- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Datto RMM
Your technicians patch endpoints in one tool and reset Microsoft 365 passwords in another. One console could do both — Datto RMM is Kaseya’s cloud RMM for MSPs — policy-driven monitoring, Windows and third-party patching, ransomware detection, Web Remote and Microsoft 365 user management from one console on AWS.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Datto platform family
This page covers Datto RMM — Kaseya’s cloud RMM for MSPs. The rest:
Quick facts
30-second orientation- Product
- Cloud RMM for MSPs, from Datto, a Kaseya company
- Owner
- Kaseya — bought Datto for $6.2B in June 2022
- Hosting
- Cloud only on AWS — five platforms: 2 Ireland, 2 US, 1 Sydney
- Agents
- Windows, macOS and Linux endpoints
- Patching
- Windows OS natively; 200+ third-party apps with ASM
- Price
- No standalone list price — quote, or inside Kaseya 365 Endpoint
- Announced
- Native Apple MDM and FIPS 140-3, both for October 2026
- Analysts
- No analyst placement; G2 scores are user reviews
- India
- No India platform; Sydney is the nearest
- In India via
- TechBag — scoping, quote comparison and support
Understand MSP RMM before you buy one
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is an MSP RMM?
An RMM puts an agent on every client endpoint so an MSP can monitor, patch and fix machines remotely from one console.
An RMM server, hand-run patches and separate M365 portals vs Datto RMM — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | An RMM server and separate M365 portals | Datto RMM |
|---|---|---|
| Where the RMM runs | Your own server and database | Datto’s AWS cloud — five regional platforms |
| Windows updates | Approved by hand, client by client | Global and site patch policies, device exceptions |
| Third-party apps | A script per application | Policy updates; 200+ Windows apps with ASM |
| Microsoft 365 users | A separate admin centre per tenant | Onboard, offboard and reset from the RMM |
| Ransomware response | A user reports locked files | Alert on encryption, device isolated |
| What it is NOT | — | Not self-hosted; Apple MDM only announced, for October 2026 |
The cheapest test is a pilot on one client site: deploy agents, run a Windows patch policy, and connect that client’s Microsoft 365 tenant.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Agent
A lightweight agent on Windows, macOS and Linux endpoints sends audit data to the platform, runs scripts and components, and applies the policies you set for it.
Platform
Hosted on Amazon AWS EC2 across five regional platforms — two in Ireland, two in the US, one in Sydney. Datto states 99.99% availability; no on-premises edition exists.
Policies
Monitoring, patch, software and ransomware policies apply at global or site level, with device-level exceptions, so one rule set can cover every client estate.
ComStore
The ComStore supplies ready-made components such as the macOS updater, while integrations reach Autotask PSA, ConnectWise PSA, IT Glue and Datto EDR and AV.
An agent on each endpoint, policies set once in an AWS-hosted console — five regional platforms, none of them in India.
Nine capabilities. Monitor, patch, manage.
Datto RMM monitors, patches and fixes every client endpoint from one AWS-hosted console, with Microsoft 365 users managed alongside.
Policy-driven device monitoring
Monitoring policies watch servers, laptops and desktops across every client site and raise alerts that can open tickets in your PSA.
Network topology maps
Topology maps draw each client’s network as a diagram, so a technician sees how devices connect and where a fault sits before digging in.
Ransomware detection and isolation
Behavioural file analysis flags crypto-ransomware, alerts as files are encrypted, and can isolate the device and stop suspect processes.
Windows patch policies
Global and site policies approve and schedule Windows updates, with per-device exclusions; only Windows managed agents patch natively.
Mac updates through ComStore
Macs update through a ComStore component, Install Updates with SUPER, rather than the Windows patch engine — test it on your own Mac fleet.
200+ apps with Advanced Software
Software Management updates key apps by policy; an Advanced Software Management licence widens the catalogue to 200+ Windows apps.
Remote control in the browser
Web Remote opens an HTML5 session to an online server, laptop or desktop in one click from the browser, with end-user chat built in.
M365 users beside the devices
A native Microsoft 365 module lets technicians onboard, offboard and quarantine users, reset passwords and see every client tenant.
Scripts, components and webhooks
Custom scripts, ComStore components, policies and webhooks automate routine jobs, and applications can be packaged and pushed to sites.
Watch Datto RMM in action
What Datto RMM does in under two minutes, a full product demo, and the endpoint-security panel — from Datto’s own channel, recorded before the current interface.
What Is Datto RMM & How Does It Work?
What the platform does, in under two minutes.
Datto RMM Demo
A long walk through the console, policies and jobs.
