PDQ Connect logo

PDQ Connect: patch management review for IT teams

PDQ

PDQ Connect uses per device per year, three published tiers, 100-device minimum pricing, runs on cloud, supports Windows, and 14-day free trial, up to 250 devices, no credit card required.

PDQ Connect is a cloud-native endpoint management and patch management platform built as the successor to PDQ Deploy and PDQ Inventory. It uses a lightweight agent installed on each endpoint to handle software deployment, patch management, device inventory, and remote desktop — without requiring domain connectivity, VPN, or line-of-sight to a central server. The platform supports Windows and macOS. Linux is not supported.

PDQ Connect earns shortlist consideration on simplicity, speed of deployment, and published pricing transparency. The gaps — no Linux support, limited monitoring, no PSA or ticketing, and feature parity shortfalls versus legacy PDQ Deploy — determine whether it survives to final selection.

Written by RajatFact-checked by Chandrasmita

Editorial policy: How we review software · How rankings work · Sponsored disclosure

Pricing model

Per device per year, three published tiers, 100-device minimum

Deployment

Cloud

Supported OS

Windows

Trial status

14-day free trial, up to 250 devices, no credit card required

Review rating

Not surfaced

Vendor

PDQ

PDQ Connect pricing

PDQ Connect publishes pricing across three per-device annual tiers. Basic is $12 per device per year and includes device inventory, prebuilt and custom packages, custom fields, and basic reporting for Windows and macOS.

Plus is $18 per device per year and adds automated deployments, remote desktop, role-based access control, and custom scanners. Premium is $28 per device per year and adds vulnerability scanning with CVSS and PDQ risk scoring, one-click CVE resolution, API access, and priority support. All tiers require a minimum of 100 devices billed annually.

The published pricing is a genuine advantage over competitors like NinjaOne and Automox (for higher tiers), which require sales conversations before the team knows whether the product fits the budget. But the 100-device minimum means the entry cost is $1,200/year at Basic, $1,800/year at Plus, or $2,800/year at Premium — regardless of whether the team manages 30 devices or 100.

For small teams managing fewer than 100 endpoints, that minimum effectively inflates the per-device cost. Action1's permanently free tier for up to 200 endpoints is the most direct alternative for teams where that minimum is a blocker.

View PDQ Connect pricing

Basic: $12/device/year (Min 100 devices. Includes inventory, prebuilt and custom packages, custom fields, basic reporting. Windows and macOS.)
Plus: $18/device/year (Min 100 devices. Adds automated deployments, remote desktop, role-based access control, custom scanners.)
Premium: $28/device/year (Min 100 devices. Adds vulnerability scanning, CVE resolution, API access, priority support.)

Verified from the official pricing page on March 17, 2026. View source

What stands out about PDQ Connect

PDQ Connect is the clearest choice when a team needs fast, simple cloud-based patching for Windows and macOS endpoints without the overhead of a full RMM platform. The product does three things genuinely well: agent-based deployment that works anywhere with an internet connection, a prebuilt package library that covers the most common third-party applications, and published pricing that lets buyers model cost before talking to sales.

PDQ Connect is best for

Internal IT teams managing primarily Windows environments that want cloud-based patching, software deployment, and device inventory without the complexity, cost, or learning curve of a full RMM platform — and whose endpoint count exceeds the 100-device minimum.

Why PDQ Connect stands out

PDQ Connect stands out on three dimensions that matter during evaluation: published pricing that eliminates the vendor information asymmetry most competitors create, an agent-based cloud architecture that works without VPN or domain connectivity, and a prebuilt package library maintained by PDQ that covers the third-party applications IT teams patch most frequently. For teams migrating from PDQ Deploy, the cloud architecture also eliminates the on-premises server dependency and the requirement that target devices be reachable over SMB.

Commercial fit for PDQ Connect

PDQ Connect's commercial fit is strongest for teams with 100 to 1,000 Windows and macOS endpoints where patching and software deployment are the primary requirements. The per-device model is predictable and the published rates make budgeting straightforward. It weakens for teams under the 100-device minimum, for mixed environments that include Linux, and for teams that need monitoring, alerting, or ticketing from the same platform — those requirements push toward NinjaOne or Atera at a higher price point but with broader capability.

What users think

Lightweight Windows patch management and software deployment that competes on simplicity — teams can be operational within an hour rather than deploying an agent framework and configuring a management server. The Windows-only scope limits it to Windows-centric SMB IT teams, but within that constraint it does the job without overhead.

In depth

PDQ Connect is best evaluated in the context of the specific endpoint management software workflows your team is trying to standardize or improve.

