Kandji, Inc.

Kandji is a cloud-based platform for centrally managing and securing Mac, iPhone, iPad, and Apple TV devices for IT teams. The company's platform is intended to be a zero-touch solution for enterprises to manage their Apple devices, including keeping them in compliance with defined templates and capable of pre-built automations, applications, and workflows.

The Kandji device management platform works to differentiate itself from other device management platform—first, with its exclusive focus on Apple devices and second, with its attempt to develop automation throughout the device management workflow.

This includes the solution living in-cloud, to allow Kandji to release new features for customers without users worrying about maintaining updates. The platform offers a library of pre-built automations, accessible through the company's API, to help IT administrators automate repetitive tasks. It uses automation to install managed applications for macOS rather than manually packaging, hosting, and patching common applications. Kandji has a stated emphasis on continuous device remediation or state management to configure device settings and ensure device security is not compromised by modified settings. And the platform offers one-click compliance templates that are developed by Kandji and intended to offer another layer of automation for IT teams.

Kandji's Liftoff is a device setup and management solution that allows users to make a new Mac into an enterprise-ready computer through setting up necessary apps, settings, and security controls on the first startup and with as much of the process automated as possible. This allows users to customize the screen they see when their computers are configured, including providing necessary tools and a welcome message. This also offers users a zero-touch device deployment without an IT needing to physically touch the device.

Other device-specific management tools include device blueprints, which allow organizations to define devices, related applications, and some permissions based on the team, department, or location of the device. The assignation of a device blueprint can automate controls and applications for that device. Kandji's platform offers an automated migration tool to migrate organizations from other device management providers; self-service tools to give users increased control outside of the automations; visibility into the entire group of devices to monitor activity with detailed records, push updates on specific machines; and an extensive log of remediations performed on a given machine.

Kandji's library of Auto Apps offers automated macOS patch management and a library of applications Kandji pre-packages, hosts, and automatically patches. This ensures that users' applications remain up-to-date without IT teams needing to manually update machines and allows users to retire applications or block unwanted applications across an entire fleet of computers. Users can use applications synced from the Apple App Store and upload and deploy custom applications through simple pre-install tools, including a drag-and-drop tool.

On top of Kandji's automated tools their library of pre-built compliance automations, the platform also allows IT teams to set profiles for Wi-Fi, privacy, SSO, and system extensions and develop custom profiles for specific needs. Although Kandji has containerized its common policies, the platform supports custom scripts for unique device control needs. And the platform offers a managed OS tool to allow administrators to enforce operation system updates across a user environment.

Kandji's included security and compliance tools include:

• automated compliance templates, such as CIS or FedRAMP;
• auditor access to allow users to remain audit ready, with detailed results at a moment's notice with a read-only auditor access mode;
• offline remediation to automatically enforce compliance and remediate issues even if computers are offline;
• SAML-based single sign-on (SSO) for secure access for administrators managing devices and with an identity provider of the users choice;
• and a compliance control library with pre-built security controls that administrators can filter for a specific compliance framework, depending on organizational needs.

Kandji works to offer easy integrations with a list of applications to increase setup and workflow automation for specific applications and save organizations more time. These include integrations with a variety of applications:

• Apple Business Manager
• Slack
• Google Workspace
• Microsoft 365
• Watchman Monitoring
• CIS Compliance
• Oomnitza
• Okta

As well, the company offers an API for enterprise-grade extensibility and allows administrators to access a list of connected and managed devices and see the details for those devices.