Sold by: IruÂ
Deployed on AWS
Free Trial
AWS Free Tier
Kandji is device management (MDM) and security built specifically to meet the unique needs of the Apple platform, with advanced endpoint detection and response optionally delivered through a single unified agent. Kandji is a modern, cloud-based solution to centrally manage and secure your Mac, iPhone, iPad, and Apple TV devices, saving IT teams countless hours of manual, repetitive work with features like one-click compliance templates and 150+ pre-built automations, apps, and workflows.
4.7
Overview
Kandji is the Apple device management and security platform that empowers secure and productive global work. With Kandji, Apple devices transform themselves into enterprise-ready endpoints, with all the right apps, settings, and security systems in place. Through advanced automation and thoughtful experiences, we are bringing much-needed harmony to the way IT, InfoSec, and Apple device users work today and tomorrow.
Features include:
True zero touch deployment Kandji takes the heavy lifting out of user setup with an interface built to give you more control without the technical challenges or unnecessary scripting. Our platform is clean, elegant, and customizable, allowing you to manage and elevate those crucial first-touch experiences. Start teams with the right apps, settings, and security controls, reduce support volume, and increase your onboarding efficiency.
Deep IdP and SSO Integration Make life simpler for your users with a single sign-on that does not sacrifice security. Automatically assign blueprints and controls based on user data from your identity provider. Create a login experience that is distinctly yours but matches the ease and style Apple users expect.
Self-healing device controls More than 150 toggle-on security settings allow you to customize nearly every aspect of your devices without additional scripting or configuration. All are monitored and enforced by the Kandji Agent, so they are automatically remediated if they slip out of spec.
Automated app patching Ensure users are always running the right software versions without the manual work of packaging, testing, or deployment. Kandji does the heavy lifting for you without interrupting users work.
Managed OS updates Managed OS is built-in to the Kandji platform and puts you in control of macOS across your fleet. Kandji supports all macOS updates from major overhauls to minor patches, and all updates are fully-enforced, so you never have to worry about teams running the correct version.
One-Click compliance templates Our pre-built templates, mapped to NIST, CIS, and STIG frameworks, deploy advanced security across your Mac fleet in minutes with the ability to customize individual settings.
Integrated endpoint security & response Kandji can deliver advanced endpoint security and response functionality through the same agent as management, radically simplifying Mac security. Kandji EDR gathers all metadata on files, analyzes them, detects the potential for malicious activity, and quarantines problems, all in the span between a user clicking download and the download completing.
Accelerated MDM migration The Kandji MDM migration tool and expert support take the stress out of switching from your old MDM solution. Our Migration Agent is custom-designed to fit your needs, deploys from your current MDM, and reduces user interaction to just a few clicks.
Unmatched Support Every Kandji support engineer has Mac admin experience, so we are like an extension of your company, available 24 hours a day, 5 days a week, and available to you free of charge. We know where you are coming from and provide peer-to-peer guidance on reaching your goals with device management and security.
For custom pricing, EULA, or a private contract, please contact aws-marketplace@kandji.io , for a private offer.
Highlights
- Zero-touch deployment Apple devices purchased through authorized resellers and managed with Kandji automatically transform themselves into enterprise-ready endpoints the first time they power on with all the right apps, settings, and security controls in place.
- Effortless management and compliance With automated updates for the OS and a library of 100+ business apps, admins can trust their device fleet will always stay up-to-date with the latest patches and features. And with blueprints that automatically enforce the things companies need to harden their fleet and meet benchmarks with the push of a button, it has never been easier to attain and maintain device compliance.
- Powerful detection and response Kandji runs MDM and EDR via a single agent, making advanced security simple to deploy and unremovable from devices. Kandji allows companies to see and respond to security threats instantly, with a detection powered by one of most comprehensive threat intelligence engines in the Apple ecosystem.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Kandji MDM | Apple-specific Device Management | $25,000.00 |
Kandji EDR | Apple-specific Endpoint Detection and Response (requires Kandji MDM) | $25,000.00 |
Kandji Vulnerability Management | Apple-specific Vulnerability Management (requires Kandji MDM) | $25,000.00 |
Vendor refund policy
All Orders are non-cancellable and all fees and other amounts you pay under this Agreement are non-refundable.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Chat: Live chat is available 24 / 5 via the Chat Bubble at the bottom right of the Kandji Web App. Support hours begin Sundays at 22:00 (UTC) and end Saturdays at 01:00 (UTC) (excluding company holidays). Email: Reach out to us via email at support@kandji.io Knowledge Base: Available 24 / 7 at support.kandji.io, you'll find overviews of all areas of Kandji and frequently asked questions. You can also submit a ticket from anywhere in our Knowledge Base at the top or bottom of the page. Please email us at support@kandji.ioÂ
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
Top
10
In Device Security, Device Management
Top
10
In Device Management, IT Business Management
Top
50
In Device Management, Device Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Device Management
Comprehensive mobile device management (MDM) solution specifically designed for Apple platform devices including Mac, iPhone, iPad, and Apple TV
Endpoint Security
Advanced endpoint detection and response functionality delivered through a unified single agent with comprehensive threat intelligence
Automated Configuration
Over 150 configurable security settings with self-healing device controls that automatically monitor and enforce compliance without additional scripting
Identity Integration
Deep integration with identity providers and single sign-on systems, enabling automatic blueprint and control assignments based on user identity data
Software Update Management
Automated app patching and managed OS updates across device fleet, ensuring consistent software versions without manual intervention
Mobile Device Management
Comprehensive management solution for Apple devices including Mac, iPhone, iPad, Apple Watch, Apple TV, and Vision Pro
Zero-Touch Deployment
Automated device deployment integrating with Apple deployment programs for instant device configuration without manual intervention
Configuration Management
Uses configuration profiles, policies, and scripts to customize device functionality with patented Smart Groups technology for real-time alerts and actions
Application Management
Seamless app distribution and management through integration with Apple Business Manager, enabling automated app assignment to users and devices
Security Configuration
Native security feature management with capabilities to restrict malicious software, manage device settings, and perform automated patch management without user interaction
Unified Endpoint Management
Comprehensive management platform supporting multiple device types and operating systems including Android, iOS, iPadOS, Chrome OS, AR/VR devices, wearables, and rugged devices
Mobile Device Security
Enterprise Mobility Management (EMM) capabilities with containerization, device security features, and protection for corporate-owned and BYOD environments
Zero-Touch Device Enrollment
Over-the-Air (OTA) device enrollment with support for Apple Business Manager and Android Enterprise zero-touch enrollment processes
AI-Powered Management
AI-driven real-time alerts and security policy enforcement with automated compliance monitoring and task orchestration
Multi-Platform Device Monitoring
Comprehensive inventory visibility across devices, applications, content, and corporate data with centralized management console
Validated by AWS Marketplace
FedRAMP
GDPR
HIPAA
ISO/IEC 27001
PCI DSS
SOC 2 Type 2
No security profile
-
-
-
-
-
No security profile
Standard contract
No
No
No
Customer reviews
Ryan L.
