PDQ is an endpoint management platform designed for IT administrators and sysadmins. Manage, secure, and automate Windows and macOS endpoints across remote, hybrid, and on-site environments from a central platform.
PDQ is designed to make the grind of everyday IT workflows seamless and the thorny why-the-hell-isn’t-this-working issues easier to diagnose.
Core capabilities include patch management, vulnerability remediation, software deployment, remote desktop access and monitoring, and IT automation. In short, the stuff you actually tell us to build. Just look at our Discord.
Vulnerability remediation: Vulnerabilities are continuously detected and prioritized using real-world exploit activity in addition to CVSS, enabling remediation based on real, not theoretical, business risk.
Patch management: Patch Windows OS and more than 1,000 Windows and macOS packages from a hand-built library sourced directly from publishers, virus-scanned, stripped of nonsense, and typically updated within hours of a new release.
Software deployment and automation: PDQ's prebuilt workflows and automations can be running within minutes of onboarding. From there, sysadmins can combine custom multistep packages, advanced PowerShell Scanners, dynamic device groups, vulnerability automations, and a community-shared script library to create an end-to-end system tailor-built for their environment, reducing what was once days into minutes.
Remote desktop and diagnostics: For when all else fails, PDQ ships with native device-level diagnostics and a remote desktop tool that fires up quickly to help you diagnose, fix, and move on, whether you’re dealing with an x64 Lenovo or an ARM MacBook Pro.
Multitenant management: Multitenant support allows IT teams managing multiple environments to operate from a single console.
Real-time automation: Event-driven automation allows IT teams to execute workflows based on device state and predefined conditions. Deployments trigger the moment a condition is met without waiting for a scheduled window.
Offline device deployment: Offline device deployment queuing ensures no device is skipped, regardless of connectivity at the time a deployment runs.
Where compliance, regulatory, or org policy requires it, PDQ’s core deployment and patching capabilities can also be deployed as an on-premises, agentless solution.
PDQ is SOC 2 certified and includes security features such as MFA, role-based access controls, encryption, and audit logging to support compliance requirements.
Pricing is publicly available and supports self-service purchasing without requiring a sales call. A 14-day free trial is available with no credit card required.
The ongoing systems Paramify maintains to stay secure and prove it—covering the policies, processes, and tools that ensure regulatory and security requirements are consistently met.
Controls are the specific safeguards or security requirements put in place to reduce risk and protect systems, data, and operations.
AFC-CSO-CRA
Pass
Providers MUST complete the required actions in Emergency or Emergency Test designated messages sent by FedRAMP within the timeframe included in the message.
AFC-CSO-INB
Pass
Providers MUST establish and maintain an email address to receive messages from FedRAMP; this inbox is a FedRAMP Security Inbox (FSI).
• Unless otherwise notified, FedRAMP will use the listed Security Email on the Marketplace for these notifications.
• If a provider establishes a new inbox in reaction to this guidance that is different from the Security Email then they must follow the AFC-CSO-NOC (Notification of Changes) rules to notify FedRAMP.
AFC-CSO-NOC
Pass
Providers MUST immediately notify FedRAMP of any changes to the email address for their FedRAMP Security Inbox.
