For MSPs
Identity, email, laptops and AI for every client on one multi-tenant platform, on the rules you set.
63 countriestried to sign in to the businesses we protect in 30 daysCenteye platform data, Oct 2026
$3Blost to business email compromise in the US in 2025FBI IC3 2025 Annual Report
67%of people using AI on work devices used non-company accountsVerizon 2026 DBIR
What we see
From the businesses Centeye already protects. Each finding arrives with the fix ready for your team.
password guessing, MFA push-bombing and impossible-travel sign-ins at one business, while its laptops raised their own alerts
Tools that watch only sign-ins or only laptops each see half the picture. Centeye watches both for every client, shows them on one page, and puts the fix next to each finding.
tried to sign in to the businesses we protect in 30 days. Only one in five foreign attempts came from a known hosting, VPN or Tor network.
Most attempts came from ordinary home and mobile addresses, the kind a country block or VPN list lets straight through. Centeye judges an address by behaviour, not location: new to this business, trying many accounts, failing in a pattern.
accounts hold an admin role at a 9-person business we watch. The smallest teams have the most admins for their size.
At a small company one stolen admin account is the whole company. Centeye lists every account with an admin role and flags a new admin grant the moment it happens.
Source: Centeye platform data across the businesses Centeye protects, October 2026. Sign-in attempts counted over the last 30 days. No client is named.
Your clients’ problems
What lands in an MSP’s inbox every week, and how you can answer once Centeye is running. Pick a client.
My account got locked out, and there were dozens of failed logins from another country.
That’s someone guessing passwords, and you’re probably not the only target. Centeye sees the pattern across every account, checks whether any guess got in, and if one did, ends that session and resets the password. You hear from us with what happened.
Centeye case · Harbor Dental GroupContained
Gatewatch + Praxis
Someone got into our CFO’s mailbox and almost paid a fake invoice.
We’d catch it at the sign-in. Centeye sees the stolen login, the forwarding rule and the fake invoice as one attack, ends the session and pulls the email from every inbox. You get a short note from us: what happened, and that it’s handled.
Centeye case · Maple & Finch AccountingContained
GatewatchLighthouse + Praxis
We have Defender. Is that enough if someone clicks the wrong thing at 2 a.m.?
Keep Defender. We add the part it doesn’t do on its own: the laptop is isolated, the damage rolled back, and we can see which login started it, on the rules we agreed with you. Nobody waits for the morning.
Half the team uses ChatGPT, and someone connected an AI note-taker to their mailbox. What can it see?
Let’s find out together. Centeye lists every AI tool your team uses, what each one can reach and what data goes into it. We close the access nobody uses and steer people to the tools you approve.
We just rolled out Copilot, and finance built an agent that pays invoices. Who is watching it?
We are. Every agent gets its own identity, a named owner and only the access its job needs. If the invoice agent does something it never does, we see it, and we can stop it in one step.
Centeye case · Pinecrest LogisticsWatched
Synthwatch · Early accessLumen + Praxis
We want one team watching people and AI, not five tools that don’t talk.
One team, one console. Every attack is one case, whether it started with a person, a laptop or an AI agent, and you get a weekly report you can read in five minutes.
Centeye case · Bayview RealtyCovered
GatewatchIronwatchLighthouseLumenSynthwatch · Early access + Praxis
Your week
The client’s problems are half of it. The other half is running security across 20 or 50 clients with a small team, and making money doing it.
Switch or start small
Switch from the tools you resell now, or add Centeye as one line item and grow from there. Either way, there is no big-bang cutover.
An agent and a service you resell today
Start with identity and email protection: no agent to install, one admin sign-in per client. Then move laptops to Ironwatch client by client as each contract comes up. No big-bang cutover.
Alerts handled by someone else’s team
Praxis works the cases for every client in your own console, so the client relationship stays with you. Every client starts on “tell me”, and you turn up the automation as trust grows.
Common at smaller clients
Keep it. Ironwatch reads what Defender already finds and adds the response it doesn’t run on its own. Add identity and email protection on top, in the same console.
Add identity protection for every client. Account takeover is the attack they see most, and it connects in minutes with no agent.
The first weekly report shows each client what was caught and fixed. That is your case for the next step.
Add email and endpoint as the people package, then AI governance and agent security as each client adopts AI.
Microsoft and Microsoft Defender are trademarks of the Microsoft group of companies.
