Pricing built for MSPs.
Replace half your stack. Keep your margins. Start with 2 domains free.
billed annually as C$150.00
- Domain attack-surface scanner
- DMARC monitoring (basic)
- Embeddable scanner for your website
- 2 domains free, forever
billed annually as C$39.50
- Everything in Scout
- RMM agent (Windows / Mac / Linux)
- Patch monitoring
- M365 / Google Workspace monitoring
- Audit & QBR reports
- Basic remote support
billed annually as C$69.50
- Everything in Essentials
- M365 change monitoring
- SaaS discovery
- File change monitoring (workstations)
- AV/EDR deployment automation
- 1 named help desk agent included
- Unlimited remote support
billed annually as C$119.50
- Everything in Professional
- 1 GRC compliance framework (see footnote)
- Application Control + PAM — allowlisting, no kernel driver
- M365 backup & rollback
- 5 named help desk agents included
- File access monitoring
- SharePoint monitoring (1 tenant)
- CRM lite, web chat, quarantine
All paid plans include a 14-day free trial. No credit card required. Volume discounts auto-applied at checkout.
Application Control without the kernel driver.
Replace ThreatLocker and AutoElevate with a faster, lighter approach — built for MSPs who got burned by kernel-level agents.
- Per-MSI allowlisting — pre-approve installers cleanly, not by hash. Vendor updates don't break your policy.
- Offline-capable signed bundles — works without callback to cloud. Critical for clients in remote or regulated environments.
- No kernel driver — no BSOD risk, no driver-signing dance, no compatibility headaches.
- RDS-aware — works on Remote Desktop Session Hosts where competitors fall over.
- No Defender for Endpoint dependency — runs standalone on any modern Windows fleet.
vs. ThreatLocker
| Pricing | C$7-11/endpoint/mo |
| Lavawall | C$3.95/device/mo |
| Kernel driver? | Yes, ringfencing |
| Lavawall | No driver |
| Offline mode? | Limited |
| Lavawall | Signed offline bundles |
vs. AutoElevate
| Pricing | C$4-5.50/endpoint/mo |
| Lavawall | C$3.95/device/mo |
| Allowlisting? | Elevation only |
| Lavawall | Elevation + allowlist |
Replace half your stack.
A typical 50-device, 3-tech MSP runs on five-to-seven separate tools. Lavawall replaces them with one platform — and adds capabilities those tools don't have.
The typical MSP stack
| Datto RMM / NinjaOne | ~C$275/mo |
| Zendesk Support Pro (3 seats) | ~C$570/mo |
| Bomgar Remote (3 techs) | ~C$495/mo |
| Dropsuite M365 Backup (50 users) | ~C$200/mo |
| Valimail DMARC (1 domain) | ~C$40/mo |
| GRC evidence automation (Vanta starter) | ~C$950/mo |
| Admin Elevation (e.g. AdminByRequest) | ~C$135/mo |
| Total | C$2,665/mo |
And you still don't have file change monitoring, SaaS discovery, or co-branded QBR reports.
The same MSP on Lavawall Complete
| 50 devices × C$11.95 | C$597.50/mo |
| 50 M365 users × C$4.95 | C$247.50/mo |
| Help desk: 3 named agents | included (5 in tier) |
| M365 backup, DMARC, GRC, admin elevation, file mon, SharePoint, CRM | all included |
| Web chat, quarantine, SaaS discovery, QBR reports | all included |
| Total | C$845/mo |
You keep C$1,820/month. That's C$21,840/year that stays in your business.
Competitor pricing as publicly listed at time of writing. Volume negotiation may apply on enterprise tiers. Currency: CAD.
Per-tool, you also win.
Even line-by-line, Lavawall costs less than the dominant tool in each category — and bundles capabilities those tools sell separately.
| Capability | Common tool | Their list price | Lavawall | Plus, you also get |
|---|---|---|---|---|
| Help desk / ticketing | Zendesk Support Pro | US$139 / seat / mo | C$79 / agent / mo | KB, web chat, automations |
| Remote support | Bomgar / BeyondTrust | US$120 / tech / mo | C$59 / agent / mo | Bundles with Help Desk Pro: C$119 for both |
| RMM | Datto RMM / NinjaOne | ~US$4 / device / mo | C$3.95 / device / mo | M365 monitoring, audit reports, DMARC |
| M365 Backup | Dropsuite / SkyKick | US$3-5 / user / mo | C$3.95 / user / mo | Included free in Complete tier |
| DMARC monitoring | Valimail / dmarcian | US$30-50 / domain / mo | C$25 / domain / mo | Basic version free in every tier |
| GRC evidence automation | Vanta / Drata starter | US$700-1000+ / mo | Included in Complete | For frameworks Lavawall covers — see footnote |
Framework footnote: "1 framework" in the Complete tier means one of: CMMC L2, ISO 27001, SOC 2, PCI-DSS, HIPAA, NIST CSF, or CIS Controls. Canadian privacy frameworks (PIPEDA + Alberta PIPA + BC PIPA + Quebec Law 25) are bundled together and count as a single framework. Additional frameworks add at C$200/framework/mo.
