Sold by: Iru
Deployed on AWS
Free Trial
AWS Free Tier
Kandji is device management (MDM) and security built specifically to meet the unique needs of the Apple platform, with advanced endpoint detection and response optionally delivered through a single unified agent. Kandji is a modern, cloud-based solution to centrally manage and secure your Mac, iPhone, iPad, and Apple TV devices, saving IT teams countless hours of manual, repetitive work with features like one-click compliance templates and 150+ pre-built automations, apps, and workflows.
4.7
Overview
Kandji is the Apple device management and security platform that empowers secure and productive global work. With Kandji, Apple devices transform themselves into enterprise-ready endpoints, with all the right apps, settings, and security systems in place. Through advanced automation and thoughtful experiences, we are bringing much-needed harmony to the way IT, InfoSec, and Apple device users work today and tomorrow.
Features include:
True zero touch deployment Kandji takes the heavy lifting out of user setup with an interface built to give you more control without the technical challenges or unnecessary scripting. Our platform is clean, elegant, and customizable, allowing you to manage and elevate those crucial first-touch experiences. Start teams with the right apps, settings, and security controls, reduce support volume, and increase your onboarding efficiency.
Deep IdP and SSO Integration Make life simpler for your users with a single sign-on that does not sacrifice security. Automatically assign blueprints and controls based on user data from your identity provider. Create a login experience that is distinctly yours but matches the ease and style Apple users expect.
Self-healing device controls More than 150 toggle-on security settings allow you to customize nearly every aspect of your devices without additional scripting or configuration. All are monitored and enforced by the Kandji Agent, so they are automatically remediated if they slip out of spec.
Automated app patching Ensure users are always running the right software versions without the manual work of packaging, testing, or deployment. Kandji does the heavy lifting for you without interrupting users work.
Managed OS updates Managed OS is built-in to the Kandji platform and puts you in control of macOS across your fleet. Kandji supports all macOS updates from major overhauls to minor patches, and all updates are fully-enforced, so you never have to worry about teams running the correct version.
One-Click compliance templates Our pre-built templates, mapped to NIST, CIS, and STIG frameworks, deploy advanced security across your Mac fleet in minutes with the ability to customize individual settings.
Integrated endpoint security & response Kandji can deliver advanced endpoint security and response functionality through the same agent as management, radically simplifying Mac security. Kandji EDR gathers all metadata on files, analyzes them, detects the potential for malicious activity, and quarantines problems, all in the span between a user clicking download and the download completing.
Accelerated MDM migration The Kandji MDM migration tool and expert support take the stress out of switching from your old MDM solution. Our Migration Agent is custom-designed to fit your needs, deploys from your current MDM, and reduces user interaction to just a few clicks.
Unmatched Support Every Kandji support engineer has Mac admin experience, so we are like an extension of your company, available 24 hours a day, 5 days a week, and available to you free of charge. We know where you are coming from and provide peer-to-peer guidance on reaching your goals with device management and security.
For custom pricing, EULA, or a private contract, please contact aws-marketplace@kandji.io , for a private offer.
Highlights
- Zero-touch deployment Apple devices purchased through authorized resellers and managed with Kandji automatically transform themselves into enterprise-ready endpoints the first time they power on with all the right apps, settings, and security controls in place.
- Effortless management and compliance With automated updates for the OS and a library of 100+ business apps, admins can trust their device fleet will always stay up-to-date with the latest patches and features. And with blueprints that automatically enforce the things companies need to harden their fleet and meet benchmarks with the push of a button, it has never been easier to attain and maintain device compliance.
- Powerful detection and response Kandji runs MDM and EDR via a single agent, making advanced security simple to deploy and unremovable from devices. Kandji allows companies to see and respond to security threats instantly, with a detection powered by one of most comprehensive threat intelligence engines in the Apple ecosystem.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Kandji MDM | Apple-specific Device Management | $25,000.00 |
Kandji EDR | Apple-specific Endpoint Detection and Response (requires Kandji MDM) | $25,000.00 |
Kandji Vulnerability Management | Apple-specific Vulnerability Management (requires Kandji MDM) | $25,000.00 |
Vendor refund policy
All Orders are non-cancellable and all fees and other amounts you pay under this Agreement are non-refundable.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Chat: Live chat is available 24 / 5 via the Chat Bubble at the bottom right of the Kandji Web App. Support hours begin Sundays at 22:00 (UTC) and end Saturdays at 01:00 (UTC) (excluding company holidays). Email: Reach out to us via email at support@kandji.io Knowledge Base: Available 24 / 7 at support.kandji.io, you'll find overviews of all areas of Kandji and frequently asked questions. You can also submit a ticket from anywhere in our Knowledge Base at the top or bottom of the page. Please email us at support@kandji.io
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
Top
10
In Device Security, Device Management
Top
10
In Device Management, IT Business Management
Top
50
In Device Management, Device Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Zero-Touch Device Deployment
Automatic transformation of Apple devices into enterprise-ready endpoints upon first power-on with pre-configured apps, settings, and security controls without user intervention.
Identity Provider and Single Sign-On Integration
Deep integration with identity providers enabling automatic blueprint and control assignment based on user data, with support for customized login experiences.
Self-Healing Security Controls
Over 150 configurable security settings monitored and automatically enforced by the Kandji Agent with automatic remediation if settings drift from specified configuration.
Unified Endpoint Detection and Response
Single agent delivering both MDM and EDR functionality with file metadata analysis, malicious activity detection, and quarantine capabilities during file download operations.