Packaging
Every client needs its people secured today. What comes next depends on how far they have gone with AI. Lead with the right products for each stage, and add the rest as they grow.
Account takeover, invoice fraud and ransomware: what every client faces today, whatever they do with AI.
Lead with Centeye GatewatchCenteye LighthouseCenteye Ironwatch
The base for every client. Start with one product as a line item, or all three as a package.
Staff paste into chatbots and try AI note-takers. No AI policy, no list of tools.
Lead with Centeye Lumen
Start the AI register, see what data goes out, coach people in the moment.
Copilots rolled out, AI apps connected to mail, files and calendars through OAuth.
Lead with Centeye LumenCenteye Gatewatch
Close access nobody uses, catch risky consent, find assistants that can see too much.
AI agents raise tickets, move files, pay invoices and call other apps with their own keys.
Lead with Centeye SynthwatchCenteye Lumen
Give every agent an identity, an owner and an off switch, and govern what it can reach.
Four packages, mixed and matched across your book
The platform
Select any product to see what it does. The feature matrix has every capability side by side.
Runs on Microsoft 365 · Microsoft Entra ID · Google Workspace · Windows · macOS · Chrome · Edge
Layer 1 · People security
Identity threat detection and response
Stops the attacker who logs in instead of breaking in.
Connects with IronwatchLighthouseLumenSynthwatch Praxis
Explore Centeye GatewatchLayer 1 · People security
Endpoint detection and response
Spots malware and ransomware early, and stops it spreading.
Connects with GatewatchLighthouseLumen Praxis
Explore Centeye IronwatchLayer 1 · People security
Email security
Catches the email your filter lets through.
Connects with GatewatchIronwatchLumen Praxis
Explore Centeye LighthouseLayer 1 · People security
AI governance and registry
Finds the AI tools in use, shows what each can reach, and acts on your rules.
Connects with GatewatchIronwatchLighthouseSynthwatch Praxis
Explore Centeye LumenLayer 2 · Agent security
AI agent security · Early access
Gives every AI agent an identity, an owner and an off switch.
Connects with GatewatchLumen Praxis
Explore Centeye SynthwatchLayer 3 · Above both
Agentic security operations
Diagnoses, triages and checks every case, then gives your team the facts to decide.
Connects with GatewatchIronwatchLighthouseLumenSynthwatch
Explore Centeye PraxisBuilt for MSPs
A multi-tenant console with every client side by side. Drop into any client in one click; each client’s data stays separate.
Set the dial for each client and each fix: tell me, ask me first, or handle it. A cautious client and a hands-off client run side by side.
Kavach runs the playbooks across your whole book overnight and queues what needs a person, with the evidence attached.
Approval requests and alerts reach Microsoft Teams, Slack and email. One tap approves, and the case updates itself.
Cases open as tickets in the standard PSA tools MSPs use, under the right client. Devices sync from your RMM.
Argus writes each client’s weekly report in plain English: what was caught, what was fixed, what is left, and the hours given back.
Clients with their own IT person can get their own view and reports, while you keep running the response.
A bad sender, link or file found at one client is watched for across every client you manage.
In the console
A real screen from the Centeye console. The clients and data in it are made up.
Plug and play
No servers, no new mail flow, nothing for staff to learn.
An admin approves Centeye in Microsoft 365 or Google Workspace. Most clients are connected in under 10 minutes.
Push the light Ironwatch agent through your RMM, and the Lumen extension through your browser policy.
Connect your PSA, and Microsoft Teams, Slack or email for approvals and alerts. Once, for every client.
Every client starts on “tell me”. Turn each fix up as trust grows, client by client.
The QBR story
One attack across a person, an AI app and an agent, contained in one coordinated response. This is the story your client report tells.
Her session is copied from a fake sign-in page and replayed from another country.
The attacker connects an AI note-taker to her mailbox: a way back in that survives a password reset.
The finance agent Dana owns starts reading hundreds of files far outside its normal job.
Kavach links all three. Sessions end, the app is revoked and the agent’s access is cut, each checked at Microsoft. Argus writes it up.
Separate tools would see three small alerts at three different times. Centeye sees one attack on a person, her AI app and her agent, and contains all three in one coordinated response.
Try it with a few clients
See what Centeye finds in their tenants and how much time it gives back, then roll it out across your book. What you learn shapes what we build next.
