Directory IT Service ManagementEndpoint & Device ManagementKandji

Kandji

About Kandji

Kandji's platform manages devices, identity, and compliance in one place. It provides a single view of users, apps, and devices. It is described as an integrated system to secure access, protect endpoints, and prove compliance. Endpoint management, detection and response, and vulnerability management run through a single agent.

Products

Endpoint Management: Provisions, configures, and updates devices with automation for onboarding, app updates, and policy enforcement across Apple, Windows, and Android.
Vulnerability Management: Gives visibility into software risk across Mac and Windows and patches vulnerable apps and OSes.
Workforce Identity: Provides passwordless access and single sign-on to apps.
Compliance Automation: Keeps organizations audit-ready with AI-generated controls and adaptive evidence mapping.
Trust Center: Provides a public portal for security and compliance posture, with questionnaires answered using Iru AI.

Used for

Enrolling any device from a single portal with apps, settings, and security controls applied
Deploying devices for new employees remotely without IT touching the device
Blocking unapproved or unsafe apps across endpoints
Generating and rotating local administrator passwords
Connecting a device fleet to AI build environments such as Claude Code or Cursor

Who it is for

Used by startups.
Used by growing teams.
Used by enterprise organizations.
Used by managed service providers (MSPs).

From Kandji's own website, read 2026-10-23. How we build listings.

How to evaluate Endpoint & Device Management

This is how the CIOPages Research Team evaluates this category. It is not an assessment of Kandji. It comes from our Unified Endpoint Management (UEM) buyer guide.

30%

OS Breadth & Per-Platform Depth

Genuine management depth on every OS you run — Windows, macOS, iOS/iPadOS, Android (incl. Android Enterprise work profile), Linux, and rugged/wearable/shared devices — not just an enrollment checkbox. How quickly the vendor supports new Apple Declarative Device Management and Android features each OS release

20%

Identity & Zero-Trust Integration

Native conditional access tied to device compliance/posture, integration with your IdP (Entra ID, Okta, Google), certificate and Wi-Fi/VPN provisioning, and how device signals feed access decisions rather than living in a silo

18%

Security Convergence

Built-in or tightly integrated mobile threat defense, endpoint privilege management, vulnerability/patch posture, attack-surface and compliance enforcement, and clean hand-off to your EDR/XDR — UEM as a security control, not just inventory

17%

App, Patch & Configuration Lifecycle

OS and third-party patching coverage and cadence, app deployment and packaging (incl. macOS and store/VPP apps), zero-touch provisioning (Autopilot, Apple ADE, Android zero-touch), policy/baseline management, and self-healing or remediation automation

10%

Scale, DEX & Administration

Performance and reliability at your device count, multi-tenant/RBAC and delegated admin, reporting and fleet visibility, end-user self-service, and digital employee experience (DEX) telemetry — device health and remediation, not just compliance state

Deployment Model & Licensing Fit

Cloud vs. self-hosted/on-prem options and data residency, how the per-device/per-user model maps to your estate, and whether the capability you need is bundled in licenses you already own or is a paid add-on tier

Other Endpoint & Device Management Vendors

BeyondTrust Remote Support

Bomgar (BeyondTrust)

Citrix Endpoint Management

CIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .