Network management and assessment, priced for MSPs and their clients alike

Maintain inventory, topology, health, findings, and alerts. Then assess exposure and report with evidence in one platform for a client roster or your own network.

Ongoing network visibility

An edge agent runs inside the client network to maintain device inventory, topology, health, and evidence while sanitizing sensitive data before anything leaves the building.

  • Automated device inventory via SNMP, SSH, ARP/LLDP discovery
  • Logical, physical, and Layer 3 topology views of the observed network
  • Leading-practice checks for VLAN/trunk, spanning tree, redundant gateways, routing neighbors, and MTU
  • Health polling, alerts, and recurring work for managed networks
  • Credentials stay local. Only sanitized results are uploaded
  • Works across every client tenant from one partner account

Assessment & attack-surface discovery

Assess the network, discover domains and subdomains, scan exposures, and add Application & API Discovery to build a clearer risk picture for each client.

  • Passive and active discovery across every target domain
  • Subdomain autoscan finds what a client doesn't know is public
  • Application & API Discovery, covering exposed APIs and OpenAPI endpoints, collector-discovered internal applications and services, and SaaS-vendor fingerprinting, is included in Complete and available as an add-on on Essentials
  • One combined risk score per assessment
Subdomain12 discovered
Risk scoreLow · 92/100
0 critical
API scanDocs exposed
Open ports3 flagged

Reports clients actually read

Every finding traces back to real evidence, not a guess, so the value of the work is obvious before you even discuss remediation.

  • Business-ready reporting, not raw scan output
  • Network, attack-surface, device health & utilization, and topology reports, with scheduled and delta options
  • MITRE ATT&CK technique mapping, US Letter or A4 page size
  • Exportable findings and evidence artifacts
  • 12-month evidence retention on every plan (36-month add-on)
Findings logToday

Report exported: Northstar Retail

Network assessment · 14 findings, evidence attached

9:14 am

Finding resolved: Meridian Dental

Open SMB port closed and verified

9:02 am

Critical finding flagged: Brightline Law

Publicly exposed admin login

8:47 am

Scan started: Coastal Dental Group

Attack surface · 2 domains

8:30 am

One partner account, every client tenant

MSP wholesale accounts cover as many isolated client tenants as you need under a single subscription and login, plus free scan-only prospect tenants to assess a lead before they ever sign.

  • Each client tenant's data is fully isolated
  • Wholesale pricing drops automatically as your roster grows
  • Client tenants can be allocated, deallocated, or fully offboarded as accounts change
  • Free prospect tenants run a passive attack-surface assessment and report; they don't count toward wholesale pricing and expire in 90 days unless converted
  • Optional white-label branding add-on: your name, logo, colors, branded reports, and an optional custom sign-in domain
Prospect
Allocated
Active tenant
One wholesale subscription

Delegated access without full admin risk

Grant your team operator-level access to a specific client tenant instead of handing out platform-admin rights. Grants expire and everything is logged.

  • Operator is the highest grant ceiling. It never includes billing, ownership, or deletion
  • Grants are time-boxed and expire automatically
  • Every grant-sourced action is recorded in the audit trail
  • Revoke access instantly when a tech rolls off an engagement
6
Active grants
2
Expiring soon
1
Revoked
184
Audited actions
Grant-sourced access · Fully audited

Role-based access for every tenant

Owners, admins, operators, viewers, and billing admins each get exactly the access they need, no more and no less.

  • Owner: full control, including billing and ownership transfer
  • Admin: manage assessments and members
  • Operator: run and manage assessments
  • Viewer: read-only access for stakeholders who just need visibility
  • Billing admin: manage billing without operational assessment controls
  • Owners can require MFA for everyone in a tenant
Tenant roles
Role
Assess
Grants
Billing
Owner
Admin
Operator
Viewer

A fifth role, Billing admin, manages payment without assessment access. Each tenant's data is fully isolated.

See Lens on a real network

Request a walkthrough and we'll show you a live managed network and assessment workflow. If you're reselling, we'll cover the MSP partner dashboard and wholesale pricing. If you're managing your own network, we'll show you the single-account setup.

Request demo
See pricing
Emberix

Emberix builds affordable SaaS tools for the small and mid-sized businesses other platforms ignore. Lens brings network management, assessment, and attack-surface visibility to MSPs and direct customers.

Built by people who've run MSPs

Product

Company

Resources

Legal

© 2026 Emberix. Built for MSPs, their clients, and direct customers alike.

Lens is an Emberix product. Verto, our billing and client-engagement platform for consultancies, is available separately at vertobill.com.

MSP-first