Evo Security’s new AI-powered solution has captured the attention of MSPs looking to boost privilege management without compromising speed or convenience. Unveiled at IT Nation Secure earlier this month, Evo End User Elevation replaces always-on local admin rights with a request-based workflow enriched by AI context. Its purpose is to reduce one of the biggest security risks in MSP clients’ environments — without headaches.
“MSPs need a secure way to enforce least privilege at the endpoint that doesn’t slow users down or overwhelm their help desks,” said Michael Roth, CEO and founder of Evo Security, in a prepared statement. “We built Evo End User Elevation to replace standing privileges with real, actionable intelligence and automation, making it easier to manage identity-based risks at scale.”
Built for How MSPs Work
The Evo End User Elevation solution was designed with MSP workflows in mind. This tool can be described as the most “frictionless user solution in the admin space,” according to Evo Senior Account Executive Sean Qualey. “It’s great for our partners’ technicians, their security, and convenience,” Qualey said in an interview with ChannelPro. “Ultimately, we want it to lead to more money in our partners’ pockets, a better experience for their users, and a sticky, secure relationship between our partners and their clients.”
Technicians can manage elevation requests through a centralized dashboard or approve them on the fly via Evo’s mobile app. A technician control menu in the app enables them to review requests, create elevation rules, and manage access remotely.
Each request is automatically paired with AI-generated metadata and a risk score. These give techs fast, actionable insight. “When a request comes in that might be a one-off process, our AI is going to do a great job of breaking down what it is, what it wants to do, and whether it’s safe or malicious,” Qualey explained.
Technicians can build rules manually or generate them from historical requests or executable uploads. Once configured, these rules can be applied at the user, endpoint, group, tenant, or global level.
Security Without Sacrificing Convenience
Evo launched End User Elevation as a response to the rising threat of credential-based attacks. End users with local admin rights are a common vulnerability — and an appealing target.
“They have the keys to the kingdom if one of their credentials gets compromised,” Qualey warned. “But we don’t want to give up the convenience of being able to add a printer or update a line of business software. Evo allows security and convenience, which are two things that rarely marry well.”
Sean Qualey (left) and the Evo Security team demo Evo End User Elevation at IT Nation Secure 2025.
To balance that trade-off, Evo runs all elevation sessions in Microsoft Secure Desktop. This helps block attacks like credential harvesting and session hijacking. Additionally, its training mode allows MSPs to monitor user behavior and patterns before enforcing new rules. This makes it easier to implement least privilege policies without disrupting operations.
One Platform, Full Coverage
End User Elevation integrates fully with Evo’s broader identity stack, including MFA, SSO, and help desk verification. In this way, it offers a full IAM experience through one agent, one dashboard, and one mobile app. MSPs who are juggling multiple tools can appreciate that streamlining, Qualey said.
“Our product is really designed to marry security and convenience. That’s the future. [MSPs want to know] where can I find the most secure tools possible with the least amount of disruption? Evo is certainly trying to accomplish that now.”
Always Evolving: MSP Security Opportunities
As threats evolve and MSPs look to reduce complexity while strengthening defenses, solutions like Evo End User Elevation reflect a broader shift toward integrated, adaptive identity management.
Service providers can find plenty of opportunities in privilege access, Qualey said. He encouraged MSPs to regularly assess their tool stacks, identify gaps, and explore new technologies that can streamline operations while raising the security bar. “One of our partners does quarterly vendor reviews speed dating style, to see what’s new out there, what current tools they have, where the gaps might be, and where vendors might overlap so they can consolidate tools.”
It’s a mindset Evo is betting on — one that’s likely to shape the next wave of security innovation in the channel.
Key Benefits of Evo End User Elevation
- Replaces Standing Admin Rights: Enforces least privilege without disrupting end users
- AI-Powered Triage: Automatically analyzes elevation requests with metadata and risk scores
- Technician Access Anywhere: Approve, deny, and manage access from a mobile app.
- Secure Desktop Sessions: Uses Microsoft Secure Desktop to prevent credential theft
- Training Mode: Simulate policy changes to understand user behavior before enforcement
- Tool Consolidation: Runs on a single agent, dashboard, and mobile app with full IAM integration
Images: Anjali Fluker/The ChannelPro Network, Evo Security