Kandji/Iru: The Easiest Way to Manage Your Growing Apple Fleet
Reviewed on Dec 04, 2025
Review provided by G2
What do you like best about the product?
The ease of use and intuitive interface of Iru are exceptional. The platform allowed us to achieve full device management for our Mac and iOS fleet incredibly fast, making the Ease of Implementation a major upside. We especially appreciate the one-click actions, pre-built Blueprints, and how straightforward it is to deploy apps and enforce compliance. Their Customer Support has also been responsive and extremely knowledgeable whenever we've needed assistance.
What do you dislike about the product?
While there's very little to dislike, we are looking forward to the continued expansion of features, particularly for advanced Endpoint Detection & Response (EDR) capabilities and deeper integration with other core security platforms we use. This is a minor point, as the platform is already excellent for our core MDM needs.
What problems is the product solving and how is that benefiting you?
Iru is solving our biggest challenge of maintaining a consistent security and compliance baseline across our rapidly growing fleet of Apple devices. It allows us to remotely enforce encryption, install critical security updates, and deploy required applications automatically. Crucially, Iru has made our device provisioning entirely hands-off. We can now simply ship a brand-new device directly to a user, and it automatically enrolls, configures, and secures itself right out of the box (OOBe) using Kandji's integration with Apple Business Manager. The immediate benefit is a massive reduction in manual IT workload, significant time savings for the IT team, and a reliable way to ensure zero-trust alignment for all endpoints, regardless of the user's location.
Gabriel E.
Effortless Integration and User-Friendly Experience
Reviewed on Dec 02, 2025
Review provided by G2
What do you like best about the product?
What stands out to me is how easy it is to use, along with its seamless integration with the tools we already rely on. Since all our devices run on MacOS and our company is organized through Google Workspace, the integration works flawlessly for our needs.
What do you dislike about the product?
After using it for a year, the only difficulty we've encountered is having to add a new item—and remembering to do so—whenever a major OS release occurs.
What problems is the product solving and how is that benefiting you?
The product ensures that our devices stay secure and compliant with our internal policies, helping us achieving ISO 27001 standards as well as the Spanish Cybersecurity Framework (ENS).
Alejandro V.
Great for security, apps instaling and monitoring activity
Reviewed on Oct 03, 2025
Review provided by G2
What do you like best about the product?
Admin access is temporary and I'm free of responsability for installing non desired apps, I update install and uninstall only the apps approve by my employeer and that way about secutrity breachs
What do you dislike about the product?
Nothing, it works perfect for my position
What problems is the product solving and how is that benefiting you?
My managers know which apps I use and I cant install anything non corporate related
Computer & Network Security
Simple MDM for IT teams, but can be distracting for end users
Reviewed on Oct 02, 2025
Review provided by G2
What do you like best about the product?
Kandji makes managing Macs much easier compared to other MDMs like Jamf. It lowers the skill barrier for IT teams while still giving us the same outcomes. Features like Managed OS for enforcing updates, Auto Apps for third-party patching, and Passport for IdP logins have been very useful. It’s straightforward to set up, scales well for large fleets, and gives good visibility into what’s happening. Overall, it saves time and reduces the amount of manual effort needed.
What do you dislike about the product?
The biggest downside is how intrusive the notifications can be. End users often get constant alerts about updates, even ones scheduled far in advance, and there’s not much flexibility to pause or mute them. This can be distracting during focus time and can hurt the employee experience. While the tool is great for IT, it could use improvements to make the user side less disruptive.
What problems is the product solving and how is that benefiting you?
Kandji helps us enforce OS and app updates consistently, keep our Mac fleet secure, and simplify identity-based logins. It reduces the overhead of managing devices across hundreds of employees and ensures compliance without a lot of manual work. While end-user experience isn’t perfect, from an IT perspective it’s been reliable and efficient.
Religious Institutions
Excellent MDM for medium size businesses
Reviewed on Sep 17, 2025
Review provided by G2
What do you like best about the product?
The ability to push apps and updates to all users or hold updates if there are concerns.
What do you dislike about the product?
Changing a users password if they forgot it or there are issues with the computer is an ordeal. I wish it was easier to force a password change.
What problems is the product solving and how is that benefiting you?
Pushing new apps seamlessly and setting up new computers.