- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Absolute
Endpoint resilience anchored in device firmware, plus zero trust access that survives bad networks— Absolute’s Secure Endpoint keeps PCs visible, patched and recoverable, and Secure Access keeps remote sessions alive. It is not an MDM: it enrols no phones and often runs beside Intune. This hub covers two Absolute products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Two intel pages. Firmware-anchored endpoint resilience and resilient zero trust access.
Absolute’s two product lines — each card is a full intel page: Secure Endpoint, whose five editions run from Visibility to Resilience for Automation, and Secure Access, the former NetMotion.
Absolute Secure Endpoint
See, freeze, self-heal and patch every PC.
Five editions, Visibility to Resilience for Automation with the ex-Syxsense patch engine; one agent on Windows, macOS and ChromeOS PCs.
Absolute Secure Access
Remote sessions that survive network drops.
Formerly NetMotion: Core is ZTNA with NAC, Edge adds CASB and DEM, Enterprise an Ericom-powered gateway; cloud or your own servers.
Absolute Persistence
Platform & engineThe firmware technology that rebuilds the Absolute agent if it is removed, embedded in over 600 million devices by Absolute’s count. It ships dormant and activates only when a customer buys an Absolute product, so it is a feature of Secure Endpoint, not a licence
Absolute Rehydrate
Platform & engineFirmware-based recovery playbooks that can restore a tampered PC from a trusted OS image, behind a passcode-protected break-glass step at boot. It is included in the Resilience editions and has a 30-day no-cost trial, so it is covered on the Secure Endpoint page
Application Resilience
Platform & engineSelf-healing for other critical apps, such as EDR, VPN and Intune agents, from a catalogue Absolute puts at 80+ security apps. A feature of the Absolute Resilience edition and above, explained on the Secure Endpoint page
Absolute Ransomware Response
Platform & engineA readiness assessment by Absolute experts, cyber-hygiene baselining, self-healing of key controls and recovery guidance from Absolute Professional Services. Mostly services wrapped around Resilience capabilities, so TechBag notes it here rather than paging it
Insights for Network and Secure Web Gateway
Platform & engineTwo Secure Access add-ons: Insights for Network, formerly Mobile IQ, with 70+ experience dashboards and an on-premises server that embeds Splunk, and a web gateway powered by Ericom. Both are folded into the Secure Access page
Lenovo ThinkShield TraceLock
Platform & engineA Lenovo-branded product unveiled on 2 June 2026 and powered by the Absolute platform. It is bought from Lenovo, not from Absolute, so it gets this line only
Education packages
Platform & engineResilience for Education, Resilience for Chromebooks and Resilience for Student Devices, packaged for schools. Rehydrate is not part of them, and the stolen-device Service Guarantee applies only to education customers in North America, the UK and Australia
Legacy Syxsense products
Platform & engineSyxsense Manage, Secure and Enterprise keep full support for existing customers but are not sold as a new line; their patch engine now powers Resilience for Security and Resilience for Automation. Syxsense’s old mobile management was not carried over
Absolute sells across 1 of the products TechBag carries in endpoint management. The Endpoint Management guide shows how the category splits and which part is yours. →
Also sold in Network Security & SASE (1 product).
Why “it comes back by itself” is the whole story
Most endpoint tools are only as good as the agent still running on the device. Absolute’s agent is backed by Persistence in the PC’s firmware, so a stripped or broken agent is reinstalled, and it can repair other agents such as EDR, VPN or Intune. The catch: firmware support varies by laptop model, and it manages PCs, not phones.
Absolute Persistence
Ships in the firmware of PCs from close to 30 makers, including Dell, HP and Lenovo, and reinstalls the agent if a user or attacker strips it out.
Secure Endpoint console
Holds inventory, 365 days of location history, freeze and wipe commands, Reach scripts and, in the top two editions, patch policy.
Secure Access gateways
The access server runs in Absolute’s cloud service or on Windows Server 2016 to 2025, with self-hosted gateways an option for in-country traffic.
Connectors and API
ServiceNow, Forescout eyeSight and universal SIEM connectors, a certified ConnectWise RMM integration and Falcon-linked recovery with CrowdStrike.
