📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

About

Built by an audit firm, priced like a tool

Lavawall® is a multi-tenant RMM and remote support platform for MSPs and IT teams, with patching, security monitoring, Microsoft 365 and Google Workspace breach detection, and compliance built into the same agent and console. It is built and run by ThreeShield Information Security Corporation, a 100% Canadian-owned federal corporation based in Calgary, Alberta.

Why Lavawall exists

Lavawall® came out of two decades of audit work. Three problems kept showing up, and none of the available tools solved them well.

The applications that cause breaches went unpatched

Two years after the LastPass breach traced back to a missing Plex Media Server update, we still found industry-specific applications going unpatched in the environments we audited. That left MSPs and their clients exposed to audit findings and breaches over software nobody was watching.

The same audit findings came back year after year

After twenty years writing up the same configuration and PCI compliance findings, our technical co-founder wanted to prevent them instead of documenting them again. Lavawall® turns those repeated findings into checks that run continuously.

Insurance scanners only saw the surface

The risk tools underwriters used gave a shallow view of Internet-facing exposure, scoring the outside of the building and little else. Businesses needed something deeper to actually prevent a breach.

What Lavawall watches

One agent and one console cover a wide surface so you are not stitching point tools together:

  • Windows, macOS, and Linux configuration
  • Application and OS patches across all three platforms, over 7,400 applications
  • Hardware health, including battery, disk, and fan
  • Performance metrics: CPU, RAM, network, temperature, and drive capacity
  • Domain, web, CMS, and email security
  • Hardware replacement priorities
  • Over 30 object types across Microsoft 365, Entra ID, and Azure configuration
  • Email risk profiles that go beyond phishing detection

Cybersecurity that can pay for itself

Because Lavawall® catches insurable risks early and plans hardware refreshes before machines fail, it can offset its own cost. Clients have reported cyber insurance premiums 12% lower after addressing insurable risks ahead of renewal, and a 5 to 20% drop in unexpected urgent workstation replacements through proactive refresh planning.

Canadian, and built to stay that way

ThreeShield is a 100% Canadian-owned federal corporation in Calgary. Databases and the console run on AWS in Montréal, Quebec, by default, moving to a Canadian-owned hosting provider in Vancouver in Q4 2026. The software is compiled in Calgary. Agent files are stored in Cloudflare and hold no client data. Data can also be hosted in the United States, Europe, or Australia. Billing is native CAD with GST, so there are no foreign-exchange surprises.

Community impact and social good

Good security should not be a luxury only well-funded organizations can afford. Registered not-for-profits and charities get 50% off the whole Lavawall® platform under our Community Good initiative, and ThreeShield gives 10% of its consulting back to registered charities. See not-for-profits and charities for who qualifies and the sector-specific training and compliance we build for them.

Work with the team behind it

ThreeShield offers Tier 3 cybersecurity augmentation, audit defence, and readiness work for MSPs and lean IT teams.

About ThreeShield →

Start with Lavawall

Scan two domains free, then add the one module you need. No credit card to start.

Start free →

All features · Guides & glossary · Privacy · Terms