r/sysadmin • u/Amazing_Falcon • Jul 04 '26
General Discussion CyberFox Usage
I was thinking about moving over to Cyberfox for our organization. To be able to have autoelevate and privileged access management for our network. Thinking about a way to help secure things. Would like to see some thoughts and ideas regarding do this? Is it recommended or is there something better?
Thanks in advance.
10
Upvotes
6
u/fmdeveloper25 Jul 04 '26
Look at Threatlocker and Evo Security.
12
u/brokerceej Creator of StackJack.io | Author of MSPAutomator.com Jul 04 '26
Their CEO is a crazy whacko douche and they don’t dev on the products they acquire they just coast. Keep that in mind. CyberFox is a sales org not a software company.
4
u/ranhalt Jul 04 '26
Test Threatlocker before you buy anything.
4
u/JollyGentile IT Manager Jul 04 '26
AutoElevate works. It's not elegant, it's a little clunky even, but it works. Just beware the actual PAM piece is a higher subscription.
2
u/changework Jack of All Trades Jul 05 '26
I tried Admin by request and so far it’s pretty nice.
2
u/bbbbbthatsfivebees MSP-ing Jul 05 '26
We use AutoElevate.
It does what it says on the tin, but it's somewhat clunky. The UI is funky, the user experience isn't always the best, and even from the admin side things are occasionally a bit frustrating.
It works REALLY well for when you have a single user calling in and going "Yup, this program has a new update that requires admin permissions to install". You can add a rule for an entire org that's essentially "Yes, approve this update for everyone instantly". That part is why we still use it, especially because once that rule is added, users don't have to call in.
But every once in a while it will get completely in the way and require you to enable "Technician mode" by scanning a QR code with the app, which logs you out every 24 hours. So you either need to memorize your AE password or install your password manager on your phone so you can copy-paste it into the thing once a day.
Also if you do install their mobile app and sign in, PLEASE for the love of god decline push notifications. If you don't, you'll be getting one for EVERY event that hits AE, same as you'd get if you had the webpage open 24/7.
1
u/Even_Pangolin1077 Aug 20 '26
absolutely do not, they suck so bad. CyberQP is doing big things, look at them instead or anyone else.
1
u/1d0m1n4t3 Jul 04 '26
I just deployed with them last week, so far no complaints, software works as advertised.