Lavawall® support centre

Task guides

Common jobs that use more than one page, step by step.

• Add your first computer and check its health6 steps
• Help a user remotely and record it in a ticket5 steps
• Roll out a script to your clients5 steps
• Build a cybersecurity assessment report6 steps
• Scan a client's domain and fix email security6 steps
• Map a client's office network and watch for outages7 steps
• Connect Google Workspace and check sharing and apps6 steps
• Connect Microsoft 365 and review the first findings8 steps
• Run a Microsoft 365 access review7 steps
• Export a Google Workspace organization to a local drive7 steps
• Deploy the Phishing Reporter and clean up a reported phish8 steps
• Launch security awareness training and a phishing test7 steps
• Remove local admin rights safely with Application Elevation8 steps
• Help a user who needs administrator rights6 steps
• Run your first compliance assessment7 steps
• Onboard a new client's compliance (MSPs)7 steps
• Prepare for and run an external audit8 steps
• Start your compliance program8 steps
• Turn an incoming call into a ticket and a follow-up5 steps
• Answer a customer's security questionnaire and publish your Trust Centre6 steps
• Build your first business impact assessment and continuity plan8 steps
• Set up your help desk6 steps
• Onboard a new client6 steps
• Turn your website into a lead source6 steps
• Add a user and make sure they sign in securely7 steps
• Connect Sophos Central and review your first results8 steps
• Set up single sign-on and automatic user provisioning8 steps

Account & users

• Access PolicyDecide who can reach the Lavawall console and remote support, from where, and how strongly they must sign in.
• Add UserGive a colleague or client their own Lavawall sign-in, with the right role and only the modules they need.
• Subscription and BillingChoose your Lavawall plan and add-ons, see what you will pay, and set up how you pay, by card or by invoice.
• LanguageShow the Lavawall console in English (Canada), Français (Canada) or English (US), and set the default language for your company and clients.
• Users & PermissionsSee everyone who can sign in to Lavawall for your company and your clients, and control what each person can do.
• Profile and SecurityKeep your contact details current and control how you sign in: password, passkeys, authenticator app and linked Microsoft or Google accounts.
• Single Sign-OnLet your people sign in to Lavawall with your own identity provider, and create or deactivate their accounts automatically.
• VaultStore your team's passwords, notes, cards and one-time codes encrypted in your browser, share them safely, and fill them in with the Lavawall browser…

Logs & monitoring

• Activity LogSee who did what in your Lavawall console, and prove to an auditor that the record has not been altered.
• Notification SetupDecide who hears about what, how quickly and on which device, so the right person gets the right alert without being flooded.
• NotificationsSee every alert Lavawall has raised for your companies in one searchable list, including ones nobody is subscribed to.
• On-Prem File MonitorTrack who changed or deleted files on your file servers' shared folders, and spot unusual activity early.

Remote support

• Ad-Hoc SupportHelp someone whose computer does not have Lavawall installed, using a one-time support code.
• Remote SupportConnect to a managed computer's screen or command line, fix the problem, and record what you did in a ticket, all from your browser.
• Remote Access for usersLet people connect to their own work computers from the Service Status page, with your rules.

Clients (MSP)

• Add ClientCreate a new client organization under your account, with its first user, in a single form.
• Billing SummarySee what each client is using, from computers and security licences to support hours, so you can bill accurately and catch renewals in time.
• Client BillingSet up how you bill each client once, so invoices build themselves from live device and licence counts.
• Company Systems & Admin AccessKnow who holds administrator access to every system each client relies on, and spot systems with no administrator or only one.
• Ingram MicroConnect your Ingram Micro account so each client's cloud subscriptions, with your cost and MSRP, show up against the right client.
• List ClientsSee every organization you manage in one table, with device health at a glance, and edit, merge or remove them.
• System TypesChoose which kinds of systems you track administrators for, and add your own.

Reports

• All App SummarySee which applications are installed across your computers, how many are missing updates, and the known vulnerabilities involved.
• Battery SummaryFind laptops whose batteries are wearing out before they let their users down.
• Company SummaryCompare the health of every company you manage in one table, so you know which client needs attention first.
• Configuration SummarySee which security settings fail most often across your computers, ranked by risk.
• Cybersecurity AssessmentTurn everything Lavawall knows about a company into a single security assessment report you can review, edit and hand to the client.
• Progress ReportSee how open security issues, missing patches, configuration issues, cloud findings and suspected breaches have changed over time.
• Local Account LoginsSee every local Windows account on your computers, who is signing in with them, and where password guessing is happening.
• Nessus ScannerBring your Tenable Nessus scan results into Lavawall so every vulnerability is matched to the devices you already manage.
• Patchable Package SummarySee which software packages are missing updates, how many computers each one affects and how serious the gap is.
• Replacement PriorityRank your computers by how urgently they need replacing, so hardware budgets go where they help most.
• SaaS DiscoveryFind the cloud services and apps your people actually use, including AI tools, so nothing sensitive runs outside your view.

