Live Internally · PAM Add-On for MSPs

Arkon
is how we run Armorstack.

Arkon is Armorstack’s own operating platform — CRM/PSA, IT documentation, and privileged access management (PAM) in one system, running every portfolio’s service delivery, not just CORE’s. It’s also available as a standalone PAM add-on for other MSPs and MSSPs already using tools like Hudu or IT Glue for documentation. If you’re a client or prospective client, the services it supports are what matters; if you’re an MSP evaluating it as a PAM layer, talk to our team about current availability.

What Arkon Is

One Platform, Every Portfolio

Arkon combines CRM/PSA (client and asset inventory, SLA-enforced ticketing, sales pipeline, QBR reporting), IT documentation (runbooks, knowledge base, configuration drift detection), and a built-in privileged access management layer. It’s Armorstack’s own single source of truth across all four portfolios — not a CORE-only tool.

Credentials are vaulted and never stored in Arkon’s own database. Technicians get brokered, browser-based RDP/SSH/VNC/web sessions with the credential injected at connect time — it’s never revealed, copied, or typed by a human, and every privileged session is recorded.

If you’re interested in the managed IT, security, or compliance services Arkon helps us deliver, start with the CORE portfolio or get in touch directly.

For Other MSPs & MSSPs

A Lightweight PAM Layer for Teams Already Using Hudu or IT Glue

Documentation tools like Hudu and IT Glue store credentials safely at rest — but the leak happens the instant a technician actually uses one: copy-pasted into an RDP window, left in a saved session, dropped into a personal password manager. Arkon’s PAM layer removes that moment entirely, positioned as a lightweight alternative to enterprise platforms like CyberArk, BeyondTrust, Delinea, or StrongDM — typically for MSPs running 5–200 technicians.

Offboarding
Drops from an unrecoverable rotation scramble to a single revoke.
Plaintext exposure
Zero plaintext passwords ever touch a technician’s device.
Session recording
100% of privileged sessions are recorded, not just logged as “accessed.”

This external offering is newer to market — reach out to confirm current availability and pricing before evaluating it for your own MSP.

Ask About Arkon for MSPs →