Which operating systems does it support?

RMM Guard currently works on endpoints with Windows operating systems. For full requirements, view our <a href="https://support.huntress.io/hc/en-us/articles/49983648795027-Huntress-Managed-ESPM-Early-Access-Readiness-Requirements-and-FAQ" target="_blank" rel="noopener">support article</a>.

RMM Security: Stop Attackers From Hijacking Remote Access Tools

RMM Guard makes sure only the remote access tools you actually use are allowed to run. Everything else is blocked by default.

Try It For Yourself Get a Free Demo

Why RMM abuse is so hard to stop

Hackers have a new favorite weapon: Remote Monitoring and Management (RMM) software. RMM abuse is up 277% year over year, accounting for 32% of all incidents observed at Huntress this year.

Regular IT teams use RMMs every day. That’s why it is so dangerous when attackers hijack these legitimate tools to gain a foothold on your endpoints. Their sketchy activity actually just looks like everyday IT work.

The same goes for MSPs, but they have a special kind of risk. If attackers compromise an MSP’s RMM instances, they can target their entire downstream customer base to hit multiple organizations with one attack. That’s why cutting off RMM abuse early is… more than important.

That’s where RMM Guard comes in. It’s a capability of Huntress Managed ESPM that automatically discovers remote access software installed across your endpoints, then enforces a simple rule: only the tools you actually use are allowed to run. Everything else is blocked before it can be weaponized.

How RMM Guard stops attacks before they happen

Discover Every RMM Tool

RMM Guard starts by discovering every remote access tool installed across your endpoints, including the ones your team forgot about or never approved.

Block Unauthorized RMMs

Only the tools you actually use are allowed to run. All other RMMs are blocked by default, eliminating a common attacker foothold before it is exploited.

Managed by Huntress

Huntress handles configuration, tuning, and ongoing operations, so you get the security outcome without the overhead of maintaining blocklists yourself.

Productivity Focused

Security that breaks workflows doesn't get used. RMM Guard is designed to protect your environment without disrupting the tools your team depends on.

The Huntress Platform

RMM Guard is just the start

RMM Guard is one capability within Huntress Managed ESPM, a solution built to proactively harden your endpoint attack surface. Pair it with Managed EDR and your endpoints are covered from every angle: hardened before an attack, and defended during one.

Schedule a Demo

Stop rogue RMMs before attackers can even get a foothold

You can't block what you can't see. RMM Guard gives you complete visibility into remote access software in your environment and shuts down unauthorized tools automatically. All without adding operational overhead to your team.

Start for Free

Map of the US with certain states highlighted, and a picture of two people looking at a roof behind it

Frequently Asked Questions

During Learning Mode, admins can specify the specific RMMs that are allowed to run based on file hash and install path. This ensures that once Blocking Mode is enabled, legitimate workflows continue to work, while unapproved tools are blocked from running.

RMM Guard is a capability of Managed Endpoint Security Posture Management (ESPM). It is available for free trial, but will require purchasing ESPM to keep using beyond that.

RMM Guard currently works on endpoints with Windows operating systems. For full requirements, view our support article.