped to over 160 frameworks with evidence collected as you work.
See your outside
Free external scans of email, web, DNS, WordPress, and accessibility.
When you're ready
Replace the stack. Keep one bill.
The same platform that lands as one module can replace your RMM, GRC platform, patch tool, cloud monitoring, shadow-IT discovery, admin elevation, remote support, and helpdesk. That means one console, one vendor, and one line on the budget.
One console means one clear bill: month to month, no minimum for single modules, and never a charge based on a "high water mark" from a busier month gone by. Teams that consolidate retire overlapping subscriptions, and the licensing math, integration glue, and finger-pointing that came with them.
Because every module writes to the same GRC core, everything it sees (patch state, breach signals, configuration changes, and access) becomes timestamped compliance evidence automatically. Compliance reporting turns into a by-product of running the platform, and breaches and vulnerabilities surface faster because the signals sit in one place.
Full coverage across Windows, macOS, Linux, Microsoft 365, Entra / Azure, Google Workspace, and Active Directory, so nothing gets dropped when you consolidate.
Software plus real experts
Talk to a real security expert when something needs a human.
Lavawall® is built by ThreeShield, the CISSP/CISA cybersecurity auditors who have served Calgary MSPs, startups, and European manufacturers since 2006. Scripts ThreeShield licensed to a major aerospace manufacturer later became part of Lavawall®. When something needs a human, you escalate to the people who wrote the detection.
Every paid plan includes chat with senior security professionals, not a first-line triage analyst reading from a script, and Grow, Professional, and Complete add scheduled calls.
Pricing that respects how you actually buy
Start with one module
Land with the module that solves today's problem. No platform commitment, no bundle you don't need.
Month-to-month, start with one module
No long-term contracts. Costs decrease as you grow, and we'll never bill you on a bogus "high water mark" from months ago.
Annual saves two months, and spikes don't stick
Pay annually and two months are free. Go over what you prepaid in a busy month and you're billed the difference for that month only, and it drops back when your usage does. You're never locked to a past peak.
Free to try, free to scan
14-day full trial without a credit card, and 2 domains scanned free forever with Scout.
Plain dealing, and good for the community
Published prices, honest advice, and your data is yours to export and leave with. Registered not-for-profits get 50% off. See Community Good.
Running an MSP?
Multi-tenant from day one: per-client billing, all-clients views for alerts, phishing results, and AI agents, a white-label domain scanner, and written rules of engagement that protect your registered deals.
Internal IT team?
Same platform, one organization. Buy only the modules you need as Individual Services, start with the Training & Phishing plan on its own, and escalate to ThreeShield's CISSP/CISA team when something needs a human.
For internal IT → Individual Services → Training & Phishing plan →
What you're actually buying
Never be surprised by your own environment again
Know before your boss, your auditor, or the attacker does. Lavawall® hands you the findings that make you look good: "we found 17 risky mailbox rules", "here's the software nobody was patching", and "here's exactly who accessed Finance."
Quiet mornings
Alerts arrive triaged and prioritized, not as a wall of noise. You open the dashboard, see what actually matters, and get on with your day.
Audit-day calm
When the auditor or insurer asks, the evidence is already collected. No weekend scramble, no guessing which box is safe to tick.
Someone behind you
When something's genuinely weird at 4pm on a Friday, you're not alone: a CISSP who's seen it before picks up.
Frequently asked questions
Does Lavawall replace my RMM?
Yes. Lavawall is a multi-tenant RMM and remote support platform. Patching for more than 7,400 applications, scripting, monitoring, and browser-based remote support run on the same agent and console as security monitoring, breach detection, and compliance. You do not have to switch overnight: install Lavawall through NinjaOne, Datto RMM, Atera, ConnectWise Automate, N-able, Kaseya, Syncro, or any tool that runs a script, and run both while you move over.
Does Lavawall have a free tier?
Yes. Scout scans 2 domains free, forever. Paid plans add scheduled scans, alerts, and PDF, Word, and emailed reports: Grow includes 1 domain, Professional 5, and Complete 25, and extra domains are C$15 / US$12 each per month. The whole platform also has a 14-day free trial with no credit card.
Can I buy just one module?
Yes, that is the intended way to start. Begin with the module that solves this month's problem and add more later. Lavawall billing is month-to-month, with no high-water-mark billing and no minimum for single modules.
What happens when I need a human expert?
Every paid Lavawall plan includes chat with senior security professionals at ThreeShield, the CISSP/CISA team that builds Lavawall, and Grow, Professional, and Complete add scheduled calls. For deeper work, ThreeShield consulting is available by the hour.
Does Lavawall include phishing simulation and security awareness training?
Yes. The Lavawall Training & Phishing plan includes 556 courses matched to industry, region, and role, phishing simulations for Microsoft 365 and Google Workspace, the Outlook Phishing Reporter, and certificates with CPE time tracking, for C$1.95 / US$1.50 per user per month. Subscribe on its own, add it to any plan, or get it in Complete.
How does Lavawall help secure AI use?
Lavawall shows which AI apps staff signed up for, which AI agents are installed on managed Windows computers and what they can reach, which AI apps can read mail and files in Microsoft 365 and Google Workspace, and which AI services are exposed to the internet. It does not protect AI models or applications you build.
Does the free Lavawall scan check WordPress sites?
Yes. The Lavawall domain scan checks WordPress core, plugins, and themes from outside the site, flags publicly disclosed vulnerabilities and abandoned plugins, and also covers email authentication, TLS, DNS, open services, and accessibility. Scan only domains you own or have permission to assess.
Does Lavawall include a password manager?
Yes. The Lavawall Vault is encrypted in your browser before anything reaches Lavawall's servers, with shared vaults, one-time codes, and a Chrome extension. It is C$2.10 / US$1.50 per user per month and included in Professional and Complete.
Datto and Datto RMM are trademarks of Kaseya. NinjaOne is a trademark of NinjaOne, LLC. Lavawall is not affiliated with either.