Compliance Framework Templates
Pre-built security templates mapped to NIST, CIS, and STIG frameworks enabling rapid deployment of advanced security configurations across device fleets with customizable individual settings.
Zero-Touch Device Deployment
Deploy devices to any employee anywhere by integrating with Apple deployment programs to deliver fully customized devices without manual intervention.
Dynamic Device Grouping and Automation
Utilize patented Smart Groups technology to automatically trigger real-time alerts and actions based on inventory data for dynamic device management.
Configuration and Policy Management
Apply configuration profiles, policies, and scripts to standardize Apple device settings and automate management across the fleet.
Application Distribution and Management
Integrate with Apple Business Manager to automate app assignment to users or devices and manage the app environment securely.
Native Security Implementation
Leverage native Apple security features to manage device settings, restrict malicious software, and deploy patches across Apple devices without user interaction.
Unified Endpoint Management
Manage multiple device types and operating systems including Android, iOS, iPadOS, Chrome OS, AR/VR devices, wearables, and rugged devices from a single console
Mobile Threat Defense
Enable mobile threat defense with continuous on-device protection and near real-time dashboards to identify and remediate security risks
Device Enrollment and Onboarding
Support Over-the-Air (OTA) device enrollment, Apple Business Manager integration, and Android Enterprise zero-touch enrollment for streamlined device setup
Enterprise Mobility Management
Provide MDM and EMM capabilities with containerization and device security features for inventory visibility of devices, apps, content, and corporate data across corporate-owned and BYOD programs
AI-Powered Security Automation
Deliver AI-powered real-time alerts and automated security policy enforcement through the Compliance Engine and Action Orchestrator for routine and complex endpoint tasks
Validated by AWS Marketplace
FedRAMP
GDPR
HIPAA
ISO/IEC 27001
PCI DSS
SOC 2 Type 2
No security profile
-
-
-
-
-
No security profile
Standard contract
No
No
No
Customer reviews
Troy H.
Centralized Management with Strong Blueprints and Security
Reviewed on Apr 24, 2026
Review provided by G2
What do you like best about the product?
Centralized management, blueprints, and security.
What do you dislike about the product?
It's a big program and can take a while to get things dialed in.
What problems is the product solving and how is that benefiting you?
Iru has improved both the speed and accuracy of how we deploy mobile devices, while also adding an extra layer of security.
Thomas C.
Seamless Fleet Management with Intuitive Setup
Reviewed on Apr 23, 2026
Review provided by G2
What do you like best about the product?
I love how Iru is so easy to set up and manage. I got tired of having to be the only person that understood our management solution, but now with Iru, any junior admin could pick it up in just an hour of training. The self-service feature is a standout for me, allowing me to deploy anything from applications to bookmarks to custom scripts to fix a variety of problems or make changes. It really gives me everything I could hope for. Also, the fact that it helps keep my devices and software up to date is incredibly helpful. The platform is so intuitive that I was able to build out everything I needed quickly, and it’s a truly great product that I’ve recommended to friends and colleagues. For ease of use, I think it's best in class at this moment in time.
What do you dislike about the product?
Honestly, pretty much like every aspect of Iru, my only minor complaint is since we've moved from Kanji to Iru, the online chat now has an intermediary step where you have to kinda go through a bunch of AI guided stuff until you get to a person. For my own stake, I would much rather be able to go straight to a person like I did when it was still Kanji.
What problems is the product solving and how is that benefiting you?
I use Iru to keep my fleet up to date and track software deployments to devices. The self-service feature allows deploying apps and custom scripts, offering everything I need. It integrates with Axonius, necessary for security teams.
Joshua J.
Streamlined Apple Device Management with an Easy Interface and Excellent Support
Reviewed on Apr 22, 2026
Review provided by G2
What do you like best about the product?
We love the managment tools it gives us to prevent loss and steamline setup of devices when onboarding / offboarding teammates.
The process is straightforward and interface is easy to use.
It also integrates perfectly with our Apple devices to prevent headaches of needing to know everything about the backend of the systems.
The pricing is within budget and support we recieve when needed is excellent.
I have yet to utilize the AI tools, but I trust that they will add to the overall value and performance of the product. I also expect the AI tools will streamline the performance of the enrollment process and save me time daily.
The process is straightforward and interface is easy to use.
It also integrates perfectly with our Apple devices to prevent headaches of needing to know everything about the backend of the systems.
The pricing is within budget and support we recieve when needed is excellent.
I have yet to utilize the AI tools, but I trust that they will add to the overall value and performance of the product. I also expect the AI tools will streamline the performance of the enrollment process and save me time daily.
What do you dislike about the product?
I wish there were a mobile companion app that offered the same level of management, so I could handle things at a moment’s notice right from my pocket.
What problems is the product solving and how is that benefiting you?
It has provided emergency, direct, and simplified management of our company devices, resulting in zero loss of devices and no downtime since implementation.
Philipp H.
Easy Device Search, but the UI Needs Improvement
Reviewed on Apr 22, 2026
Review provided by G2
What do you like best about the product?
that its really easy to search for devices
What do you dislike about the product?
i think the UI and enrollement is complicated i would love if there is a easier way to roll out
What problems is the product solving and how is that benefiting you?
device tracking
Josh S.
Easy to Use, Feature Set That Fits Perfectly
Reviewed on Apr 21, 2026
Review provided by G2
What do you like best about the product?
Ease of use and feature set is exactly what I need
What do you dislike about the product?
When switching users on devices sometimes the new user cant login
What problems is the product solving and how is that benefiting you?
Compliance and making sure all devices have the correct settings