- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Iru Endpoint Management
Your fleet is mostly Macs, with a few PCs and Android phones. They shouldn’t need a second console — Iru Endpoint Management enrols Apple devices zero-touch, enforces OS updates by declaration and patches 200+ apps, now with Windows 11 PCs and company-owned Android phones in the same console.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Iru platform family
This page covers Iru Endpoint Management — the device-management core the other Iru products build on. The rest:
Quick facts
30-second orientation- Product
- Iru’s device-management SKU for Apple, Windows and Android, run from one SaaS console
- Maker
- Iru, Inc., US-based (Miami and San Diego), founded 2018; CEO and co-founder Adam Pettit
- Status
- Renamed on 22 October 2025; old tenants must upgrade to Iru by 1 December 2026
- Price
- Quote-only; annual contracts billed annually; a 14-day trial is available
- Licence
- Per device by platform: macOS, mobile, Windows and Android are separate billing rows
- Apple
- macOS 14 to 26, iOS and iPadOS 17+, tvOS 17+ and visionOS 2+, enrolled through Apple Business
- Windows
- Windows 11 24H2 or later only; the Autopilot deployment profile is still assigned in Intune
- Android
- Android 14+ company-owned work profile only, enrolled by single-use QR code
- India
- No Indian region: tenants run in the US or EU on AWS; support is 24/5, not 24/7
- In India via
- TechBag — fleet census, quote in INR with GST, Apple Business setup and first enrolment wave
Understand Apple-first device management before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is Apple-first device management?
An MDM built around Apple’s own enrolment and update machinery, with other platforms added to the same console.
Imaged by hand and patched by ticket vs Iru Endpoint Management — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Imaged by hand, patched by ticket | Iru Endpoint Management |
|---|---|---|
| A new Mac’s first day | Imaged at the desk, then couriered | Enrolled at first boot through Apple Business |
| Third-party app updates | Installers repackaged every fortnight | Auto Apps, updated by Iru |
| Getting macOS current | Reminder emails nobody acts on | Declared deadline after set deferrals |
| Hardening Macs | A CIS spreadsheet, applied by hand | A Level 1 or Level 2 template |
| A few PCs and phones | A second tool and a second console | Windows 11 and company Android in Iru |
| What it is NOT | — | On-prem, India-hosted, or full Android UEM |
The cheapest test is the 14-day trial: enrol one Mac through Apple Business, let Auto Apps install your stack, and time the first enforced OS update.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Blueprints
Each device lands in a Blueprint; Assignment Maps add conditional logic, so one map can branch settings and apps by department, device family or OS without cloning whole configurations.
Channels
Apple devices take MDM commands and declarations; Windows pairs Microsoft’s MDM framework with Iru’s own agent for apps and scripts; Android runs on Google’s Android Management API.
Enrolment
Macs and iPhones bought through Apple Business enrol at first boot; Windows PCs arrive through Autopilot once Entra ID is connected; company Android phones scan a single-use QR code.
Library
Apps, profiles, Passport, CIS templates and the EDR item are all Library Items; Auto Apps supplies 200+ pre-packaged titles that Iru keeps current, so no one repackages updates.
Apple Business and declarations drive the Macs and iPhones — Windows adds an Iru agent, Android runs on Google’s API.
Nine capabilities. Enrol, automate, secure.
Iru Endpoint Management puts Macs, iPhones and iPads under automated control first, then brings Windows 11 PCs and company-owned Android phones into the same console.
Out of the box, already managed
Automated Device Enrollment through Apple Business or Apple School Manager supervises a Mac or iPad the moment it powers on.
A guided first-login screen
Liftoff gives a new hire a guided onboarding screen while apps install, so day one starts without a ticket to the IT desk.
Windows PCs through Entra
Connect Entra ID and Iru becomes the MDM authority for Autopilot PCs; the deployment profile itself is assigned in Intune.
One map, many branches
Conditional logic routes apps and settings by group or device type, replacing a sprawl of near-identical Blueprints.
200+ apps patched for you
Iru packages, tests and updates a catalogue of 200+ common titles on Mac and Windows, so admins pick apps rather than build them.
Updates enforced by declaration
Declarative software-update rules take precedence over legacy commands, with rolling enforcement and deferrals of up to 90 days.
Benchmarks in one click
One-click Security Templates bring a Mac to the CIS Level 1 or Level 2 benchmark instead of hardening it setting by setting.
Mac login with IdP credentials
Passport, a feature of this product rather than a separate SKU, lets staff sign in to a Mac with their identity-provider password.
Lost, shared or handed back
Activation Lock management, Return to Service and Shared iPad cover lost devices, re-issued iPads and BitLocker on Windows.
Watch Iru Endpoint Management in action
The product overview, Iru’s approach to Windows, Auto Apps in two minutes, and a complete tenant build from scratch.
