Affordable vulnerability, patching, and compliance management for MSPs

Because patching is not the same as vulnerability management.

Your RMM applies patches to endpoints and keeps devices current. That’s all table stakes. But it’s not enough to keep your clients’ environments secure.

Vulnerability management, on the other hand, is a continuous and ongoing process that helps you reduce your clients’ overall risk exposure. ConnectSecure empowers you to 

discover risks across all client environments, prioritize what needs to be remediated, and track changes over time.

It’s way more proactive and comprehensive than RMM patching, which just fixes known issues one at a time.

ConnectSecure's vulnerability management also goes beyond endpoints to cover firewalls, network devices, unmanaged assets, SaaS platforms, and identity exposure.

So you can anticipate and reduce future risk across all clients’ internal and external assets.

For endpoints with the lightweight agent installed, you can run scans as frequently as every 15 minutes or every 24 hours.

In practice, vulnerabilities are typically visible in the portal within 30 to 40 minutes of detection.

The platform also syncs daily with industry-standard threat intelligence databases, including the NIST National Vulnerability Database (NVD), CISA KEV, Microsoft MSRC, and Software Advisories, ensuring findings are always mapped to current intelligence.

We can scan Windows, macOS, Linux, and ARM-based operating systems.

Operating system patching is supported on Windows and Linux OS

We also support 550+ Windows application patches.

In the asset view, you can see all machines in your clients’ environments, with IP addresses, hostnames, security grades, and vulnerability metrics. You can also see their hardware/software inventory, services, ports, protocols, vulnerabilities, compliance status for each asset, and more.

Click into a single asset to see the full depth of available data.

There are also report cards covering baseline security items such as antivirus, anti-ransomware, supported operating systems, local firewalls, SMB versions, and TLS settings.

If you need more detail on a specific CVE, you can go straight to the vulnerability database and see how long it’s been present in the environment.

No, and it’s not trying to be.

ConnectSecure doesn’t perform full, human-led penetration tests.

What it does is give you visibility into vulnerabilities like open ports, exposed services, weak ciphers, and configuration issues across clients’ internal and external assets and websites.

There’s also a web application scanner that can go deeper on public-facing apps.

These insights can help you prepare for a PEN test. Rather than spend thousands only to be told something basic wasn’t patched.

 It’s lightweight.

On average, the endpoint agent uses about 25 MB of memory. Usage can increase slightly if you enable extended scan times or PII scanning. If there is a spike, it usually lasts only a few minutes because scans complete quickly.

There are two agent types:

The lightweight agent, which runs on the machine itself and scans that device.

The probe, which scans the network. It’s used for asset discovery and finding vulnerabilities on devices that don’t have agents, like printers, switches, routers, and other IoT devices.

The probe also supports network discovery, vulnerability and compliance scans, SNMP scans, and internal firewall scanning.

In smaller environments, one probe is usually enough. Larger networks may benefit from two or three to distribute load.

 Yes. ConnectSecure provides open REST APIs with publicly available documentation. 

It’s our own engine, built with MSPs in mind.

That means vulnerabilities are surfaced in a way that actually makes sense across your clients, prioritized based on what matters, and tied directly to what needs to be fixed.

It’s not just a raw scan. It’s something your team can act on.

ConnectSecure supports regional hosting across multiple locations, including the US, Canada, the United Kingdom, Europe, Australia, and Africa.

This allows you to align with data residency requirements and choose a region that fits your clients’ compliance needs.

ConnectSecure’s reporting features use AI to help turn technical vulnerability data into clear, actionable insights your clients can understand.

Our AI services are powered by advanced language models (including GPT-5) and operate within a controlled environment. Customer data is not used for model training and is not shared outside the platform.
 

It depends on how you package and deliver your services.

Most MSPs don’t sell vulnerability management as a standalone line item. They bundle it into a broader security offering and price based on the level of service and protection they provide.

Our goal is to price ConnectSecure so that MSPs can provide proactive cybersecurity to organizations of all sizes.

Our usage-based tiers start as low as $300 per month and are structured to accommodate minor fluctuations in monthly deployments without overage charges.

Contact us to receive detailed pricing information.

Licensing is based on the number of unique assets you scan each month.

You’re billed on your highest asset count (your “high watermark”), not how often you scan. So you can scan the same asset as frequently as you need without increasing your cost.

Pricing is tiered, so small fluctuations won’t impact your bill unless you move into the next range.

An asset is any device in your environment where ConnectSecure can identify meaningful vulnerability data.

That typically includes endpoints and infrastructure like laptops, servers, firewalls, routers, switches, and access points.

Devices like smart TVs, thermostats, or other IoT equipment may be discovered, but they aren’t counted unless there’s actionable security data tied to them.

No. You don’t need an agent for vulnerability scanning. ConnectSecure can scan endpoints remotely using credentials, typically from a domain controller or probe.

While you don't need an agent for vulnerability scanning, we recommend installing one on every endpoint for better performance and more capabilities, like patching and certain remediation actions.

ConnectSecure was founded in December 2020 as CyberCNS and rebranded to ConnectSecure in October 2022.

It’s the same company, same core team, and same leadership. The name changed. The mission didn’t.

It happens. We have your back. Our audit log records all moves, additions, changes, and deletions.  

During your free trial, Solutions Engineers help you configure ConnectSecure to your clients’ environments and compliance requirements so you start seeing value quickly.

As a partner, you’ll also get one-on-one onboarding, help building vulnerability policies and SOPs, and guidance on remediation timelines.

Documentation is available when you need quick answers. If you need more, our US-based support team is ready to jump in and help resolve it. Just send us a message, open a ticket, or start a chat.