Compliance (GRC)

• Compliance API & WebhooksConnect your compliance data to other systems: give them an API token to read controls, risks and evidence, and send events to Slack, Teams or your own…
• Automatic Compliance ChecksTest your controls against live data Lavawall already collects, see exactly which accounts or devices fail, and keep a dated history an auditor can rely on.
• Client Compliance PortfolioSee the compliance position of every client you manage on one page, and spot the ones that need attention first.
• Compliance AssessmentsWork through a compliance questionnaire, answer each control once, attach evidence, and get the result signed off.
• Compliance ContactsKeep one list of everyone who holds a compliance role, such as your Privacy Officer or external auditor, whether or not they have a console login.
• Compliance FrameworksChoose which security, privacy and industry frameworks apply to your organization, at what level, and by when you want to be compliant.
• Compliance SettingsDecide who can do what in your compliance program and set the rules that every compliance page follows for your organization.
• Compliance WizardAnswer a few questions about your organization to find out which frameworks and regulations apply, see your gaps, generate your first policies and get a…
• Document LibraryWrite, approve, publish and review your policies and procedures, with a full version history and templates to start from.
• Framework MappingSee which control answers each requirement of a framework, build and import your own custom frameworks, and add company controls for anything the shared…
• Audit ReportBuild the report for an audit engagement, preview exactly what the client will receive, and export it as a Word document or PDF.
• AuditsRun an audit from start to finish: the auditor's request list, the evidence for each request, Type II samples, findings, external auditor access and the…
• Controls (Control Design)Work through every control in your chosen frameworks: see its status, owner, design, supporting documents and evidence at a glance, and open any control…
• Control DetailWrite, review and evidence one control, starting from what good looks like and what your configuration already shows, rather than from a blank box.
• Compliance DashboardSee your compliance position at a glance: how ready you are for each framework, what is overdue, and what to do next.
• Evidence RequestsAsk a vendor, IT provider or manager to upload evidence through a secure link, then review and accept what they send.
• Evidence LibraryKeep every file and record that proves your controls work in one place, reviewed, linked to controls and tracked for expiry.
• Compliance ScopeShow exactly what your compliance program covers, and prove that every in-scope device, application and account has a control over it.
• Compliance SearchFind any control, document, risk, vendor or piece of evidence from one search box, without having to remember which page it lives on.
• Compliance TasksTrack the work behind your controls, risks, issues and audits: who owns it, when it is due, and what is done.
• Issues & RemediationKeep one list of everything that needs fixing, who is responsible for it, who is doing it, when it is due and where it stands.
• MSP Client OnboardingRun every new client through the same onboarding steps, see where each client stands, and let Lavawall detect progress for you.
• My Compliance WorkOne list of everything in your compliance program that is assigned to you or waiting on you, across every company you work with.
• People SecurityKeep a register of joiners, leavers and background checks, and spot any leaver whose account is still switched on.
• Incident ResponseBuild a plan with every reporting deadline and contact, track an incident against them, and run tabletops.
• Privacy Impact AssessmentsAssess a system, vendor, transfer or AI tool once, against every privacy law you select.
• Readiness RoadmapSee how close you are to a certification, which of the seven phases you are on, and the next few actions that will move you forward the most.
• Reports & AnalyticsSee where your compliance programme stands, download board-ready reports, and send them on a schedule.
• Risk RegisterIdentify, rate, treat and review the risks to your organization in one place, with a clear record of who accepted what.
• SaaS & GRC ControlsSee which cloud apps your people are using for each compliance control, choose the approved tool, and spot the unapproved ones.
• Security ControlsTrack the implementation status, owner, review date, documents and evidence for every security control in your compliance programme.
• Security QuestionnairesAnswer the security questionnaires your customers send you in a fraction of the time, using a library of approved answers.

