Kandji

Kandji is a device management and endpoint security platform that began as an Apple-first MDM and has expanded (rebranded as Iru, adding Windows and Android in 2025) into cross-platform management. It lets IT teams deploy, configure, secure, and manage devices at scale — from zero-touch enrollment that provisions a new Mac out of the box to enforcing security settings, deploying apps, and keeping the fleet compliant. Its polished, automation-heavy approach made it especially popular with Apple-centric organizations.

Kandji's signature is automation and compliance. Blueprints define a device's desired state; Auto Apps and Liftoff automate app deployment and onboarding; and pre-built, continuously enforced compliance controls (mapped to frameworks like CIS) keep devices in a known-good state without manual scripting. Beyond MDM, Kandji adds endpoint detection and response (EDR) and vulnerability management, device trust for conditional access, and integrations with identity providers (Okta, Google, Entra), positioning it as both a management and security platform for the endpoint.

Kandji serves IT and security teams, especially Apple-heavy and now mixed-fleet organizations. Pricing is quote-based per device: entry economics work out to roughly $4 per device per month (for example around $399/month for up to 100 devices), with reported ranges of about $3–$12 per device per month depending on fleet size, products, and contract; separate product SKUs (device management, EDR, vulnerability management) affect total cost. It competes with Jamf, Microsoft Intune, JumpCloud, Mosyle, and Addigy, differentiating on Apple-first polish, automation, and combined management-plus-security.