- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Iru
Apple-first endpoint management with security, identity and compliance on one platform— Iru’s device management, EDR, vulnerability management, workforce identity, compliance automation and trust center, and how each one is licensed. This hub covers six Iru products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Six intel pages. Endpoint management, EDR, vulnerability management, identity and compliance.
Iru’s line, product by product — every linked card is a full intel page, from Apple-first endpoint management and Mac-deep EDR to app vulnerability fixes, workforce identity, compliance automation and the trust center.
Iru Endpoint Management
Mac, iPhone and iPad, plus Windows and Android.
Zero-touch Apple enrolment, DDM update enforcement and CIS templates; Windows needs 11 24H2 or later, and Android is work profile only.
Iru EDR
Prevention and detection, deepest on the Mac.
Behavioural detection and Protect-mode quarantine on Mac; on Windows it is file-based, in Detect mode, with no automatic quarantine.
Iru Vulnerability Management
Finds app CVEs, then patches them via Auto Apps.
The agent reads app inventory every 15 minutes, matched to NVD CVEs hourly and ranked by CVSS and KEV; Mac and Windows apps only.
Iru Workforce Identity
SSO, SCIM and passkeys tied to device health.
SAML and OIDC sign-on, a directory, HR-driven SCIM provisioning and device-bound passkeys; each tenant pinned to a US or EU region.
Iru Compliance Automation
Controls and evidence for SOC 2, ISO and NIST.
SOC 2, ISO 27001, ISO 42001, HIPAA, CMMC and six more, with AI-tailored controls and evidence mapping; it is not an audit firm.
Iru Trust Center
Shares certifications and reports with buyers.
A public page for certifications, reports and security posture, with NDA-gated documents and an invite flow; billed on its own row.
Passport
Platform & engineMac login with identity-provider credentials, deployed as a Library Item. Iru’s docs call it a feature of Iru Endpoint, never a separate SKU, so it has no page and no price of its own; it is covered on the Endpoint Management page
Auto Apps
Platform & engineA catalogue of 200+ third-party apps that Iru packages, installs and keeps updated on Mac and Windows. It is part of Endpoint Management, and Vulnerability Management uses it to push CVE fixes
Liftoff
Platform & engineIru’s onboarding experience for new devices during zero-touch deployment, so a new hire’s Mac arrives set up. A feature of Endpoint Management, explained on that page rather than sold on its own
Prism
Platform & engineIru’s device data layer: it collects inventory and configuration data across the fleet for custom reports and exports, and feeds Iru AI. Included with Endpoint Management rather than sold alone
Iru AI
Platform & engineThe platform’s AI layer, formerly called Kai: agents and natural-language questions about the fleet, built on what Iru calls the Iru Context Model. Iru documents no separate SKU or price for it
Iru for MSPs
Platform & engineA partner portal where managed service providers create child tenants, provision products and see estimated spend. MSP Billing is available only in the United States so far, with EU support described as coming
Iru sells across 1 of the products TechBag carries in endpoint management. The Endpoint Management guide shows how the category splits and which part is yours. →
Also sold in Security (2 products) · Identity & Access (1 product).
Why “one tenant, Apple first” is the whole story
Most Apple shops run one tool for Macs, another for sign-in, another for threat detection and a fourth for audits. Iru sells all of them fromone tenant that already knows each device’s health, so a sign-in rule or an audit control can read the same data the MDM collects. The catch: Windows and Android are newer and narrower than the Apple side, and hosting is US or EU only.
Iru Agent
Installs apps, runs scripts and reports inventory, and on Windows pairs with Microsoft’s MDM framework; now on the 5.x line, so keep it current.
Iru tenant
Endpoint, identity and compliance products share one tenant, pinned to AWS in the US or Germany; Blueprints and Assignment Maps set policy.
Library Items
EDR, Passport, Vulnerability Response and Auto Apps arrive as Library Items assigned to devices, so a paid add-on lights up in the same console.