Enhancing Endpoint Security with Datto RMM Panel
Using the RMM to harden client endpoints.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Every client brings endpoints and a Microsoft 365 tenant. Datto RMM manages both from one console.
Here’s what genuinely sets it apart — and exactly where it stops.
Microsoft 365 users in the RMM console
Most RMMs stop at the device. Datto RMM adds a native Microsoft 365 module: technicians onboard, offboard and quarantine users, reset passwords and see every client’s tenant without signing in to each admin centre. For MSPs whose tickets are half identity chores, that removes a console switch.
Ransomware caught at the endpoint
Datto RMM’s ransomware detection analyses file behaviour, alerts the moment files start being encrypted, and can cut the device off the network and stop suspect processes while the agent stays in touch with the console. Where you run Datto EDR or AV, Datto now recommends deploying it through them.
The RMM inside a bigger Kaseya bundle
Bought alone, Datto RMM is quoted. As the RMM in Kaseya 365 Endpoint it comes with Datto AV, EDR, third-party patching, endpoint backup and, on Pro, a managed SOC — reported at $5.25 per endpoint a month, with 50 endpoints the minimum for new customers. High-watermark billing ended in December 2025.
Where it stops
Native OS patching covers Windows only; Macs update through a ComStore component, and the 200+ app catalogue is Windows-only too. Data sits on AWS in Ireland, the US or Sydney, with no platform in India. Native Apple MDM and FIPS 140-3 are announced for October 2026 — plan around them only once they ship.
The numbers behind the platform
What your Datto RMM rollout looks like
Count endpoints by OS
List endpoints per client by Windows, macOS and Linux — native patching is Windows-only, so the Mac share shapes the plan.
Standalone or bundle
Put a Datto RMM quote beside a Kaseya 365 Endpoint quote; the bundle starts at 50 endpoints and adds AV, EDR and backup.
Pilot one client site
Deploy agents to one site, set a Windows patch policy and a software policy, and switch on ransomware detection there.
Wire in PSA and M365
Route alerts to Autotask or your PSA, connect client Microsoft 365 tenants, and move favourite scripts into components.
Roll out, then test MDM
Onboard the other clients, remove old agents, and trial native Apple MDM only after it ships as announced for October.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“Offboarding a leaver used to mean three admin portals. Now the technician disables the M365 account from the laptop’s own screen.”
“Ransomware detection fired on a finance PC, the agent isolated it and we still had console access to clean it up. That hour mattered.”
“Windows patching is solid. Our Mac-heavy clients needed the ComStore updater and a few rounds of testing before we trusted it.”
“We moved to Kaseya 365 Endpoint for the bundle. The per-endpoint sums only worked for us once we cleared the 50-device floor.”
“A Pune NBFC client asked where the RMM data sits. The honest answer was Sydney, and it went straight into their risk register.”
“Web Remote in the browser means techs on the road just sign in; no viewer to install for a quick fix on a shop-floor PC.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the MSP RMM market — tap any vendor to see why it sits where it does.
TechBag MSP RMM Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Kaseya-owned; quoted alone or inside Kaseya 365 Endpoint.
OS Patch Coverage × Bundled Security
The grid nobody publishes — how natively each RMM patches Windows, macOS and Linux vs how much security and backup comes in the same contract.
Windows-native patching; Kaseya 365 adds AV, EDR, backup and SOC.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Datto RMM vs the MSP RMM field
Against NinjaOne, ConnectWise RMM, N-able N-central / N-sight, Atera and SuperOps — on hosting, OS coverage, price, patching, sign-in, support and India.
