Security & Multi-Tenancy
Serve many customers from one platform, with strict separation between them.
Designed for managed service providers
Three layers of tenant isolation
Every query is filtered by the caller’s tenants, composite foreign keys block cross-tenant references, and PostgreSQL row-level security enforces isolation in the database itself.
Single sign-on or local accounts
Microsoft Entra ID (multi-tenant) or local accounts with Argon2 password hashing, failed-login lockout and per-address rate limiting on sign-in.
Two-factor sign-in
Authenticator-app codes with one-time recovery codes for local accounts, and a switch to require them for all staff. Entra ID sign-in inherits your Conditional Access policies.
Sign-in activity
The collector reads the sign-in logs of your Linux devices, routers and access points, and the Windows Security log, and keeps only counts. You are warned when a sign-in service is being guessed at from the internet, when failures spike, and, most seriously, when a sign-in succeeds from an address that had just been failing. Account names tried by attackers and log lines never leave the device.
Five roles
MSP admin, technician admin, technician user (view-only), customer admin and customer user.
Encrypted credentials
Device credentials are encrypted and never returned to the browser. Collectors authenticate with their own long-lived credentials.
Audit log
Administrative actions are recorded for review.
Backups you can restore
Nightly database backups you can download and upload, and a guarded restore.
Undo a configuration mistake
TechSavve keeps snapshots of its own setup: monitors, maintenance windows, business services, automatic fixes, notification choices, the on-call roster, report schedules, patch policies and more, taken automatically when something has changed and whenever you ask. Compare one with today and roll back everything, chosen parts or one customer. A rollback can itself be undone, and secrets are never part of a snapshot.
Consent before remote support
A support link shows the customer who is asking before anything runs, and records their agreement.
Your data stays with you
TechSavve runs on your own server. Customer data, credentials and logs never leave your infrastructure.
Your branding
Operator logo and branding throughout the portal.
See TechSavve RMM in action
Book a free demo with the DFWTechPros team.