Abuse prevention
How Lavawall prevents abuse.
Lavawall® gives IT providers powerful tools to support and protect the computers they manage. Tools like these must never be turned against the people they are meant to protect, so Lavawall is built to make misuse hard, visible and quickly reported.
Installers that refuse to be used as bait
A Lavawall installer that has been renamed to look like an invoice, a PDF, a voicemail or another email attachment will not install. It tells the person that the file was renamed for a phishing attack, shows a code they can include in a report, and points them to our abuse report page. Lavawall is alerted at the same moment, even if the person never sends a report.
A clear warning before anything is installed
When a person installs Lavawall themselves, the installer first explains that Lavawall is a business cybersecurity and IT support tool and shows which IT provider and organization requested the installation. They have 15 seconds to cancel, with the countdown easy to pause, and a cancelled installation is reported to us. Installations done by an IT team’s deployment tools are not slowed down.
Consent before anyone sees a screen
On-demand remote support starts only with a support code from the person’s own IT provider, and the person is asked to allow each connection before a technician can see their screen. They can end the session at any time.
Limits on new accounts
Accounts without billing set up can add only a few computers, so a free account cannot be used to take over a large number of machines. Organizations can also require an enrolment token, so only installations that carry their token can join.
Verified, accountable access
- Lavawall’s Windows installers and agents are digitally signed, so people and security tools can confirm they come from us and have not been changed.
- Scripts can be required to carry a technician’s signature before any computer runs them.
- Administrative actions are written to a tamper-evident activity log.
Misuse alerts to the Lavawall team
Renamed installers, cancelled installations and abuse reports reach our team directly, with the details we need to identify the account involved. We review the account and act on misuse of our services.
We work with law enforcement
Lavawall cooperates with law enforcement and reports suspected malicious activity to the appropriate authorities.
Report abuse
If Lavawall, or a file pretending to be Lavawall, was used to trick you or someone you work with, tell us. A person reads every report.