Cloud (AWS)

• AWS Cloud SecuritySee threats, risky activity, identity problems and compliance gaps across all your connected AWS accounts in one place.
• AWS CostsFind idle resources, oversized servers and unused reservations in your AWS accounts, with an estimate of how much you could save each month.
• Connect AWS AccountConnect your Amazon Web Services (AWS) accounts to Lavawall with a read-only role, choose what to monitor, and send the results to your compliance…

Business continuity

• Data FlowsDocument where your information moves, what is in it, how it is protected and which borders it crosses.
• Follow-upSee everything in your business continuity records that is missing, out of date or contradictory, and fix it in one place.
• BIA ReportProduce a polished, auditor-ready business impact assessment report from the information you have already recorded.
• Business Impact AssessmentWork out which parts of the business matter most, how long each could stop, and what an outage would cost, in plain language and without jargon.
• Plans & DocumentsGenerate your continuity and privacy documents from the business impact information you have already recorded.
• Continuity TestsKeep a record of every tabletop exercise and recovery test, and prove your recovery plans actually work.
• Backup & RecoveryBack up Google Workspace, Microsoft 365 and Linux servers, check every account, and restore anywhere, including between Google and Microsoft.
• Backup StorageChoose where computer backups are kept, in Lavawall storage or your own S3 bucket, see the space they use and what it is likely to cost.
• Endpoint BackupBack up folders, drives and databases on Windows, Mac and Linux computers, encrypted on the computer, only what changed, and never during calls.
• Stakeholder QuestionnairesAsk the people who actually do the work a few plain-language questions, then fold their answers into your business impact assessment.
• Trust CentrePublish a public security and privacy page that answers customer due-diligence questions and shares your security documents safely.
• Vendor InventoryKeep one list of every service and supplier your business depends on, how much it hurts when they break, and what they know about you.

Marketing (MSP)

• Blog EditorWrite and publish blog posts for your own website, with the search-engine details filled in as you go.
• Blog SetupSet up your company blog so it matches your website, then add it to your site with a short snippet.
• Embed Branded Domain ScannerPut a domain security scanner, a support chat and visitor logging on your own website, all branded to your company.
• Public Content LibraryStart your blog quickly with ready-made articles you can import, adapt and publish as your own.
• Referral PartnersRun a referral program: enrol partners, track the clients they refer, and see what you owe them.
• Visitor Web LogSee who visits your website, where they come from and what they read, without a separate analytics tool.

Service desk

• CalendarSee your meetings, calls, follow-ups and scheduled tickets in one calendar, and keep it in step with your Microsoft 365 or Google mailbox.
• Caller IDWhen a call comes in, see who is calling, their company and their computers, and open a ticket or log the call in one click.
• Canned ResponsesSave the replies your team sends again and again, and insert them into any ticket with a quick shortcut.
• ChecklistsRun your team's morning, evening, weekly and monthly checks in one place, with live information beside each check and a clear record of what was found.
• CRM & Help DeskManage your clients, prospects, contacts, deals, tickets and activities in one place, alongside the security information Lavawall already collects about them.
• Knowledge BaseWrite, organize and find your team's support articles in one place so answers are ready when a ticket comes in.
• Service StatusSee at a glance whether the services your organization relies on are up, follow your own support tickets, and reach your IT team.
• TicketsHandle every client support request in one queue, from first email to billed time.

Google Workspace

• Connect Google WorkspaceConnect or re-authorize your Google Workspace so Lavawall can monitor it, without seeing any monitoring data yourself.
• Google Drive MonitorSee who viewed, changed, deleted or shared files in your Google Shared Drives and My Drive, and when and from where.
• Google Workspace Activity SearchSearch sign-ins, admin changes and Drive activity across your Google Workspace in one place.
• Google Workspace OAuth ApplicationsSee every app your users have connected to Google Workspace, what it can access and how risky it is.
• Google WorkspaceSee the security of your Google Workspace at a glance, check your licences and manage the connection.
• Authorize the Google Workspace DownloaderSign the Windows export tool in to Lavawall from your browser, without copying and pasting a token.
• Google Workspace ExportCopy a Google Workspace organization's Shared Drives, user Drives, email, calendars, contacts and tasks to a local or external drive, and watch the export…
• Google Drive External SharingSee which Google Drive files are shared outside your organization right now, who can open them and whether they can edit.
• Google Group AccessFind Google Groups that include people from outside your organization, and see every member of every group.
• Google Workspace Rules & DLPSee every time a Google Workspace data loss prevention (DLP) rule or activity rule fired, in one read-only record you can filter and export.
• Authorize Google Workspace BackupGive Lavawall's backup and export service permission to copy your Google Workspace data, then confirm it works, in about two minutes.
• Google Workspace UsersReview every Google Workspace account in one list, and quickly find admins, accounts without 2-Step Verification and accounts nobody has used in months.
• Google Workspace Vendor AccessSee which outside apps and vendors have organization-wide access to your Google Workspace, and how risky that access is.

