Action1 Calls on Endpoint Management Vendors to Unite Against Endpoint Takeover Threats

Following the disclosure of zero-day vulnerabilities in N-able N-central, Action1 invites endpoint management and RMM vendors to access its industry-first Endpoint Takeover Prevention architecture and help set a new security standard for the industry

HOUSTON, Nov. 10, 2026 /PRNewswire/ -- Action1, a leading provider of autonomous endpoint management (AEM) solutions, today announced the Call for Collective Endpoint Takeover Resilience. The initiative offers all endpoint management and remote monitoring and management (RMM) vendors access to Action1's proprietary Endpoint Takeover Prevention (ETP) architecture, which prevents attackers from using compromised management platforms to take control of customer endpoints.

The announcement follows the public disclosure of more than 30 zero-day vulnerabilities in N-able's N-central platform and the company's decision to temporarily take its hosted environments offline while advising on-premises customers to do the same as a precaution. N-able has stated that it has not yet observed active exploitation.

From Industry-First Innovation to Industry-Wide Protection

Endpoint management platforms hold extraordinary privileges. They can deploy software, execute scripts, change configurations, and remotely control endpoints across entire organizations. Endpoints traditionally trusted every command the management platform sends, creating an industry-wide security risk: compromising a single platform could give threat actors control over millions of endpoints across thousands of organizations.

The SolarWinds and Kaseya attacks showed that this risk is far from theoretical. Most recently, multiple zero-day vulnerabilities in N-able N-central highlighted the risk of attackers exploiting management platforms to potentially take over customer endpoints, prompting precautionary shutdowns.

As AI accelerates vulnerability discovery and exploitation, preventing platform compromise is becoming increasingly difficult. Action1 believes the industry must move beyond prevention alone and adopt security architectures that limit what threat actors can do if a compromise occurs.

The company recognized this risk in 2023 and began investing in a zero-knowledge approach to endpoint management, built on the principle that no one, including Action1 itself, should hold privileged access to customer endpoints. That work led to Action1's ETP, introduced in October 2026.

With ETP, high-risk endpoint actions such as running scripts, deploying software, and opening remote sessions require cryptographic authorization using customer-controlled private keys. Even if threat actors compromise the endpoint management platform, they cannot use platform control to authorize these actions on customer endpoints.

"When we introduced ETP, we said that no endpoint management vendor, including Action1, should become a single point of failure for its customers," said Alex Vovk, CEO and Co-Founder of Action1. "The recent N-central disclosure reminds us that no vendor can promise its platform will never be compromised. We've invested years in developing an architecture designed to prevent a platform compromise from becoming an endpoint takeover, and we're ready to share it with our competitors. Protecting customers matters more than any technological advantage."

Introducing the Call for Collective Endpoint Takeover Resilience

Action1 will provide participating vendors with access to detailed ETP architectural information, including its customer-controlled authorization model, the cryptographic signing approach, and independent endpoint-side verification mechanisms. The initiative aims to help vendors evaluate and adopt similar protections in their products to better protect their customers.

Action1 is extending this invitation directly to N-able and welcomes participation from other endpoint management vendors, regardless of their competitive relationship with Action1.

"Security should bring our industry together, not divide it," Alex Vovk added. "Whatever endpoint management platform an organization chooses, a compromise of that platform should not hand threat actors control of its endpoints. That should be the standard for everyone."

Endpoint management and RMM vendors can read the full call and request access to Action1's ETP architecture at: https://go.action1.com/call-for-collective-action-on-endpoint-takeover-resilience 

About Action1

Action1 is an autonomous patch management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes—it just works and is always free for the first 200 endpoints, with no functional limits. By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment and remediation without needing a VPN, it eliminates routine labor, preempts ransomware and security risks, and protects the digital employee experience.

In 2026, Action1 was recognized by Inc. 5000 as the fastest-growing founder-led cybersecurity company in America. At the helm of Action1 are industry veterans Alex Vovk and Mike Walters, American entrepreneurs who founded Netwrix, which has grown into a multi-billion-dollar industry-leading cybersecurity company.

Follow Action1 on LinkedIn, Reddit and X.

SOURCE Action1 Corporation