Big Security Issue – SolarWinds RMM Review

I've worked with SolarWinds support and they verified that this app bypasses 2FA and IP auto-detect security. Its very existence puts all SolarWinds RMM administrators, and their clients, at risk. Mobile App access is turned on in the dashboard under Roles and Permissions by default. A setting that can be changed for custom roles you create. But the most trusted user account, your Agent Key, has mobile access enabled by default and it can't be changed by anyone, including SolarWinds support. Leaving it as the only account you can't protect by turning off mobile access completely. The bottom line is that this app took RMM security away when it was published, whether we liked it or not. Security that our clients rely on us to have in place. I expect better from an MSP app developer.
Review by Souzetsu on SolarWinds RMM.