Microsoft 365

• Connect Microsoft 365Connect or re-authorize your Microsoft 365 tenant so Lavawall can monitor it, without seeing any monitoring data yourself.
• Access CertificationRecord, for every user and every Team or SharePoint site, the access they should have and whether it is approved.
• Access ReviewSee who can reach every SharePoint site, Team, folder and mailbox in your Microsoft 365 tenant, and approve or deny each grant.
• Microsoft 365 ApplicationsSee every application connected to your Microsoft 365 tenant, what it is allowed to do, who approved it and whose data it has reached.
• Configuration ChangesSee every change detected in your Microsoft 365 configuration, who made it and exactly what changed.
• Geo Conditional AccessBlock Microsoft 365 sign-ins from countries a client does not work in, with travel exceptions for one person and break-glass accounts never blocked.
• Microsoft 365See the security of your Microsoft 365 tenant at a glance: incidents, users, MFA coverage, connected apps, storage and configuration score.
• Identity & Account ManagementSee every user account from Active Directory, Microsoft 365, Google Workspace and local computer accounts in one list, with the risks that matter.
• Microsoft 365 Breach ConsoleTriage suspected Microsoft 365 account compromises, with a plain-language explanation of what happened and what to do next.
• RollbacksPlan, approve and track the reversal of Microsoft 365 configuration changes.
• Storage GrowthFind out what is filling your SharePoint, OneDrive and Teams storage, who is adding it and where you can reclaim space.
• SharePoint MonitorSee who viewed, changed, deleted or shared files on your SharePoint sites, and when and from where.

Security awareness training

• Course BundlesGroup several training courses into one bundle that you can assign, track and certify as a single item.
• Course EditorBrowse the security awareness course library, preview any course as a learner sees it, and edit the slides, questions and settings of courses your…
• Phishing SimulationsSend realistic, safe phishing tests to your staff, see who clicks, and show them what to look for next time.
• Training ManagementAssign security awareness courses to staff, track who has finished, and keep training up to date automatically.
• Training ProgramsBuild a training program for a group from short micro-modules and full courses, then send it all at once or one module at a time.
• Training ReportsSee who has completed their security awareness training, who is behind, and who has agreed to your policies, and export it for your records.

Integrations

• Datto RMM SummaryLink each Lavawall organization to its Datto RMM site, and install the Datto RMM agent on computers that do not have it yet.
• HubSpot IntegrationBring your HubSpot companies, contacts, deals, tickets and knowledge base articles into Lavawall, matched to your clients.
• Huntress SummaryConnect your Huntress account to see open Huntress incidents, match Huntress organizations to your clients, and roll out the Huntress agent where it is…
• Sophos AlertsFilter and sort the alerts Sophos Central raised across all your organizations, by severity, type and device.
• Sophos Cases by DeviceReview Sophos investigation cases for each computer and firewall, with severity, status and the analyst's verdict side by side.
• Sophos ComputersSee every computer Sophos protects across your organizations, spot unlicensed ones, and jump to their open cases.
• Sophos FirewallsCheck that every Sophos firewall is online and see which ones have open alerts or cases.
• Sophos LicencesCompare how many Sophos licences each organization owns with how many are in use.
• Sophos Summary and SetupConnect Sophos Central to Lavawall once and see every Sophos organization, its protected computers, firewalls, alerts and cases in one table.
• ZenDesk IntegrationBring your ZenDesk organizations, users, tickets, knowledge base and macros into the Lavawall help desk.

Email security

• Delete PhishFind a phishing email in every Microsoft 365 mailbox it reached, then move it to Junk, move it to Deleted Items or delete it permanently, in one approved…
• DMARC ReportsSee who is sending email as your domains, and which messages pass or fail SPF and DKIM checks.
• DMARC SetupSet up your Lavawall DMARC reporting address, get a ready-to-paste DNS record for each domain, and choose how strictly to protect your domains from spoofing.
• Phishing ReporterGive every Outlook user a button to check and report suspicious email, and review everything they report in one place.
• Security ReviewWork through quarantined email, release requests, user phishing reports and blocked sign-ins for your Microsoft 365 customers in one queue.

