baanjaiThe everything app
for MSPs.
Run every client fleet from one console — just-in-time admin, remote fixes, hardening, patching, and the audit trail that proves it. White-labeled as yours, priced like one tool instead of five.
Just-in-time admin at the core — and the rest of the job around it.
A subscription with a 60-day money-back guarantee — nothing to set up. On Windows today, macOS and Linux coming.
People in line
334Apply for a founding seatRefer friends to jump the line.
60-day money-back guarantee · cancel anytime.
Your email is never sold or used for advertising.
One stack per client? Not anymore.
The tools you rebill, babysit, and re-learn for every client fold into one subscription — one lightweight helper on each machine, one console for every customer.
- Privilege management
- Remote monitoring & management
- Remote access & support
- Patch management
- Application control
- Ransomware protection
- Software deployment
- Asset inventory
- Audit & compliance records
Try an elevation, start to finish.
The exact Windows prompt your people see, and the console where a technician approves it. Request access on the device, approve it as the technician, and watch admin appear for one action — then vanish.
↑ Click “Request admin approval from technician” on the prompt.
Interactive demo · everything shown is part of the baanjai platform.
From “I need admin” to done — in seconds.
The same simple flow for the person asking and the person deciding.
Someone needs admin
Right when Windows asks for an admin password, they click “Request access” — no phone call to IT, no password to share, no being stuck.
You decide — live
The request lands in your queue with who asked, which machine, the exact app, and an automatic safety check. Approve, deny, or revoke in one click — or let a rule you've set decide instantly.
Access appears, then vanishes
Admin rights are granted for that one action and stripped the moment it's done. Nothing stays elevated — and every elevation is recorded.
Why they call it the everything app.
Elevation is the heart of it — and the rest of the day-to-day grew up around it. Eight pillars, one agent, one console.
Just-in-time admin
The heart of it. Every admin moment becomes a one-click request — approved live or by a rule you've set, granted for one action, gone the moment it's used, recorded forever. Zero standing admins, no shared passwords.
ExploreA live toolkit on every machine
Terminal, files, registry, services, event logs, drivers — fix it in place without ever taking over someone's screen.
ExploreRemote help, human included
Remote control, a quick screen peek, chat with whoever's at the keyboard, and a sealed break-glass way back in.
ExploreHardening, at your pace
Application control, ransomware folder shield, firewall isolation, one-click containment, and a clean detections feed — watch first, enforce when ready.
ExploreSoftware & patching
See what's installed everywhere, push what's missing, and let Windows Update run itself on your rules — printers included.
ExploreRun the fleet
Every machine live on one screen, groups that tag themselves, a self-updating self-healing agent, and your branding on all of it.
ExploreCommands & automation
Fire a one-off fix, keep your go-to commands a click away, or run scheduled jobs — one machine or a thousand.
ExploreProof & records
Every login, decision, command, and elevation — searchable, kept on your terms, secrets sealed at rest.
ExploreThat's the short version. The complete tour — every capability, on one page — lives at everything baanjai does.
See everythingSign in with a scan
A code on the lock screen — scan with your phone, approve, and the machine signs itself in. Nothing typed, nothing shared.
In your pocket
Approve with a thumbprint and catch the alert that matters — from a clean, fast app on iPhone and Android.
Coming to macOS & Linux
On Windows today. The same one-click elevation — request, approve, audit — is headed everywhere your team works.
Every client, one console — and your name on all of it.
baanjai is built multi-customer from the ground up: each client fully separated, each technician scoped, and everything the end user sees carrying your brand — not ours.
- White-label every surface your clients' people see — the approval pop-up, the chat window, the tray, the sign-in tiles.
- Technicians scoped per customer — they only ever see and touch the clients you grant them.
- Clone a known-good client setup — hardening, software lists, branding, and policies — to onboard the next one in a click.
- Harden each client at their own pace: watch first, enforce when they're ready, without touching the others.
- The audit trail that wins the renewal — show a client exactly who did what, when, on every machine.
Retire the shared admin password.
Standing local admin and a password everyone knows is the old way. baanjai turns every admin moment into a request you can see, decide, and trust.
- A shared admin password everyone reuses
- Standing local admin on every machine
- Help-desk tickets and waiting around
- No real record of who elevated what
- Single-use approval, no password to share
- Zero standing admin — access only for the action
- Decisions in seconds, from a live queue
- Every elevation recorded automatically
Field guides for tighter IT.
Practical, vendor-neutral playbooks you can act on today — exactly how to do it, step by step. Free with your work email.
The MSP Margin-Leak Playbook
Find the hours admin requests steal from every client contract — and plug the leak.
Read the guideThe Local-Admin Offboarding Playbook
Remove standing local admin across your fleet in 30 days — without a helpdesk revolt.
Read the guideThe Cyber-Insurance Answer Sheet
The privilege & endpoint questions insurers actually ask — and how to answer “yes.”
Read the guideThe Endpoint Hardening Checklist
The eight endpoint controls that stop the ransomware chain — in priority order.
Read the guideSecurity that's on from the first click.
Granting admin is a security decision — so baanjai treats it like one, for the people asking and the people approving.
- No one holds standing admin — not even your technicians.
- Passwordless passkeys plus authenticator 2FA, enforceable for everyone.
- A complete, searchable record of every request, decision, and elevation.
- Revoke any trust instantly — the next prompt asks again.
- Approvals are single-use and tied to the real person who asked.
- Decide who can approve what — by team and role, down to each machine.
Become a founding operator.
In 30 days, every standing local-admin account and shared password on your fleet is gone — and no one is ever stuck waiting on IT. It's a subscription: nothing to set up or maintain, just a lightweight helper on each machine.
60 days. Watch first. Money back.
Start in watch-only mode — it changes nothing — and see every admin moment across your fleet first. Run baanjai for a full 60 days; if it hasn't retired your standing admin and shared passwords and made your team faster, tell us and we'll refund every penny. And our Zero-Lockout Promise means a bad rule never strands a user or a machine — if it ever does, we fix it on our dime.
Everything that comes with it
Done-with-you setup + training videos
We roll it out with you, and turn what we learn in watch mode into your first one-click rules — so day one, the apps your team already uses just work. Plus an on-demand training-video library, so anyone's up to speed in an afternoon.
Trusted-app starter library + hardening pack
A ready-made approval library for the everyday business apps, bundled with a done-for-you security baseline you switch on at your own pace.
Founding-operator perks
No long-term contract and no lock-in. Founder pricing locked for life, a direct line to the team, and your requests at the front of the roadmap.
Only 2–3 new operators a month. Every onboarding is hands-on and run by the small team that built baanjai, so founder seats go quickly — and the founder terms are for this founding phase only.
One console for every client.
The admin prompt, the remote fix, the patch, the proof — every machine across every customer, in one place.
60-day money-back guarantee · founding operators onboarded 2–3 a month.