Frequently asked questions

General

Who is Revo for?

MSPs. One multi-tenant workspace holds all your customers (managed clients and prospects), each with its own workspace and an optional read-only portal. See Key concepts.

Does Revo change my customers' systems?

Only for patch management, and only once an owner or admin turns it on for a customer: it installs approved updates, restarts devices in maintenance windows and upgrades Windows to the version you approve. Assessments, integrations and the AI analyst are read-only. See Remediation.

Can I try it on a prospect without permission?

Yes, with a passive external assessment, which only uses public information. Active scanning needs a verified domain, a written attestation and admin approval. See Scope and authorization.

How do I get access?

Revo is in private alpha and access is by invitation. Existing users invite teammates from Settings → Team.

Scores and findings

Why did a customer's score drop when nothing changed?

Usually a new source of data: a newly connected Microsoft 365 tenant, newly installed agents, or a newly evaluated check. An open critical finding also caps the score. See Severity and the security score and Change tracking.

A customer deliberately doesn't do something we check. Do they lose points forever?

No. Leave that control out of their ideal state, with a reason. Its findings stay visible, marked Outside ideal state, but stop counting.

Why is a vulnerability "suspected" or "possibly affected"?

The version matches, but RevoSecure can't see the patch level, for example a version read from a web server banner or a Linux distribution that backports fixes. See Confidence and Vulnerability management.

Why didn't a dark web finding resolve after a clean scan?

Leaked data stays leaked, so dark web findings never auto-resolve. Close them in the review workflow once you've dealt with them (for example, reset the affected passwords). See Dark web and exposure checks.

Devices and patching

Which operating systems does the agent support?

Windows (x64 and Windows on Arm), Linux (x64 and ARM64) and macOS (Apple silicon and Intel). Some platforms are on the beta release channel first. See Devices and Release channels.

Patch management is on, so why isn't anything installing?

Check the three switches (the customer's patch management, the workspace pause and the device's local switch), the maintenance window and approvals. Patching → Status → What's blocking 100% lists the reasons per device. See How patch management works.

Can a customer's own IT stop Revo patching a device?

Yes. The device's local administrator can switch patching, restarts, Windows upgrades and remote uninstall off in the agent's configuration file. See Local controls on the device.

Microsoft 365

Do my customers have to give me their passwords?

No. Each customer's administrator approves your workspace's own Entra app with one consent link. No customer passwords are stored, and they can revoke access at any time. See Connect Microsoft 365.

Why does a signal say "Needs Microsoft Entra ID P1" or "P2"?

That's a licensing fact about the tenant, not an error. The other signals keep working. See Permissions and licences.

AI analyst

Is AI an extra cost?

No. AI is included in every plan, within a monthly allowance. See What the AI can see.

Can the AI change things on its own?

No. It can only file approval requests, which run with the approver's permissions once someone approves them. See AI approvals.

Reports

Can I white-label reports?

Yes: your logo, colour, contact details, footer and paper size. See Branding and sharing.

Can reports be emailed automatically?

Yes, with a scheduled report: weekly, monthly or quarterly, to your team or the customer's contacts and portal users.