Help Desk Pro & Remote Support Pro
Per named agent. Unlimited tickets. Unlimited sessions.
Replace Zendesk and Bomgar in one move — for less than a third of what you're paying today. Bundle them and save another 14%.
Already on Zendesk or HubSpot? Your existing tickets import automatically — including embedded images and attachments. Your support history comes with you.
- Help Desk Pro — C$79/named agent/mo. Unlimited tickets, KB, web chat, automations.
- Remote Support Pro — C$59/named agent/mo. Unlimited remote sessions to non-managed devices.
- Bundle — C$119/named agent/mo. Both, one license.
Already on Professional or Complete? You've got 1 or 5 named agents included — add more from the same prices above.
3-tech MSP, both products
| Zendesk + Bomgar | US$777/mo |
| Lavawall bundle (3 agents) | C$357/mo |
| You keep | C$420+/mo |
Add-ons — pay only for what you need
Add any of these to any tier. Cancel any time.
billed annually
billed annually
billed annually
billed annually
billed annually
billed annually
billed annually
billed annually
billed annually
Switching is easy.
Migration is the #1 reason MSPs stay on tools they hate. We've made it not hurt.
Datto component
Already on Datto RMM? Lavawall installs as a Datto component. Push it to your endpoints exactly the way you push everything else.
Other RMMs
Pre-made deployment scripts for NinjaOne, ConnectWise Automate, Atera, Kaseya VSA, and Microsoft Intune. PowerShell and bash. If your RMM can run a script, you can deploy Lavawall.
Ticket import
Existing tickets from Zendesk and HubSpot import automatically — including embedded images and attachments. No data left behind, no support history lost.
Free migration help
Our team helps you cut over during business hours at no charge. Old agents stay running until you're ready — no big-bang switchover. Your time is your margin.
Canadian-built. Canadian-hosted. Canadian-supported.
Your data stays in Canada. Real differentiator for clients with PIPEDA, FIPPA, or sector-specific data residency requirements. Billed in CAD with native GST/HST/PST/QST — no FX surprise on your invoice.
Use Scout as a sales tool.
Scan up to 15 prospect domains per month, free, on top of your 2 production domains per client.
Drop a prospect's domain in, generate a clean security report with their actual DMARC, SPF, TLS, and exposed-services findings, and send it as a conversation-starter. The cost? Zero, up to 15/month. Add another child company under your account, and you get another 15.
- Pooled at your parent account — 15 prospect scans/month per company tree node
- Doesn't count against your client's production-domain allowance
- Beyond 15? Just C$15/domain — same Scout rate, no surprises
- Real sample report on any domain you scan
Prospecting math
| Direct MSP, 0 children | 15 prospects/mo free |
| + 2 client companies | 45 prospects/mo free |
| + 5 client companies | 90 prospects/mo free |
| Beyond your allowance | C$15 each |
Need the audit, not just the platform?
Lavawall makes evidence collection automatic. ThreeShield — the audit firm and MSP that built Lavawall — delivers the compliance work itself.
If your client needs the actual audit, the gap analysis, the remediation plan, the report your insurer or regulator wants to see — that's a ThreeShield engagement. Lavawall licensing and ThreeShield services are separate. Buy one or both.
Visit ThreeShieldCompliance services
- HIPAA Risk Assessment & Safeguards
- PCI DSS SAQ
- Canadian Privacy (PIPEDA + provincial)
- Cyber Insurance Readiness
- SOC 2 Readiness (partner-attested)
- ISO 27001 Readiness (partner-attested)
- CMMC Readiness
Frequently asked
You can buy Lavawall directly without engaging ThreeShield — sign up, deploy, run your own MSP business. ThreeShield's audit and compliance services are a separate engagement; if you want the actual gap analysis, remediation plan, or audit report (HIPAA, PCI SAQ, SOC 2 readiness, etc.), that's contracted directly with ThreeShield at threeshield.ca.
Most MSPs buy Lavawall alone. Some clients (especially those needing a one-stop shop) engage both. Either is fine.
Professional includes 1 named agent. Complete includes 5 named agents. Need more? Add them at C$79/agent/mo, or bundle with Remote Support Pro at C$119/agent/mo for both.
Other RMMs — we provide pre-made deployment scripts (PowerShell and bash) for NinjaOne, ConnectWise Automate, Atera, Kaseya VSA, and Microsoft Intune. If your RMM can run a script, you can deploy Lavawall.
Stand-alone — single-line installer for Windows, Mac, and Linux.
Already running tickets in Zendesk or HubSpot? Your existing tickets import automatically with embedded images and attachments preserved — your support history is intact.
Ready to consolidate your stack?
Start with one free domain. Or jump straight into a 14-day trial of Essentials, Professional, or Complete.
Start free trial Talk to a human