lavawall.com

What It Is

Lavawall® is a security and IT management platform built by ThreeShield, a Canada-based team with an MSP background. It is positioned for MSPs and lean IT teams. Rather than being a standalone antivirus or EDR product, it brings patch management, configuration vulnerabilities, external domain attack surface monitoring, Microsoft 365/Azure/Entra, Google Workspace, DMARC, GRC audits, remote support, intelligent ticketing, and multi-tenant reporting into a single SaaS console.

Core Capabilities and Deployment

In terms of protection coverage, Lavawall handles patching for Windows, macOS, and Linux, and checks updates for 7,533 applications. It supports external risk checks such as domain scanning, SPF/DKIM/DMARC, TLS, DNS, security headers, open ports, WordPress CVEs, and blacklist reputation. On the cloud side, it can monitor configurations, changes, and exposure for M365, Azure, Entra, Purview, and Google Workspace. It also includes local file integrity monitoring, ransomware indicators, Nessus Professional integration, and persistent Cloudflare blocking. Deployment is SaaS plus Agent: agents can be distributed via RMM tools such as Atera, ConnectWise, Datto RMM, N-able, and Panorama9 using PowerShell, Linux Bash, or Mac scripts, while domain scanning requires no installation.

Compliance, Management, and Integrations

For compliance, the materials state support for GRC scenarios such as CMMC 2.0, CPCSC, CPA Canada, and IIROC. File integrity monitoring can provide audit evidence for SOC 2, HIPAA, NIST SP 800-171, PCI DSS v4, ISO 27001:2022, and similar frameworks. However, company-level certifications are not disclosed; the text only mentions that the designers hold CISSP and CISA credentials, along with internal and external security reviews. Management and alerting are fairly granular, with five severity levels, per-recipient rate limiting, daily digests, time zones, do-not-disturb settings, and multi-tenant scope controls. The integration surface is broad, including Huntress, Sophos, Cloudflare, Microsoft 365, Google Workspace, Axcient, Zendesk, FreshDesk, and others, though some APIs are still marked as limited release or in development.

Pricing, Pros, and Cons

The captured content only includes a Pricing entry point, with no specific plans or per-device/per-tenant pricing disclosed, so its value for money can only be assessed conservatively. Its strengths are clear MSP orientation, with a complete combination of multi-tenancy, white labeling, automated reporting, and remote support. Login security also appears to be taken seriously, with support for Passkeys, SSO, mandatory MFA, and Argon2id. The downsides are that its functional scope is broad, which may increase implementation complexity, and there is limited information on pricing, SLA, and company-level certifications.

Who It Is For and Access from China

Lavawall is best suited for MSPs serving multiple clients, internal IT teams that need centralized auditing of cloud tenants and endpoint status, and organizations that want to connect GRC reporting with day-to-day operations. Access from mainland China is not clarified in the available text. Its data is mainly hosted in Canada, and it uses third-party services such as AWS, Cloudflare, and Twilio, so network connectivity and payment options are both unknown. If domestic compliance, local support, or RMB purchasing is required, alternatives such as Qi An Xin, Sangfor, NSFOCUS, DBAPPSecurity, and Venustech may be worth evaluating.