Shortlist quality depends less on surface-level feature parity and more on how well PDQ Connect fits your deployment preferences, reporting expectations, and the amount of day-to-day operational ownership your team can absorb. Use this page to understand product fit before moving into direct vendor comparisons.

  • Test whether PDQ Connect fits the current environment and OS mix.
  • Validate the vendor’s pricing mechanics against real rollout assumptions.
  • Check whether the platform solves the workflows that matter in the first 90 days.

PDQ Connect features

Software deployment and package management

PDQ Connect's core function is deploying software to managed endpoints. The platform includes a prebuilt package library maintained by PDQ that covers frequently deployed third-party applications — browsers, productivity suites, runtimes, security tools, and utilities. - Custom packages are supported for applications not in the library, including MSI, EXE, and script-based deployments.

Patch management

Patch management in PDQ Connect covers Windows OS patches and third-party application patches for software in the package library. Patch policies define which patches are approved, the deployment schedule, and reboot behavior. - Third-party patching depth is determined by the package library — applications not in the library require custom packages. macOS patching is supported but the library coverage is thinner than Windows.

Device inventory and reporting

Every managed endpoint automatically populates a hardware and software inventory record. Hardware details include device model, CPU, RAM, storage, and OS version. - The Plus tier adds custom scanners for collecting additional device data beyond the default inventory.

Remote desktop

The Plus and Premium tiers include browser-based remote desktop for Windows and macOS endpoints. The connection is agent-based — no separate remote access tool or additional license is required. - For teams where remote access is an occasional troubleshooting convenience, it is adequate.

Vulnerability scanning (Premium tier)

The Premium tier adds vulnerability scanning that identifies CVEs across managed endpoints, assigns both CVSS scores and PDQ's own risk scoring, and generates vulnerability reports. The one-click CVE resolution feature maps vulnerabilities to available patches and deploys them directly from the vulnerability view. - Limitation: This is not a full vulnerability management platform — it does not provide network-level scanning, web application scanning, or the depth of Tenable, Qualys, or Rapid7.

Entra ID integration

PDQ Connect integrates with Microsoft Entra ID (formerly Azure AD) through a secure, read-only, one-way sync. The integration pulls device information from Entra ID into PDQ Connect, allowing administrators to see which Entra-registered devices have the Connect agent installed and which do not. - This is primarily useful during initial deployment — it identifies gaps in agent coverage without requiring manual device auditing.

Pros and cons of PDQ Connect

This is the point in the evaluation where buyers should separate what sounds strong in the demo from what will still matter after implementation, reporting setup, and day-two administration are real.

Strengths

These are the strengths most likely to keep PDQ Connect in the shortlist once the team starts comparing practical fit, not just feature breadth.

Published pricing eliminates pre-sales guesswork

PDQ Connect publishes all three tier prices on its website — $12, $18, and $28 per device per year. Buyers can model cost, compare against alternatives, and determine budget fit before any sales conversation. In a category where NinjaOne, ConnectWise, and Kaseya all require quotes, this transparency is a concrete advantage that accelerates the evaluation and removes the information asymmetry that typically favors the vendor.

Cloud-native agent eliminates on-prem infrastructure requirements

PDQ Connect's agent communicates over secure web sockets — no VPN, no domain membership, no SMB connectivity required. Devices check in and receive deployments anywhere with an internet connection, and offline devices receive queued deployments when they reconnect. For teams migrating from PDQ Deploy, this removes the central server dependency and the requirement that target devices be on the corporate network.

Fast deployment with minimal IT overhead

PDQ Connect is consistently praised by reviewers for fast setup and low administrative burden. The agent installs in minutes, the console is browser-based with no on-premises infrastructure to configure, and the prebuilt package library covers common third-party applications without requiring administrators to build deployment packages from scratch. Teams that have spent weeks configuring ConnectWise Automate or Kaseya VSA will find the time-to-productive-use measured in hours, not weeks.

Prebuilt package library reduces manual packaging work

PDQ maintains a library of prebuilt packages for frequently deployed applications — browsers, productivity tools, runtimes, and utilities. These packages are updated by PDQ when new versions release, which reduces the manual overhead of downloading installers, building silent install scripts, and testing deployments. Custom packages are also supported for applications not in the library.

Vulnerability scanning with actionable CVE resolution (Premium tier)

The Premium tier adds vulnerability scanning that identifies CVEs across managed endpoints, assigns CVSS and PDQ risk scores, and enables one-click resolution by deploying the relevant patches. This is not a full vulnerability management platform — it does not replace Tenable or Qualys — but for IT teams that want patch-driven vulnerability remediation without a separate security tool, it bridges the gap between patching and basic vulnerability visibility at $28/device/year.

Limitations

These are the points worth pressing in pricing calls, technical validation, and rollout planning before the team treats the product as a safe choice.

