RoboShadow

Vulnerability scanning and automated third-party patching with Microsoft 365 sync

ToolVulnerability ManagementCloud

Pricing: Community tier free. Automation plan listed at GBP 250 per month per account including 100 Cyber Heal agents, with GBP 1 per additional agent per month. Enterprise tier priced on request.

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed August 2026 · How we review listings

What is RoboShadow?

RoboShadow is a cloud-hosted vulnerability management and attack surface platform operated by ROBO SHADOW LTD, a UK company registered at Companies House under number 10726476 and incorporated on 13 April 2017. The platform combines an external scanner for internet-facing IPs and websites, a LAN scanner for internal device discovery, a web application scanner and endpoint agents that report patch level, antivirus status, encryption and firewall state. The vendor states that its Cyber Heal AutoFix function patches over 7,000 third-party applications and that the platform syncs device coverage from Microsoft 365 and Active Directory rather than rediscovering assets, and audits MFA compliance via Microsoft 365. Compliance reporting is offered against Cyber Essentials, Essential 8, NIST, SOC 2, ISO 27001 and HIPAA.

Best for: Small and mid-sized organisations and MSPs running Microsoft-centric estates that want vulnerability scanning and automated third-party patching from a single console, with a usable free tier for evaluation.
Pros
  • The free Community tier is not a time-limited trial: the vendor pricing page lists external scanning, LAN scanning, web app scanning, daily agent updates, 365 and AD sync and MFA compliance auditing at no cost, subject to a soft device limit described in the vendor documentation
  • Capterra shows a 5.0 rating across 22 reviews, with vulnerability scanning rated 4.9, threat prioritisation 5.0 and patch management 4.7
  • G2 reviewers, across 5 reviews at a 5.0 rating, cite ease of deployment and single-console bulk remediation across Windows servers, workstations and Macs
  • Corporate existence is independently verifiable: ROBO SHADOW LTD is listed as Active at Companies House, company number 10726476
Things to check
  • Capterra reviewers note the absence of authenticated scans and of a Linux agent, and G2 reviewers describe the Mac agent as less developed than the Windows agent
  • SOC 2 Type II (issued March 2026), Cyber Essentials Plus and an annual CREST penetration test are stated in RoboShadow's own documentation rather than on a public register, so request the report and certificate numbers directly
  • The paid tier is listed at GBP 250 per month per account with 100 agents included, so organisations with small estates should compare the effective per-device cost against alternatives

Reported in public reviews and vendor documentation. See sources below.

Key Features

External scanner for internet-facing IP addresses and websites, checking open ports and CVEs with daily automated reporting
LAN scanner for internal device discovery and vulnerability assessment
Endpoint agents reporting OS patch status, antivirus state, disk encryption and firewall configuration
Cyber Heal AutoFix remediation, which the vendor states patches over 7,000 applications and can manage firewall settings and uninstall insecure software
Microsoft 365 and Active Directory sync for device coverage, plus MFA compliance auditing via Microsoft 365
Web application scanner running OWASP-oriented checks
Compliance reporting mapped to Cyber Essentials, Essential 8, NIST, SOC 2, ISO 27001 and HIPAA
Integrations with Microsoft Intune, Microsoft Defender, CrowdStrike, Malwarebytes, and RMM and PSA tools including NinjaOne, Datto, ConnectWise, Autotask, HaloPSA and ServiceNow

Are you RoboShadow? Improve this listing with screenshots, case studies and more.

Quick Info
PricingCommunity tier free. Automation plan listed at GBP 250 per month per account including 100 Cyber Heal agents, with GBP 1 per additional agent per month. Enterprise tier priced on request.
ModelFreemium with a paid subscription tier priced per account plus per-agent overage, and a quoted enterprise tier
Founded2017
CloudYes
Self-HostedNo

Last updated: Aug 10, 2026

Certifications
SOC 2 Type II (vendor-stated, March 2026)Cyber Essentials Plus (vendor-stated)Annual CREST-certified penetration test (vendor-stated)