Iru Endpoint Management
The launch overview of the renamed product: enrolment, Blueprints, Auto Apps and OS updates in one console.
How Iru brings its device management philosophy to Windows
Why Iru added Windows and how its agent sits beside Microsoft’s MDM framework on Windows 11 PCs.
Iru in Two: Auto Apps
Two minutes on picking a catalogue app and letting Iru package and update it across the fleet.
How to set up your Iru tenant from scratch (complete end-to-end guide)
A full tenant build, from connecting Apple Business to the first Blueprint and enrolled device.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Most UEMs treat Apple as one platform among many. Iru starts from the Mac and works outward.
Here’s what genuinely sets it apart — and exactly where it stops.
Apple depth that most multi-OS tools lack
Iru documents declarative software-update enforcement: declarations override older MDM commands, with rolling deadlines and deferrals of up to 90 days. It covers tvOS and visionOS as well as Mac, iPhone and iPad, and adds Shared iPad, Return to Service, Activation Lock handling and CIS Level 1 or 2 templates for Macs.
Apps that update without packaging work
Auto Apps is a catalogue of 200+ titles that Iru packages, tests and keeps current on Mac and Windows. An admin chooses the app and the update behaviour; nobody downloads an installer, rebuilds it or writes a version check. For a lean IT team, that is most of the weekly patching chore removed.
Windows and Android, inside the same console
Since October 2025 the console also takes Windows PCs, through Autopilot after Entra ID is connected, with app installs, inventory and PowerShell scripts from Iru’s agent, plus company-owned Android phones in a work profile. A Mac-led company can bring its few PCs and field phones in without a second tool.
Where it stops
Windows means Windows 11 24H2 or newer, and the Autopilot profile is still assigned in Intune. Android is company-owned work profile only: no fully managed, kiosk or personal-phone mode. Apple BYOD is portal enrolment, not User Enrollment. There is no on-prem edition, no India region and no published price.
The numbers behind the platform
What your Iru Endpoint Management rollout looks like
Count devices by platform
List Macs, iPhones, iPads, Windows PCs and Android phones, and check every PC is on Windows 11 24H2 or later.
Connect Apple Business and Entra
Link Apple Business for zero-touch, connect Entra ID for Autopilot, and agree with legal on a US or EU tenant.
Build Blueprints and a pilot
Create a Blueprint with Auto Apps, Liftoff and a CIS template, then enrol ten devices from IT and one team.
Enforce the first OS update
Set a Managed OS deadline with a deferral window, watch completion, and fix the stragglers before scaling up.
Migrate the rest of the fleet
Re-enrol the remaining Macs and phones, bring PCs over with Iru’s Windows Migration Agent, and retire the old MDM.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“New MacBooks ship straight to remote hires. Liftoff runs, apps install, and IT never touches the box at all.”
“Auto Apps took browser and Zoom updates off my plate. I used to repackage installers every second Friday.”
“Deferrals with a hard deadline finally got our designers onto the current macOS without a month of nagging.”
“Our twenty Windows laptops came in fine, but only after we upgraded the older ones to 24H2 first.”
“The Android side is work profile only. Fine for sales phones, no use for the delivery kiosks we also run.”
“Our auditors asked where device records sit. The answer was the EU tenant, and they accepted it in writing.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the UEM and MDM market — tap any vendor to see why it sits where it does.
TechBag UEM & MDM Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quote-only; 6,000+ teams by Iru’s count; added Windows and Android in 2025.
Platform Breadth × Apple Depth
The grid nobody publishes — how many OS families and enrolment modes it manages vs how deep it goes on Apple.
Seven OS families, but Windows 11 24H2+ and Android work profile only.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Iru Endpoint Management vs the UEM and MDM field
Against Jamf Pro, Microsoft Intune, Hexnode UEM, Scalefusion UEM and NinjaOne MDM — on platforms, Apple depth, price, add-ons, India hosting, support and exit.
