In short: Absolute Secure Endpoint is device visibility and resilience software backed by Persistence in device firmware. Visibility covers inventory, location, security posture and sensitive data discovery; Control adds geofencing, device freeze and remote wipe; Resilience adds app self-healing and Rehydrate recovery. Resilience for Security and for Automation add patching and vulnerability remediation.
What Absolute Secure Endpoint is
Absolute Secure Endpoint is a cloud console and device agent that keeps a constant link to your organisation's computers. What makes it different is Persistence: technology that PC manufacturers embed in device firmware before the device ships. It stays dormant until the Absolute agent is installed and first connects to the Absolute platform. From then on, if the agent is removed or damaged, Persistence repairs or reinstalls it, and Absolute says this holds even after a BIOS flash.
From that link you can see what each device is, where it is and whether its security tools are healthy, act on it remotely, and in the higher editions have Absolute repair the other agents you depend on and recover devices that have been compromised. Everything is run from one cloud console with dashboards, alerts, role-based access and single sign-on.
Editions compared
| Edition | What it adds |
|---|---|
| Visibility | Hardware and software inventory, device location on and off the network with a year of history, device and web app usage, encryption and anti-malware status, and discovery of sensitive data such as personal information on devices or syncing to cloud storage |
| Control | Everything in Visibility, plus geofences, freezing at-risk devices on demand or automatically, remote file deletion, end-of-life wipe, on-screen messages to users, and supervisor password management on eligible Lenovo devices |
| Resilience | Everything in Control, plus self-healing of critical apps such as anti-malware, EDR, encryption, device management and SSE agents, accelerated device actions, application usage insights, Rehydrate device recovery, and help from Absolute's Investigations team with stolen devices |
| Resilience for Security | Resilience plus patch management: scanning for and deploying operating system and application patches |
| Resilience for Automation | Resilience for Security plus automated vulnerability remediation workflows and APIs for patching, remediation and workflows |
Self-healing applies to applications in Absolute's resilience catalogue. Rehydrate is available with the commercial Resilience editions, not Absolute's separate education packages.
Rehydrate and self-healing
The two features that set the Resilience editions apart are worth understanding before you choose a tier.
Application self-healing watches the agents you rely on, such as anti-malware, EDR, encryption, device management and SSE clients. When one is missing, corrupted or not running, Absolute repairs or reinstalls it without anyone having to visit the device. That matters because a security tool that has quietly stopped working gives a false sense of protection.
Rehydrate goes further and returns a compromised device to a trusted state: re-imaging from a trusted operating system image, editing files or registry keys, or running scripts. Absolute says it can work even when the operating system has been tampered with, using a passcode-protected break-glass mechanism at boot, with recovery playbooks managed from the console under role-based access.
If you only need to know where devices are and whether they are encrypted, Visibility or Control is enough. If agent drift or ransomware recovery is the worry, look at Resilience.
How it is licensed
Each device you want covered needs a seat on your chosen edition, and you can run different editions for different groups of devices, for example Control for most laptops and Resilience for devices that hold sensitive data. Through Forever Systems the subscription is billed monthly in arrears on our account, and we confirm the seat unit and count on your quote. Moving up from Visibility to Control or Resilience is a change to the subscription, not a new contract.
| Option | How it works |
|---|---|
| Edition | Visibility, Control, Resilience, Resilience for Security or Resilience for Automation |
| Seat | Per covered seat, with the unit confirmed on your quote |
| Billing | Monthly through Forever Systems |
| Changes | Add devices or move up a tier during the term |
Prices depend on edition and quantity, so ask us for a quote. See licence true-up for how mid-term additions are handled.
Requirements and deployment
Absolute supports Windows and macOS devices, and Chromebooks through a separate Absolute package; some features also cover Linux. Persistence needs a device from a manufacturer that embeds it: Absolute works with more than 28 device makers and names partners including Dell, HP, Lenovo, Microsoft, Panasonic, Acer, Asus, Getac, Positivo and Samsung. Some features have limits: Firmware Freeze needs eligible Windows devices, supervisor password management needs eligible Lenovo devices, and several features are not available on Windows 11 SE.
We deploy the agent with your existing management tool, such as Microsoft Intune, then set up policies, geofences, alerts and reports in the Absolute console.
Who it suits and how we help
Absolute Secure Endpoint suits schools and colleges with large laptop fleets, organisations with hybrid and field staff, and regulated businesses that need proof devices are encrypted and protected. Resilience is the edition to look at if security agents keep failing or being removed.
Forever Systems checks your devices, recommends the edition, deploys and configures Absolute, and handles billing and changes. Pair it with endpoint protection and see other device visibility and recovery tools.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is the difference between Absolute Visibility, Control and Resilience?
Visibility shows you inventory, location, usage, security posture and sensitive data on devices. Control adds remote actions such as geofencing, device freeze, file deletion and wipe. Resilience adds self-healing of your critical apps, Rehydrate recovery of compromised devices and faster device actions.
Can Absolute find a stolen laptop?
Absolute reports device location on and off the network, and Control lets you freeze the device or delete data on it. The Resilience editions add access to Absolute's Investigations team, which works with law enforcement to recover stolen devices.
Does Absolute replace Microsoft Intune?
No. Absolute sits alongside device management. Its Resilience editions can keep the Intune management agent and your security agents installed and healthy.
What does Absolute Rehydrate do?
Rehydrate remotely returns a compromised device to a trusted state, for example by re-imaging from a trusted operating system image or running recovery scripts, so you are not waiting for a technician to rebuild it on site. It comes with the commercial Resilience editions.
Does Absolute do patch management?
Yes, in the higher editions. Resilience for Security adds scanning for and deploying patches, and Resilience for Automation adds automated vulnerability remediation workflows and APIs.