Iru Access
Carries device-bound passkeys and reports device health to Workforce Identity, so sign-in can require a known, managed Mac, iPhone, iPad or PC.
Start with the fleet — how much is Apple — then decide which of the five add-ons earn their licence.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
SOC 2 Type 2 report
listed on Iru’s security page, alongside its ISO 27001 certification
ISO 27001 certified
for the platform’s information security management, per Iru’s security page
ISO 42001 for its AI
the AI management standard, cited on the company’s archived pricing page in September 2025
2026 Cybersecurity Excellence Awards
announced in Iru’s newsroom; TechBag did not confirm the category it won
No Magic Quadrant placement announced
Iru announces no placement in the 2026 Endpoint Management Tools Magic Quadrant
Series D, $100M
led by General Catalyst at an $850M valuation, half equity and half go-to-market money
Renamed Iru
the launch that added Workforce Identity, Compliance Automation, Windows and Android
CVE-2026-39118 fixed in 4.7.5
a local privilege escalation in the agent, CVSS 8.4, with no known exploitation
The company in six figures
See the platform, hear the pitch
Meet Iru
The launch film from 22 October 2025, the day of the rename; a brand piece, not a product demo.
IT & Security Teams: Meet Iru - Unified Identity, Endpoint Security, and Compliance
An October 2025 overview of how identity, endpoint and compliance products sit on one platform.
Iru's product philosophy: What we build and why
A June 2026 talk in which Iru’s product team explains desired-state management and its design choices.
Where Iru sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
Iru Across Its Solution Areas
Each dot is a Iru solution area: competitive position vs category momentum.
The core line since 2018: zero-touch enrolment, DDM update enforcement, Shared iPad, tvOS and visionOS, and 200+ Auto Apps.
Apple Depth × Platform Breadth
How deep each vendor manages Macs, iPhones and iPads vs how much identity, security and compliance it sells on the same platform.
Six separately licensed products in one tenant, from Apple MDM to compliance evidence; Windows and Android are newer and narrower, and hosting is US or EU.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with Iru?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. What does the fleet look like?
3. Who will own it?
Six products, one tenant
Endpoint Management is the base; EDR, Vulnerability Management, Identity, Compliance and Trust Center are each licensed on top of it or alone.
Read →Is it a full UEM yet?
Apple depth is the strength. Windows needs 11 24H2 or later and Android is company-owned work profile only, so check your fleet mix first.
Read →Names that changed
Product names changed in October 2025, so older quotes and docs say Device Management where Iru now says Endpoint Management.
Read →What each product counts
Endpoint products count devices by platform, Identity counts monthly active users, and Compliance counts frameworks plus seats.
Read →Mac EDR is not Windows EDR
Protect mode and behavioural detection run on Mac only; on Windows the EDR scans files and reports, without automatic quarantine.
Read →Where Iru fits in UEM
The Endpoint Management category’s UEM & MDM guide compares device management tools across Apple, Windows and Android, the market Iru Endpoint Management competes in.
Read →The acronym decoder
Every term on these pages, in one place- MDM
- Mobile device management: enrolling devices and pushing settings, apps and commands to them.
- UEM
- Unified endpoint management: one console for phones, tablets and computers across OSes.
- ADE
- Automated Device Enrollment: Apple devices enrol themselves on first boot, zero-touch.
- DDM
- Declarative device management: Apple’s model where devices enforce declared state.
- Blueprint
- An Iru policy group that bundles settings and apps assigned to a set of devices.
- Library Item
- Iru’s unit of configuration: a profile, app, script or feature such as EDR or Passport.
- EDR
- Endpoint detection and response: spotting, stopping and investigating threats on devices.
- KEV
- CISA’s Known Exploited Vulnerabilities list, used to rank which CVEs to fix first.
- IdP
- Identity provider: the service that signs users in to apps through SSO.
- SCIM
- A standard for creating and removing user accounts in apps automatically.
- Passkey
- A phishing-resistant sign-in credential bound to a device, with no password to steal.
