Kaseya used DattoCon 2025 to announce a platform strategy rather than one isolated product launch. The company outlined a move from Datto’s legacy high-watermark pricing toward committed minimum quantities and variable consumption, introduced identity backup for Microsoft Entra ID, promoted a new SIRIS appliance, previewed a unified cyber-resilience platform and proposed an AI-powered Digital Workforce. It also acquired INKY and is now moving customers away from SaaS Defense.
For managed service providers, the important distinction is between what is available, what is in limited release, and what remains a roadmap promise.
As an Amazon Associate I earn from qualifying purchases.
What Kaseya announced at DattoCon 2025
At DattoCon 2025 in Miami Beach, Kaseya focused on four themes: more flexible commercial terms, broader cyber-resilience coverage, stronger email security and AI-assisted MSP operations. Kaseya’s announcement was dated October 7, 2025, and covered products across the Datto and Kaseya portfolios.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteThe headline strategy is credible, but buyers should not treat every stage presentation as a generally available product or independently verified performance result.
#1 Best Overall
Pricing: from high-watermark billing to CMQ plus consumption
Under a traditional high-watermark model, an MSP could continue paying according to its highest historical quantity even after a customer reduced its number of users or endpoints. Kaseya said Datto RMM, Datto SaaS Protection and Autotask would begin moving to a Committed Minimum Quantity (CMQ) plus variable-consumption model in December 2025, with the broader portfolio expected to follow by the end of June 2026.
The practical rule is not “pay only for what you use.” Current SaaS Protection documentation says the monthly charge is based on the CMQ or calculated usage, whichever is higher.
How CMQ works in practice
- 1,000 committed seats and 800 actual seats: the MSP may still be billed for 1,000 seats because the commitment is the floor.
- 1,000 committed seats and 1,150 actual seats: the MSP may be billed according to the higher measured usage, subject to that product’s specific metering rules.
- Client churn followed by growth: the model may be less punitive than permanently resetting an agreement to a historical peak, but the MSP still carries unused commitment during the low period.
The potential advantage is flexibility for a growing MSP whose usage regularly exceeds its original commitment. The downside is that CMQ can preserve excess cost after customer departures. MSPs also need to confirm how each product treats paused, inactive and archived users, because the rules are not necessarily identical across Datto RMM, SaaS Protection, Autotask and other Kaseya services.
Free tools Windows power users keep installed
One-click scans. No signup required.
Kaseya 365 User subscriptions are treated separately from the SaaS Protection pricing change described in the current documentation. Do not assume that one Kaseya product’s billing mechanics apply to the entire portfolio.
“Smarter invoicing” does not remove contract complexity
CRN reported that Kaseya planned consolidated invoice line items, direct credit-request tracking and an invoice-comparator tool showing usage, trends and price changes, with initial availability beginning in November 2025. Those tools could make reconciliation easier, but they do not eliminate minimum commitments, product-specific meters, archived-seat rules or the work of reconciling multiple client organizations.
Before accepting a new commercial structure, request examples showing the invoice at 80%, 100% and 125% of committed usage. Also ask whether CMQ can be reduced during the term, whether unused commitment can be moved between organizations and when usage is measured.
Datto Backup for Microsoft Entra ID makes identity a backup workload
Datto Backup for Microsoft Entra ID is intended to protect and restore identity data such as users, groups and roles. The use cases include accidental deletion, administrative misconfiguration, outages and attacks targeting identity infrastructure.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →This matters because recovering Microsoft 365 data is not the same as recovering the directory that controls access to it. A mailbox may be intact while the user, group membership or privileged role needed to reach it has been deleted or altered.
However, restoring directory objects does not automatically restore every dependent application, conditional-access policy, device relationship, authentication method or business process. MSPs should test a complete recovery scenario, including:
- restoring a deleted user and verifying access;
- reconstructing group membership and privileged roles;
- checking multifactor authentication and conditional-access dependencies;
- confirming that compromised administrators cannot control the recovery;
- documenting recovery permissions, sequencing and audit evidence.
The product has continued receiving releases in 2026, according to Datto’s release notes.
Entra ID pricing and promotional terms
CRN reported that the service would be free for six months when bundled with SaaS Protection and Spanning, included at no additional cost for Kaseya 365 User license holders and available as a standalone offering. These terms should be confirmed in writing because eligibility, editions, retention, storage and bundle requirements can change.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →“Free” may mean no additional license charge while still requiring a qualifying bundle or contract. Ask whether the promotion applies to existing customers, what happens after six months, which Entra objects are covered and whether restore support or storage carries separate limitations.
Datto SIRIS 6: a new appliance, with claims that need testing
Kaseya presented Datto SIRIS 6 as a new backup appliance. CRN reported Kaseya’s claims of approximately 50% faster performance and scalability from 2 TB to 25 TB.
Those are vendor-reported figures, not independent benchmark results. MSPs should clarify whether the 50% improvement applies to a particular workload, configuration or test method. They should also distinguish raw appliance capacity from usable protected capacity, appliance throughput from end-to-end recovery time and local capacity from cloud-retention capacity.