No Linux support limits mixed-environment coverage

PDQ Connect supports Windows and macOS only. There is no Linux agent, no Linux patching, and no Linux inventory. For IT teams managing even a small number of Linux servers or workstations, PDQ Connect cannot be the single patching tool — a separate solution is required for those devices.

No monitoring, alerting, or RMM capabilities

PDQ Connect is a patch management and software deployment tool, not a remote monitoring and management platform. There is no live monitoring of CPU, memory, disk, or network health. There are no alerting policies, no condition-based automation triggers, and no dashboard for real-time endpoint status.

Feature parity gaps versus legacy PDQ Deploy

Users migrating from PDQ Deploy consistently report that PDQ Connect is still missing features available in the on-premises product. PowerShell scanners, granular command requeuing, and the ability to execute commands in the context of the logged-in user are among the documented gaps. PDQ is actively developing Connect, but as of early 2026, the cloud product has not reached full feature parity with Deploy.

Remote desktop performance is limited for distant connections

The Plus and Premium tiers include remote desktop, but reviewer feedback on G2 and Capterra consistently describes slow performance for geographically distant endpoints and connectivity challenges under real-world conditions. For teams that need reliable remote access as a primary workflow — not just an occasional convenience — a dedicated remote access tool or an RMM with stronger remote capabilities (NinjaOne, ConnectWise ScreenConnect) is a better fit.

100-device minimum inflates cost for small teams

All PDQ Connect tiers require a minimum of 100 devices billed annually. A team managing 40 endpoints pays for 100 — making the effective per-device cost $30/device/year at the Basic tier instead of $12. Action1 offers a permanently free tier for up to 200 endpoints with no feature restrictions, making it the most direct alternative for small teams where PDQ Connect's minimum is a commercial blocker.

PDQ Connect deployment, integrations, and platform coverage

PDQ Connect is cloud-only — there is no on-premises deployment option for the management console. The agent is installed on each endpoint and communicates with PDQ's cloud infrastructure over secure web sockets without requiring VPN, domain membership, or SMB network access.

Agent deployment can be handled via Group Policy, Intune, manual installation, or scripted distribution. Most teams are operational within a day of starting the rollout. The Entra ID integration allows PDQ Connect to identify devices registered in Entra ID that are missing the Connect agent, which simplifies gap analysis during initial deployment.

Platform support covers Windows and macOS. Windows is the stronger platform — the package library is deeper, the feature set is more complete, and the majority of reviewer feedback reflects Windows-centric environments. macOS support is functional for patching and inventory but less mature. Linux is not supported at all. For environments where Linux coverage is operationally significant, PDQ Connect cannot be the sole patching tool.

The integration ecosystem is narrow compared to full RMM platforms. PDQ Connect integrates natively with Entra ID (read-only device sync) and Freshworks. A REST API is available at the Premium tier for custom integrations.

Before you book a demo

PDQ Connect free trial, demo, and buying motion

PDQ Connect should be evaluated against two questions that consistently determine whether it survives to final selection: whether the environment is primarily Windows (and optionally macOS) without meaningful Linux, and whether patching and software deployment — without monitoring or RMM capabilities — meet the team's actual requirements.

1

Validate platform coverage against the real endpoint estate. If the environment includes Linux servers or workstations that need patching, PDQ Connect cannot cover them — and running a second patching tool for Linux defeats the consolidation benefit. Automox, NinjaOne, and Action1 all support Linux natively.

2

Test the trial against your actual deployment workflows, not just prebuilt packages. Install the agent on a representative mix of endpoints, deploy both prebuilt and custom packages, and confirm that the workflows your team uses daily behave as expected. Pay specific attention to remote desktop performance if remote access is a significant use case.

3

Compare PDQ Connect's all-in cost against alternatives that include monitoring. If the team needs both patching and endpoint monitoring, the cost of PDQ Connect plus a separate monitoring tool may exceed NinjaOne or Atera, which include both in a single platform. Model the combined cost before treating PDQ Connect's lower per-device rate as a savings.

4

If migrating from PDQ Deploy, confirm feature parity for your specific workflows before committing. PowerShell scanners, command requeuing, and user-context execution are documented gaps. Run your most complex Deploy workflows in the Connect trial and verify they work — or identify which capabilities you will lose in the migration.

Frequently asked questions about PDQ Connect

What is PDQ Connect?

+

PDQ Connect is a cloud-native endpoint management platform for Windows and macOS that handles software deployment, patch management, device inventory, and remote desktop through a lightweight agent installed on each endpoint. It is the cloud-based successor to PDQ Deploy and PDQ Inventory, designed to work without VPN, domain membership, or on-premises server infrastructure. It does not include monitoring, alerting, or ticketing — it is a patching and deployment tool, not a full RMM.

