Endpoint Management Security Tools

Jamf is the long time king of apple MDM. They have a robust set of features and integrations that make them the go-to for apple device management with a rich feature set allowing a ton of customization. However, as with all enterprise software, there has also been an increase in bloat over time.

Kandji is doing a great job giving Jamf a run for their money, especially for startups and midmarket. Their platform is able to focus more on the use cases that matter for most companies, with the downside being edge requirements from advanced Jamf users.

Acquired by Palo Alto Networks. Koi offers full inventories and workflows for managing packages, extensions, AI tools, containers and other components that users and developers pull from public marketplaces and registries that MDM and EDR tools rarely see. Koi scores risk per and enforces policy with an agentless approach so even exempt developer machines stay governed.

Fleet has built a very cool MDM on top of OSQuery that includes being able to run scripts and do more robust endpoint management - across platforms and with little complexity.

Evren has a very cool solution for developer workstations involving a lightweight Linux distro that gives developers a lot of freedom while keeping essential management and visibility functionalities for security teams.