Before standardizing on SIRIS 6, ask whether it replaces or complements existing SIRIS appliances, what migration path is available, which workloads and hypervisors are supported, and how replication, cloud retention and recovery are priced.
Unified cyber resilience: promising, but still a roadmap issue
Kaseya previewed a cyber-resilience platform intended to bring together SaaS, endpoint, cloud and identity backup. The proposed experience includes pooled storage, unified pricing, risk scoring and AI-powered search. A technician might eventually search for a user and see related mailbox, endpoint and other protected data across workloads.
CRN reported that initial features were forecast to begin rolling out in the second quarter of 2026. The DattoCon material did not establish that every element was generally available, so MSPs should treat this as a preview unless current product documentation says otherwise.
If delivered effectively, the platform could reduce portal switching, speed incident scoping and simplify cross-workload recovery. It could also increase vendor concentration, make cost allocation harder when storage is pooled and create a larger operational dependency on one console. AI search is not the same as reliable recovery orchestration; recovery tests and documented runbooks remain necessary.
Digital Workforce: agentic automation with governance requirements
Kaseya described its proposed Digital Workforce as a group of AI-powered digital specialists that can understand an MSP environment, assess problems and act in ways resembling an experienced technician. Limited availability was announced for spring 2026.
The available announcement does not establish the final feature list, general-availability date, pricing or performance evidence. It also does not answer the questions that matter most in production:
Best Value
- Is the system a copilot, a workflow layer or an autonomous agent?
- Which actions require technician approval?
- What systems and tenants can it access?
- Are permissions least-privilege and customer-specific?
- Are actions fully logged, reversible and subject to rollback?
- How does it handle ambiguous signals or conflicting instructions?
- Is customer data used to train models?
- How are data residency, retention and support obligations handled?
CRN reported Kaseya’s claims of a 36% improvement in time to resolution, a 30% improvement in mean time to resolution and a 12% reduction in ticket volume over a period of less than six months. These are company-reported figures, not independent validation. Procurement teams should request the baseline, sample size, definitions, customer cohort and methodology before using them in a business case.
The sensible starting point is supervised automation for triage, diagnosis and low-risk remediation—not unrestricted replacement of technicians. Destructive or cross-tenant actions should require explicit approval and produce an audit trail.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.INKY changes Kaseya’s email-security roadmap
Kaseya’s acquisition of INKY gives it an email-security platform focused on phishing, impersonation, behavioral analysis and user coaching. Kaseya positioned the acquisition as a way to strengthen an area it believed was below best-of-breed standards.
The practical consequence is the phaseout of SaaS Defense. According to Kaseya’s current lifecycle notice:
- INKY became the default email-security platform for new Kaseya 365 User sales on January 1, 2026.
- Existing customers can transition during their remaining commitment period.
- SaaS Defense support ends December 31, 2026.
- SaaS Defense reaches end of life on June 30, 2027.
- Pricing remains unchanged during the existing commitment period, while new SaaS Defense feature development has ended.
This is more actionable than the acquisition announcement itself. MSPs running SaaS Defense should create a migration inventory, record current filtering and coaching policies, establish baseline false-positive and phishing metrics, and confirm how rules and reporting map to INKY. Unchanged pricing does not guarantee unchanged functionality or migration effort.
What MSPs should do now
- Audit contracts: document current high-watermark values, CMQs, renewal dates and termination terms for every affected product.
- Model usage: run 80%, 100% and 125% scenarios, including churn, seasonal changes and new customer growth.
- Verify metering: confirm how protected, inactive, paused and archived users or endpoints are counted.
- Test Entra recovery: restore users, groups and roles in a controlled procedure and verify authentication dependencies.
- Request product status: distinguish generally available features from limited releases and roadmap items.
- Govern AI actions: require least-privilege access, human approval thresholds, logging, rollback and clear data-use terms.
- Plan the INKY migration: do not wait for the SaaS Defense support deadline to begin policy and customer communication work.
- Review concentration risk: compare the efficiency of consolidation with the portability and resilience of a best-of-breed stack.
- Update customer contracts: decide whether variable vendor charges are passed through or absorbed into a fixed managed-service fee.
- Document exit requirements: confirm data export, retention, recovery portability and offboarding obligations before expanding dependence on the platform.
Bottom line
DattoCon 2025 marked Kaseya’s attempt to turn Datto from a collection of MSP products into a more integrated operating and cyber-resilience platform. CMQ billing may suit fast-growing MSPs but still leaves customers responsible for a committed floor. Entra ID backup addresses an important recovery gap, while SIRIS 6, unified cyber resilience and Digital Workforce require careful validation of availability, scope and evidence. The INKY transition is already a concrete lifecycle issue for SaaS Defense customers.
The strongest buying decision will depend less on the number of announced features than on contract mechanics, tested recovery scope, AI governance, migration support and the cost of relying on one vendor across PSA, RMM, backup, identity, email security and automation.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
