Pricing
Pricing built for MSPs, and lean IT teams.
Replace half your stack, keep your margins, and start with one domain free. Priced per seat, the greater of devices or M365 / Google users, never both. Month-to-month, no long-term contracts, no high-water-mark billing.
Scout
Free domain scanner, let clients see their own attack surface.
1 domain free, forever. Extra domains $15/mo each.
- External attack-surface scan
- Embeddable scanner widget
- Basic DMARC monitoring
Grow
Replace your RMM with a security-first platform.
A seat is the greater of devices or M365 / Google Workspace licensed users, never both. Min 5 seats.
- RMM agent (Win/Mac/Linux)
- Patch & system monitoring
- M365 / Google Workspace monitoring
- Remote support & audit reports
Professional
For MSPs scaling past 10 clients.
A seat is the greater of devices or M365 / Google Workspace licensed users, never both. Min 5 seats.
- Everything in Grow, plus:
- M365 change monitoring
- SaaS & shadow-AI discovery
- File change monitoring + help desk
- AV/EDR deployment · unlimited remote support
- Google Workspace export up to 100 users / 50 TB (upgradeable)
Complete
One vendor. One bill. Full security platform.
A seat is the greater of devices or M365 / Google Workspace licensed users, never both. Starts at $299/mo — includes your first 25 seats.
- Everything in Professional, plus:
- GRC compliance frameworks
- App Control + PAM (no kernel driver)
- M365/Entra/Azure config backup
- Google Workspace export up to 1,000 users / 5,000 TB (Lavawall Backup)
- CRM, web chat, SharePoint, security training
All tiers month-to-month, priced per seat (the greater of devices or M365 / Google Workspace licensed users, never both). Prices in CAD. No base fee, no long-term contracts, no high-water-mark billing.
Volume discounts apply automatically, no negotiation: 5% from 51 seats, 10% from 251, 15% from 1,001, 20% from 5,001.
Individual Services, no plan required
Buy exactly the module you need. Nothing you don't.
No tier, no platform commitment, no base fee, the "Individual Services" plan is $0 and you add only the modules you want. Perfect for internal IT teams that need one thing done right.
Every à la carte module is also included (fully or partially) in the tiers above, see each card. Application Control + PAM works without a kernel driver.
Need the audit, not just the platform?
ThreeShield, the CISSP/CISA team that builds Lavawall® delivers the assessments, compliance readiness, and Tier-3 response behind the tools. Platform plus people, one relationship.
Frequently asked
- How is a seat counted, per device or per user?
- A seat is the greater of your managed devices or your Microsoft 365 / Google Workspace paid licensed users, whichever number is higher, never the two added together. A person who uses more than one device is one seat, and a device shared by more than one person is one seat. There is no separate per-user charge.
- Is Lavawall really month-to-month?
- Yes, no long-term contracts and no minimum term, and no high-water-mark billing. You're never charged for a peak seat count from three months ago; costs go down as you shrink, not just up as you grow. The paid tiers do have a starting size (Grow and Professional from 5 seats, Complete from 25), but no contract length or lock-in.
- Why does Complete start at 25 seats?
- Complete bundles modules priced per company rather than per seat, the GRC compliance framework, business-resilience and impact-assessment documents, and PCI ASV, so their cost doesn't shrink with a smaller client. Bought à la carte those alone run about C$328/month, more than the 25-seat starting price. The floor is the break-even on the parts of the bundle that don't scale down, not a barrier. A client under 25 seats who only needs one Complete feature, say Application Control + PAM, can buy it à la carte as an Individual Service with no plan.
- Do I have to buy a plan, or can I buy just one module?
- Either. Pick a tier for a bundled platform, or buy any single module as an Individual Service with no plan and no commitment. Internal IT teams often start with one module; MSPs usually pick a tier per client.
- What's the difference for internal IT vs an MSP?
- The platform is identical. MSPs get multi-tenant management, white-label options, and per-client billing; internal IT just manages one organization, at the same transparent per-seat rates.
- CAD or USD?
- Both, toggle the currency at the top of the page. You're billed in your selected currency.