Start with what must keep running — the PC, its security tools or the remote connection — then pick the edition.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Leader and Outperformer, Patch Radar 2025
Absolute says it was the only vendor named both; GigaOm cited Resilience for Automation, the top Secure Endpoint edition
Notable Vendor, endpoint management
one of 35 vendors in Forrester’s endpoint management platforms landscape, as Absolute’s own report page puts it
Notable Vendor, Zero Trust Edge Q4 2024
named in Forrester’s Zero Trust Edge solutions landscape, which Absolute announced in January 2025
Moderate authorisation, March 2025
granted for the Secure Endpoint product suite; it does not extend to Secure Access
Authorized, May 2026
announced by Absolute on 14 May 2026 for state and local government buyers in the US
ISO 27001:2022 + SOC 2 Type 2
the ISO audit scope names Canadian, US, European, Indian and UK data centres; SOC 2 covers both products’ cloud services
Radar, Endpoint Security 2024
a “Leadership Position”, in the words of Absolute’s February 2024 release title
Secure Access 12.x ends 1 Nov 2026
Mobility builds before 13.05 carried a CVSS 9.8 ActiveMQ flaw; Persistence fixes arrive as OEM firmware updates
The company in six figures
See the platform, hear the pitch
Absolute Security, an enterprise Cyber Resilience Leader. We Stop Downtime.
A May 2026 brand film for the downtime-recovery pitch; the “Leader” in the title is Absolute’s own tagline, not an analyst placement.
Absolute Security CEO Christy Wyatt on the Cyber Resilience Imperative
A February 2025 interview with the CEO on the cyber resilience case that Absolute builds its business around.
Absolute Security GenAI Innovations Expand Cyber Resilience Capabilities
An August 2025 briefing on the AI Assistant and related generative AI features added to the Absolute platform.
Where Absolute sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
Absolute Across Its Solution Areas
Each dot is a Absolute solution area: competitive position vs category momentum.
The core of the pitch: Persistence rebuilds the agent, Application Resilience repairs other agents and Rehydrate restores a damaged OS image.
Private-Access Coverage × Endpoint Remediation Depth
How much remote access to private apps each vendor sells vs how far it goes in fixing, patching and restoring the endpoint itself.
Secure Endpoint patches, freezes and self-heals PCs from firmware, and Secure Access adds ZTNA with session persistence; both are quoted.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with Absolute?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Which devices are in scope?
3. Who will own it?
Two products, two jobs
Secure Endpoint keeps PCs visible, patched and recoverable; Secure Access keeps remote users connected to private apps. Each is licensed on its own.
Read →Why this is not an MDM
Absolute runs an agent on Windows, macOS and ChromeOS PCs and enrols no phones or tablets. Many customers keep Intune alongside it, and Absolute repairs its agent.
Read →Which Secure Endpoint edition?
Each edition contains the one below: Control adds freeze and wipe, Resilience adds self-healing and Rehydrate, and patching starts at Resilience for Security.
Read →What firmware Persistence does
Business laptops from Dell, HP, Lenovo and others ship with Persistence in firmware, dormant until activated. Once on, a removed agent comes back by itself.
Read →When the signal keeps dropping
Secure Access holds application sessions open while a field worker’s link switches or fails, then layers per-app ZTNA and NAC on top of that tunnel.
Read →Where Absolute fits
The Endpoint Management category page splits the market into UEM, RMM and patch, endpoint protection and remote access, and shows where Absolute’s patch editions sit.
Read →The acronym decoder
Every term on these pages, in one place- Endpoint resilience
- Keeping a device and its security tools working, and restoring them when they fail.
- Firmware persistence
- Code in a PC’s firmware that survives reimaging and can reinstall a removed agent.
- Self-healing
- Automatic repair or reinstall of an app that has broken, been tampered with or uninstalled.
- Rehydrate
- Absolute’s remote recovery of a damaged PC, up to reinstalling a trusted OS image.
- Device freeze
- Locking a lost or non-compliant device remotely until IT releases it.
- Geofence
- A map boundary that raises an alert or an action when a device leaves it.
- Patch management
- Finding and deploying missing OS and third-party application updates on a schedule.
- Vulnerability remediation
- Fixing weaknesses such as misconfigurations as well as missing patches.
- ZTNA
- Granting a user one named application after checking identity and device, never the whole LAN.
- Session persistence
- Keeping app sessions alive while a device roams between or loses networks.
- NAC
- Network access control: admitting a device only when it meets a posture policy.