| Dimension | Datto RMM | NinjaOne RMM | ConnectWise RMM | N-able N-central / N-sight | Atera | SuperOps |
|---|---|---|---|---|---|---|
| What it is | Kaseya’s cloud MSP RMM | One-agent endpoint suite | Cloud RMM, ex-Command | Two RMM platforms | RMM+PSA, per technician | Unified PSA and RMM |
| Deployment | Cloud only, on AWS | SaaS only | Cloud only; see Automate | N-central can self-host | Cloud only | Cloud only, on AWS |
| OS and mobile coverage | Win, Mac, Linux; MDM due | Win, Mac, Linux + MDM | Watches Win, Mac, Linux | Win, macOS, Linux, SNMP | Win, macOS, Linux (APT) | Desktop + Apple/Android |
| Pricing model | Quote, or in a bundle | Per device, band shown | Quoted in three packages | Quote only | Per technician | Per tech, published |
| Published entry price | $5.25/endpoint reported | $1.50–$3.75 per device | None published | ~$1.50–3.50, reported | $129/tech/mo, MSP Pro | From $99 per technician |
| Included vs add-on | ASM licence is extra | MDM, backup add-ons | ScreenConnect in each | Cove, EDR sold apart | PSA and AI Copilot in | Service desk from Pro |
| Scale and limits | Ceiling not published | Up to 150,000 endpoints | Alert caps by package | ~100 devices, reported | Unlimited devices | 150 endpoints a licence |
| Patching depth | Windows OS + 200 apps | 3 OSes, 200+ apps | NOC-tested Windows | One engine, 3 OSes | Via package managers | OS + apps, cross-OS |
| Integrations | Autotask, IT Glue, EDR | PSAs, EDRs, Okta | PSA, SIEM, open APIs | 75+ integrations, APIs | Own PSA, bundled remote | Security marketplace |
| Governance and SSO | KaseyaOne SSO; FIPS due | SOC 2, ISO 27001 | ConnectWise SSO + MFA | Entra ID sign-in, RBAC | SSO on top plans | SAML 2.0 SSO |
| India storage region | No India; Sydney nearest | No India region | Not documented | GCC is people, not data | Not published | US or Europe |
| Support | 24/7/365 by phone | Free, unlimited | Set in the quote | 24/7 plus Bengaluru | Varies by plan | Phone lines, US and UK |
| Lock-in and exit | Watermark billing ended | 60 days’ notice | Platform-bound | Switching is a migration | 2026 legacy repricing | Monthly billing |
| Best fit | Autotask and Datto shops | Console-first IT teams | ConnectWise PSA users | Separation or speed | Lean team, large fleet | Published-price buyers |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Datto RMM if…
- ✓Your MSP already runs Autotask PSA, Datto backup or Datto EDR and wants the RMM that feeds their alerts and tickets
- ✓Technicians spend real time on Microsoft 365 joiners, leavers and password resets across client tenants
- ✓Kaseya 365 Endpoint’s bundle of RMM, AV, EDR, patching and backup beats buying each tool on its own
Compare alternatives if…
- ✓You want a price on a public page — SuperOps and Atera publish theirs, NinjaOne a per-device band
- ✓Mac and Linux patching matter as much as Windows — NinjaOne and N-able patch all three natively
- ✓You must host the RMM yourself — N-central offers an on-premises option
Do not expect…
- ✓A standalone list price for Datto RMM
- ✓A data platform in India — the nearest is Sydney
- ✓Native Apple MDM or FIPS 140-3 before their announced October 2026 release
Datto RMM is one of 24 rmm & patch products TechBag carries. The RMM & Patch guide narrows them to a shortlist and shows the reasoning. →
What does hand-run patching and user admin cost you?
Drag the sliders (managed endpoints; technician-hour cost). Estimates model technician time spent approving patches, updating third-party apps, answering alerts and handling Microsoft 365 user requests at an assumed 1.5 hours per endpoint a year, with 70% of it removed by policy-driven automation in one console. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Quote only: Datto publishes no standalone price for Datto RMM. It is also the RMM component of Kaseya 365 Endpoint, reported at $5.25 per endpoint a month for Pro and $2.25 for Express (press and reseller figures), with a 50-endpoint minimum for new customers. High-watermark billing ended in December 2025. Prices are in US dollars; TechBag sets the quotes side by side before you commit.
Datto RMM, standalone
Best for MSPs adding only an RMM
- Quote only — no published list price
- Monitoring, patching, Web Remote, M365
- ASM’s 200+ app catalogue is a paid licence
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
Kaseya 365 Endpoint
Best for MSPs wanting RMM plus security
- Reported $5.25 Pro / $2.25 Express per endpoint a month
- RMM, AV, EDR, ASM and endpoint backup
- 50-endpoint minimum; managed SOC on Pro only
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Which platform — Ireland, the US or Sydney — will hold your data, and do client contracts accept storage outside India?
How many Macs and Linux servers do you manage? Native patching is Windows-only; test the macOS component in the pilot.
Are your top 20 applications in the 200+ app ASM catalogue, and is ASM in your quote or only in Kaseya 365?
Do you need AV, EDR and endpoint backup too? Compare Kaseya 365 Endpoint, reported at $5.25 Pro per endpoint a month, with a standalone quote.
Can you commit to 50 endpoints? New Kaseya 365 Endpoint customers must start at that count.
Is your contract on the committed-minimum model that replaced high-watermark billing in December 2025?
Do you manage iPhones and iPads? Native Apple MDM is announced for October 2026; confirm it has shipped before relying on it.
Do clients need FIPS 140-3? The announced October 2026 setting is one account-wide toggle, off by default.
Questions buyers ask
Ready to evaluate Datto RMM?
Count your endpoints by operating system first, or let a TechBag advisor set a Datto RMM quote beside Kaseya 365 Endpoint and the rival RMMs.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.