Product
AUSTIN, Texas, JUNE 03, 2025 – Evo Security, a leading identity and access management (IAM) company purpose-built for Managed Service Providers (MSPs) and their customers, today announced the launch of Evo End User Elevation, the first AI-powered elevation solution engineered for MSPs to help them enforce least privilege across all customer endpoints. This update streamlines the end-users' admin request process, offering several security and productivity benefits for both MSP technicians and their customers.
Why MSPs Need Secure, Scalable End User Elevation
Credential-based attacks now account for the majority of breaches, with attackers exploiting valid accounts more often than phishing or malware vectors. End Users with local admin rights are a known vulnerability in client environments. Yet, MSPs often struggle to enforce least privilege without creating friction or overwhelming their technicians with access requests.
The Evo Security Difference
Evo End User Elevation replaces standing admin rights with an on-demand elevation workflow that lets standard users request temporary access for specific actions (e.g., software installs, updates). The request is routed through Evo’s multi-tenant dashboard or managed on the go using Evo’s mobile app, where technicians can approve or deny based on AI-generated context and pre-built elevation rules.
-
AI-Driven Risk Analyses: Every elevation request is automatically enriched with metadata and a risk summary, helping techs triage in seconds.
-
Secure Desktop Integration: Unlike traditional PAM, Evo conducts all elevation sessions in Microsoft’s Secure Desktop, mitigating risks from credential harvesting or session hijacking.
-
Granular Rule Engine: Technicians can build elevation rules from historical requests or by uploading executables. Rules are enforced at the user, endpoint, group, tenant, or globally across all tenants.
-
Training Mode: Allows MSPs to monitor request patterns before enforcing policies to ensure a smooth transition away from permanent admin access.
-
Technician Controls on the Go: A new technician menu in the Evo mobile app lets techs approve elevation requests, create rules, and manage privileged access from anywhere.
“MSPs need a secure way to enforce least privilege at the endpoint that doesn’t slow users down or overwhelm their help desks,” said Michael Roth, CEO and Founder of Evo Security. “We built Evo End User Elevation to replace standing privileges with real, actionable intelligence and automation, making it easier to manage identity-based risks at scale.”
Built for MSP Deployment at Scale
Unlike traditional PAM tools, Evo’s End User Elevation was engineered from the ground up for MSP use cases and workflows. It supports rapid, multi-tenant deployment and integrates natively with Evo’s full identity stack, including MFA, SSO, Help Desk Verification, managed RADIUS, and Technician Elevation, while delivering a low-friction experience for end users and reducing technician workload. Everything runs through one agent, one dashboard, and one mobile app, making it easy for MSPs to consolidate tools, standardize access controls, and scale identity security across all customer environments.
See Evo in Action at IT Nation Secure
Evo End User Elevation is available now for all MSPs. Attendees of IT Nation Secure can stop by Booth 101 for a first look at Evo’s latest innovations in identity security, including this new release. To learn more or schedule a personalized demo, visit: www.evosecurity.com/demo/
About Evo Security
Evo Security consolidates IAM and PAM into a single, multi-tenant platform tailored to the unique operational needs of MSPs. Evo combines MFA, SSO, Help Desk Verification, RADIUS, and Privileged Access Management—including technician and end user elevation—into one agent and one dashboard. At Evo, Managed Security Starts with Identity. For more information, visit www.evosecurity.com.
Contact
Lacey Brazzell
lacey.brazzell@evosecurity.com