- Trust center
- A public page where a company shares its certifications and security documents.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Count devices by platform
Endpoint products are licensed per device by platform, so split the fleet into Mac, iPhone and iPad, Windows and Android before you ask for a quote.
Check the Windows and Android fit
Windows must run 11 24H2 or later, Autopilot profiles are still assigned in Intune, and Android must be company-owned work profile on version 14 or later.
Choose the add-ons you will use
EDR and Vulnerability Management each carry their own per-device licence; Identity counts monthly active users, and Compliance counts frameworks plus seats.
Use the 14-day trial
Endpoint Management, EDR, Vulnerability Management and Workforce Identity offer a 14-day trial; Compliance Automation and Trust Center need a demo.
Settle hosting and support
Pick a US or EU tenant, since there is no India region, and note that support runs 24/5, Sunday 22:30 to Saturday 01:00 UTC, with a 99.9% uptime commitment.
Get it priced in rupees
Iru publishes no price and contracts are annual, billed annually. TechBag scopes devices, MAUs and frameworks and quotes the total in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Endpoint Management | Per device by platform · macOS, mobile, Windows and Android rows · annual | Quote · 14-day trial | Apple-first fleets |
| EDR | Add-on per device by platform · Mac and Windows | Quote · 14-day trial | Mac threat protection |
| Vulnerability Management | Per device by platform · Mac and Windows app CVEs | Quote · 14-day trial | Patching known app CVEs |
| Workforce Identity | Per monthly active user (MAU) | Quote · 14-day trial | SSO tied to device trust |
| Compliance Automation | Per framework plus seats · SOC 2, ISO 27001 and nine more | Quote after a demo | Audit readiness |
| Trust Center | Its own Billing row | Quote after a demo | Answering buyer reviews |
Every Iru product is quote-only on annual contracts: per device by platform for Endpoint Management, EDR and Vulnerability Management, per monthly active user for Workforce Identity, and per framework plus seats for Compliance Automation. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Trusting an old per-device price
Third-party sites still list an older per-Mac and per-mobile price. Iru’s own pricing has been quote-only since at least September 2025, so get a quote.
Assuming full Windows and Android
Windows below 11 24H2 cannot enrol, and Android has no fully managed, kiosk or personal BYOD mode. Mixed fleets may still need a second tool.
Expecting Mac-grade EDR on Windows
On Windows the EDR scans files in Detect mode and does not quarantine automatically. Plan other protection for Windows devices that need it.
Missing the tenant upgrade deadline
Older tenants must move to the Iru platform by 1 December 2026, when the previous brand is deprecated. Check the upgrade path before renewal.
Reading compliance as Indian coverage
Compliance Automation lists SOC 2, ISO and NIST frameworks but nothing for CERT-In, DPDP, RBI or SEBI. Indian obligations need their own work.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers are folding identity, endpoint security and compliance evidence into the tool that already manages their devices — which is why Iru sells all four from one tenant.
Device management meets identity
Iru launched Workforce Identity in October 2025, with access rules that check device health and device-bound passkeys at sign-in.
What it means for you
Ask whether your IdP can see device posture, not only passwords.
Declarative Apple updates
Iru documents DDM update enforcement, where declarations override legacy MDM commands, with deferrals of up to 90 days.
What it means for you
Check how a tool enforces OS updates, not only whether it can.
Apple specialists going multi-OS
Windows 11 and company-owned Android 14 joined Iru in October 2025, and Windows Autopilot setup shipped in May 2026.
What it means for you
Test the Windows and Android depth before you retire a second tool.
Compliance evidence from the endpoint
Compliance Automation added Adaptive Compliance in June 2026 and Policies Management in July 2026, across eleven frameworks.
What it means for you
Ask which evidence is collected from devices and which is uploaded by hand.
Questions buyers ask about Iru
Ready to shortlist Iru?
Open any of the six intel pages for the deep dive, or let a TechBag advisor build the case with you — the devices by platform and identity users to license, which add-ons earn their place, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.