Devices

• Device DetailEverything Lavawall knows about one computer, with the tools to fix it, on a single page.
• ComputersEvery computer and server running the Lavawall agent, in one list you can filter, search, export and act on.
• Malware & AVMalware detections, antivirus and EDR problems, and Huntress and Sophos incidents for every computer, active and past, in one list.
• Download Agents / Add ComputersDownload the Lavawall agent for Windows, Mac or Linux, or deploy it through Datto RMM, so your computers start reporting.
• Patch ConfigSet how patching behaves for a type of company, a company, a single device or a single application, and let everything else inherit sensible defaults.

Dashboards

• Devices & Internet DashboardFind the computers, servers and printers that need attention today, and see how exposed your domain is on the internet.
• Summary DashboardOne page that shows your whole security picture, from possible breaches and suspicious sign-ins to device problems, vulnerabilities and compliance.

Domains & web

• Domain Scan ResultsScan a domain from the outside, the way an attacker would see it, and get a clear list of website, email and DNS issues to fix.
• Free Domain ScanGet a quick, free overview of a domain's website, email and DNS security, without signing in.
• Domain SummaryCompare the security of every domain you monitor in one table, so you can see which ones need work first.
• PCI Compliance: Clone SystemsRun PCI ASV scans through Lavawall's partner Clone Systems and see your targets, scan results, open vulnerabilities and PCI reports in one place.
• Web Firewall: Bad Actor BlockingAutomatically block IP addresses that probe your websites for weaknesses, using your own Cloudflare account.

Application elevation

• Elevation Audit ReviewBefore you switch to Enforce, see everything that needed administrator rights in the last 30 days and allow the common, trusted items in a click.
• Elevation BundlesSee each version of the signed rule set sent to your computers, and build a new one immediately when you need changes to go out now.
• Application Elevation DashboardSee at a glance how Application Elevation is running: which mode each company is in, how many computers are enrolled, what is waiting for approval, and…
• Elevation DevicesSee which computers run the elevation agent, what mode each one is in, and change the mode for a single computer when it needs to differ from the company.
• Elevation EventsA running log of what the elevation agent did on each computer: prompts it intercepted, elevations it granted or denied, ringfence blocks and policy updates.
• Execution PreventionStop risky built-in programs and scripts from running at all, starting in Audit so you can see what would break before you enforce.
• Offline Elevation ApprovalApprove administrator rights on a computer that cannot reach the internet: scan its QR code, pick a duration, and read out the code it asks for.
• Elevation PrintersGive people the printers they need without giving them administrator rights: the Lavawall agent installs the driver and adds the printer for them.
• Elevation PublishersReview the software publishers whose signed programs have asked for administrator rights, and mark each one as trusted, watched or blocked.
• Pending Elevation RequestsApprove or deny requests from people who need to run a program with administrator rights, and turn good decisions into rules so the same request does not…
• Elevation RulesDecide in advance which programs may run with administrator rights, which are refused, and which need someone to approve them.
• Elevation SettingsChoose how Application Elevation runs for a company, how long approvals last, who is notified, and what users see.
• Elevation Vendor TemplatesImport ready-made rule packs for common business software so its installers and updaters run without prompting.

Scripting & automation

• Run ScriptRun a script on every device in chosen companies, or on hand-picked devices, now, later or on a schedule. You can also send a desktop notification to users.
• Add/Modify ScriptsWrite, import and share the scripts you run on your devices, with variables that fill in different values for each company.
• Script Execution StatusFollow every script you have sent to devices, read what it printed, and cancel or re-run jobs.
• Script VariablesStore the values your scripts need for each company, such as a server path or licence key, so one script works everywhere.

Getting started

• Lavawall OverviewSee the health of your computers, your internet-facing domains and your cloud services on one welcome page.

Network

• AssetsKeep one inventory of every piece of company equipment, where it is, who has it and what state it is in.
• Network DiagramSee everything on a client's office network, from the internet connection down to printers, and get told when something goes offline.
• UniFi ControllersConnect your clients' Ubiquiti UniFi networks to Lavawall so their gear is monitored alongside everything else.
• UniFi MonitoringWatch your clients' Ubiquiti UniFi networks for outdated firmware, risky settings and signs of compromise, all from one screen.
• WireGuardRoll out WireGuard VPN connections to your computers from the console, with each computer generating its own key.

Threat hunting

• Ransomware HunterSweep a company's Windows computers for the tell-tale signs of ransomware such as Akira, and see at a glance which ones need a closer look.
• Threat NewsKeep up with security advisories and vulnerabilities from the sources you choose, and get them by email or console notification.