How much does PDQ Connect cost?

+

PDQ Connect publishes three per-device annual tiers. Basic is $12 per device per year (inventory, prebuilt packages, Windows and macOS management). Plus is $18 per device per year (adds automated deployments, remote desktop, RBAC, custom scanners). Premium is $28 per device per year (adds vulnerability scanning, CVE resolution, API access, priority support). All tiers require a 100-device minimum. A 14-day free trial is available for up to 250 devices with no credit card required.

Does PDQ Connect support Linux?

+

No — PDQ Connect supports Windows and macOS only. There is no Linux agent, no Linux patching, and no Linux inventory. Teams with Linux endpoints in their estate need a separate patching solution for those devices. Automox, NinjaOne, and Action1 all support Linux alongside Windows and macOS.

Is PDQ Connect the same as PDQ Deploy?

+

No. PDQ Deploy is an on-premises Windows-only tool that requires domain or VPN connectivity to target devices over SMB. PDQ Connect is a cloud-native platform that uses an agent to manage Windows and macOS devices over the internet without network infrastructure requirements. Connect adds macOS support and offline device handling that Deploy lacks, but as of early 2026, Connect has not reached full feature parity with Deploy — PowerShell scanners, command requeuing, and user-context execution are among the documented gaps.

Is the PDQ Connect agent safe?

+

The PDQ Connect agent communicates with PDQ's cloud infrastructure over encrypted secure web sockets. It does not require inbound firewall rules or open ports — the agent initiates outbound connections only. PDQ does not publish SOC 2 or FedRAMP certifications on its website as of March 2026. Teams with specific compliance requirements should ask PDQ directly about their security posture and data handling practices before deployment.

Does PDQ Connect have a free trial?

+

Yes — PDQ Connect offers a 14-day free trial for up to 250 devices with no credit card required. Use the trial to validate deployment workflows, test remote desktop performance, and confirm feature coverage against your specific requirements before committing to an annual contract.

Can I use PDQ Deploy and PDQ Connect together?

+

Yes — PDQ offers a bundled suite that includes Deploy, Inventory, and Connect for teams that need both on-premises and cloud management. Bundle pricing is not published and requires contacting PDQ sales. This is common for teams migrating gradually from Deploy to Connect while maintaining on-prem workflows during the transition.

PDQ Connect alternatives worth comparing

If PDQ Connect is on the shortlist but not yet final, compare it against these alternatives before committing. The most useful comparison is not feature breadth — PDQ Connect is deliberately focused — but on whether the team's requirements extend beyond patching into monitoring, Linux coverage, or all-in-one RMM capabilities that PDQ Connect does not provide.

Hexnode

Hexnode gives teams a way to evaluate endpoint management software fit, deployment tradeoffs, and day-to-day operational usability.

Scalefusion

Scalefusion gives teams a way to evaluate endpoint management software fit, deployment tradeoffs, and day-to-day operational usability.

Automox

Automox is the most direct competitor for cloud-native patch management. It supports Windows, macOS, and Linux — covering the Linux gap that eliminates PDQ Connect for mixed environments. Automox PatchOS starts at $1/endpoint/month ($12/year), price-matching PDQ Connect's Basic tier, but with Linux included. Higher Automox tiers are custom-priced. Compare when Linux support, cross-OS coverage, or broader automation policies are requirements PDQ Connect cannot meet.

BigFix

BigFix gives teams a way to evaluate endpoint management software fit, deployment tradeoffs, and day-to-day operational usability.

Ivanti Neurons

Ivanti Neurons gives teams a way to evaluate endpoint management software fit, deployment tradeoffs, and day-to-day operational usability.

Head-to-head comparisons

Open the comparison pages once PDQ Connect makes the shortlist.

Related buyer guides

Use the surrounding category research before this tool becomes the default answer.

Buyer guide

Linux Endpoint Management

Linux endpoint management should be evaluated by distro support, automation model, mixed-estate fit, and the operational burden the team can sustain after rollout.

Sources

These are the public references, pricing pages, and editorial inputs used to support this page. Readers should still confirm final commercial or product details directly with the vendor when the decision becomes real.

Continue through this software cluster

Use the linked pages below to move from the product profile into pricing, alternatives, category context, comparisons, glossary terms, and research.

Endpoint Management

Return to the category hub when the team needs broader buying context before narrowing further.

PDQ Connect pricing

Check the commercial model, official pricing notes, and what to validate before procurement treats the pricing as settled.

PDQ Connect alternatives

Use alternatives when the product is credible but the buying team still needs stronger pressure-testing against competing fits.

Open the glossary

Use glossary terms when the product page raises category language that needs a clearer operational definition.