Findings Closed on Evidence
Patch it, press Rescan Now, and the finding resolves when the scan stops seeing it. A ticket closed in your PSA while the port is still open is reopened by the next scan.
EnterProtect covers both ends of an attack for MSPs. Vulnerability Scanning finds what every client exposes to the internet and puts each finding in your alert queue, and no stolen login can delete a cloud backup.
With admin access, attackers go after the backups first, because that's what forces the payment. And when a client is breached through something visible from outside, nobody asks the scanner what happened. They ask you. So security for an MSP has two jobs: close what's exposed before anyone uses it, and keep a copy no attacker can reach for the day something gets through.
One console, one alert queue and one bill, with every finding beside the backups it threatens.
External scans of every client, with findings in the same queue as their backups and routed to your PSA.
See Vulnerability ScanningServers and workstations with every new point booted in isolation, brought back to the last clean point after ransomware.
See BCDRMail, files, sites and Teams outside the tenant, rolled back in one action when ransomware syncs into OneDrive and SharePoint.
See Microsoft 365 BackupThe parts of EnterProtect built for the day an attacker holds a login.
Patch it, press Rescan Now, and the finding resolves when the scan stops seeing it. A ticket closed in your PSA while the port is still open is reopened by the next scan.
Every cloud recovery point sits under a lock that renews daily and only ever extends, held apart from the appliance, the console and your MSP Owner account. Neither can we shorten it.
Change, entropy and canary signals flag points that look wrong. Boot a candidate in isolation, scan the copy, then bring systems back in dependency order.
Microsoft 365 backups live outside the client's tenant, where a compromised Global Administrator can't reach them.
The affected versions and what to patch, written for the people who have to act on them.
Enterprotect's latest threat advisory highlights the recent Microsoft Word vulnerability, CVE-2023-36761. Learn about the threat, its significance, potential…
A comprehensive advisory on the recent zero-day vulnerability (CVE-2023-5129) in the libwebp image library, detailing its threat, significance, risks, and…
Dive into the details of the SprySOCKS Linux backdoor, a new threat from the Earth Lusca group targeting government entities.
What a client exposes to the internet, seen from outside their network: reachable ports, the services listening on them and certificate state. A known CVE on an exposed service becomes a finding in your alert queue, with an owner and a recommended action.
Every client's findings sit in one queue across your whole book, so it's one filtered list instead of a login per client. Scans run on your schedule, anyone with the right role can run one on demand, and Rescan Now on a finding proves the fix once you've patched.
Not the cloud copies. Every cloud recovery point sits under a 30-day lock that renews daily for as long as it's kept, and retention can be extended but never shortened, by anyone, including us. Ransomware on a client's machine can stop future backups, which raises an alert, and can't reach back into history.
No. It scans from outside, the way the internet sees a client, so there's no agent or appliance to deploy. Internal networks aren't part of this product.
Every client's internet-facing surface scanned on your schedule, and every cloud copy out of an attacker's reach. Here's what EnterProtect puts in writing.