- DEM
- Digital experience monitoring: measuring what users actually experience on the network.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Check firmware support first
Run your laptop models through Absolute’s compatibility checker. Persistence, firmware freeze and Rehydrate all depend on the OEM and the model.
Pick the lowest edition that works
Secure Endpoint editions are cumulative. If you already patch with another tool, Resilience may be enough; patching begins at Resilience for Security.
Keep a device manager for phones
Absolute enrols no iOS or Android devices and does no Autopilot or Apple enrolment. Budget Intune or another UEM for that work alongside it.
Size Secure Access by edition
Core covers ZTNA, the tunnel and NAC; Edge adds CASB and experience monitoring; Enterprise adds the web gateway and DLP. All three are quoted.
Plan the Secure Access upgrade
Version 12.x reaches end of life on 1 November 2026, and Windows Server 2016 support for the access server ends on 12 January 2027.
Get it priced in rupees
Absolute’s Marketplace MSRPs are private-offer figures, not a checkout price. TechBag scopes the edition and device count and quotes in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Secure Endpoint Visibility | Per device per year · inventory, location history, sensitive-file discovery, AI Assistant | MSRP $21.95, private offer | Knowing what you own |
| Secure Endpoint Control | Per device per year · adds geofences, freeze, file delete and certified wipe | MSRP $39.95, private offer | Lost and stolen devices |
| Secure Endpoint Resilience | Per device per year · adds Application Resilience, Reach scripts and Rehydrate | MSRP $69.95, private offer | Keeping other agents alive |
| Resilience for Security | Per device per year · adds OS and third-party patching, rollback and risk scoring | MSRP $79.95, private offer | Patching on the same agent |
| Resilience for Automation | Per device per year · adds vulnerability remediation, no-code workflows, remote tools and the API | MSRP $89.95, private offer | Automated remediation |
| Secure Access | Core, Edge or Enterprise edition · cloud or self-hosted gateways · unit not published | Quote only | Mobile and field workforces |
Secure Endpoint is licensed per device per year in five cumulative editions; Absolute’s own AWS Marketplace listing shows MSRPs of $21.95 to $89.95, marked private offer only, so every deal is a quote. Secure Access is quote-only. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Buying it as an MDM
Absolute manages PCs through an agent, not phones through enrolment. Syxsense’s old mobile management did not come across into the Absolute editions.
Treating the MSRP as a checkout price
Absolute’s AWS Marketplace listing is marked private offer only. The $21.95–$89.95 figures are a starting point for a quote, not a cart.
Expecting every feature on every laptop
Firmware freeze needs an eligible Windows device and supervisor-password control an eligible Lenovo; check each model before you rely on them.
Assuming you can pin data to India
Absolute opened an India data centre on AWS, but it documents no product or tenant you can choose to host there. Ask for it in writing.
Mixing up the Secure Access names
Cisco also sells a Secure Access, and its OIDC docs surface in searches. Absolute’s documented sign-in route is SAML through the Entra app NetMotion Mobility.
Counting on Linux patching
A product page names Linux for patch scanning, but the agent requirements list only Windows, macOS and ChromeOS. Confirm Linux in the quote.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers now ask how fast a fleet recovers, not only what it detects — which is why Absolute pairs self-healing endpoints with access that rides out network failures.
Repairing the security stack itself
Absolute self-heals 80+ security apps by its count and published a 2024 demo of fixing CrowdStrike blue-screen PCs alongside Falcon.
What it means for you
Ask what happens when your EDR or MDM agent fails, not only what it detects.
Recovery below the operating system
Rehydrate, announced as generally available in September 2025, runs recovery playbooks from firmware and can reinstall a trusted OS image.
What it means for you
Test a full remote rebuild before an incident forces one.
Patching folded into endpoint suites
Absolute bought Syxsense in September 2024 and launched it as two new Secure Endpoint editions in January 2025, with a GigaOm Leader nod in October.
What it means for you
Compare a suite’s patch depth with a standalone patch tool’s.
Agentic AI for recovery
At RSAC in March 2026 Absolute announced plans to add agentic AI to its platform to speed the repair of security controls and apps.
What it means for you
Treat it as roadmap until a release note ships it.
Questions buyers ask about Absolute
Ready to shortlist Absolute?
Open either intel page for the deep dive, or let a TechBag advisor build the case with you — the laptops your firmware covers, the edition you actually need, the remote users to connect, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.