| Dimension | Iru Endpoint Management | Jamf Pro | Microsoft Intune | Hexnode UEM | Scalefusion UEM | NinjaOne MDM |
|---|---|---|---|---|---|---|
| What it is | Apple-first MDM | Apple-only flagship | Microsoft’s UEM | Single unified UEM | Frontline-led UEM | Mobile add-on module |
| Deployment | SaaS only | Jamf Cloud or on-prem | Cloud service only | SaaS, three regions | Cloud, India option | Inside NinjaOne SaaS |
| Platform coverage | Apple + Win 11 + Android | Apple only | Five platforms | Six, incl. Fire OS | Six, Linux and ChromeOS | iOS, iPadOS, Android |
| Apple depth | Documented DDM updates | The Apple benchmark | Solid, below Jamf | ADE; DDM partial | ADE with DDM | ADE, App Store apps |
| Windows and Android | Thin on both | Neither | Native on both | Full AE plus Windows | Rugged Android, Win | Android via AE |
| Pricing model | Per device, by platform | Per device, annual | Per user, often bundled | Per device, 3 tiers | Per device, 4 tiers | Add-on per device |
| Entry price and minimum | Quote only | Quote, 25-device min | $8/user/month | $2.20/device/month | ~$2/device/month | Platform band + MDM |
| Included vs add-on | EDR and VM extra | Connect, Protect extra | Suite features extra | Tier sets the features | OneIdP, Veltar extra | Needs the platform |
| Security and patching | Auto Apps + CIS | Deep scripting | Defender built in | Policies; XDR apart | Policies; Veltar apart | Lock, wipe, passcode |
| Identity and integrations | Okta, Entra, Google | Jamf Connect apart | Entra natively | Hexnode IdP apart | OneIdP apart | RMM-first ecosystem |
| India data storage | US or EU only | No Indian region | Local India geography | US, EU or UAE | Hosted in India | Not graded resident |
| Support | 24/5, chat and email | Jamf Nation behind it | Via Microsoft plans | 24/7 live support | Pune-based team | 24/7/365, no charge |
| Lock-in and exit | Wipe Android to leave | Rewrite the scripts | Tied to M365 | Rebuild kiosk setups | Unwind the suite | Bound to the RMM |
| Best fit | Mac-led startups | Apple-only enterprises | Microsoft 365 estates | Kiosk-heavy mixed fleets | Indian frontline fleets | Existing NinjaOne shops |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Iru Endpoint Management if…
- ✓Most of your fleet is Mac, iPhone and iPad, and you want declared OS deadlines and zero-touch enrolment without heavy scripting
- ✓A small IT team wants 200+ third-party apps packaged and updated by the vendor through Auto Apps
- ✓Your few PCs already run Windows 11 24H2 and your company Android phones only need a work profile
Compare alternatives if…
- ✓Windows is the majority or Intune is already paid for in Microsoft 365 — Intune covers it natively
- ✓You run Android kiosks, rugged scanners or personal phones — Scalefusion and Hexnode support those modes
- ✓Device data must be stored in India — Scalefusion offers Indian hosting, and Jamf Pro can run on your own servers
Do not expect…
- ✓An India region, an on-premise edition or round-the-clock weekend support
- ✓Fully managed, dedicated or personal-phone Android modes, or Windows 10 support
- ✓A published per-device price, or a Gartner Magic Quadrant placement
Iru Endpoint Management is one of 28 UEM & MDM products TechBag carries. The UEM & MDM guide narrows them to a shortlist and shows the reasoning. →
What does hand-run device admin cost you?
Drag the sliders (managed devices; IT-admin hour cost). Estimates model admin time spent imaging and enrolling devices, chasing OS updates and repackaging app updates at an assumed 1.5 hours per device a year, with 70% of it removed by zero-touch enrolment, declared update deadlines and Auto Apps. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Quote-only: Iru publishes no device price. Contracts are annual, billed annually, and licensed per device by platform, with separate macOS, mobile, Windows and Android rows. Every plan includes 24/5 support plus free onboarding and migration, and a 14-day trial is open before you sign. EDR and Vulnerability Management are licensed per device on top. TechBag counts your fleet by platform, then gets the quote itemised in INR with GST.
Iru Endpoint Management
Best for Apple-first fleets
- Quoted per device by platform, billed annually
- Passport, Auto Apps and Liftoff included
- 24/5 support; free onboarding and migration
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
+ EDR and Vulnerability Management
Best for security on the same agent
- Each licensed per device on top
- Mac and Windows coverage, deepest on Mac
- TechBag gets every line quoted in INR with GST
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
What share of devices is Apple? Iru is strongest where Macs and iPhones are most of the fleet.
Are all PCs on Windows 11 24H2 or later, Pro or Enterprise? Older builds cannot be managed.
Do you hold Intune access and licences that cover Autopilot? The deployment profile is still assigned there.
Do you need kiosk, fully managed or personal-phone Android? Only company-owned work profile is offered.
Will your auditors accept a US or EU tenant? Iru offers no Indian region, so get the answer in writing first.
Were your Apple devices bought through Apple Business or an authorised reseller, so zero-touch works?
Do you also want EDR or Vulnerability Management? Each is licensed per device on top of this product.
Is the annual quote split by platform row, and does it list onboarding and migration help? Ask for INR with GST.
Questions buyers ask
Ready to evaluate Iru Endpoint Management?
Count your Macs, phones and PCs by platform first, or let a TechBag advisor scope a pilot that enrols one team zero-touch through Apple Business.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.