- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Iru Vulnerability Management
Your scanner lists the CVEs on every laptop. Someone still has to patch them — Iru Vulnerability Management reads every app on your Macs and Windows laptops every 15 minutes, ranks the CVEs it finds by severity and known exploitation, and lets Auto Apps patch them.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Iru platform family
This page covers Iru Vulnerability Management — CVE detection and Auto Apps remediation. The rest:
Quick facts
30-second orientation- Product
- Agent-based CVE detection and Auto Apps remediation for installed apps on Mac and Windows
- Maker
- Iru, Inc., US-based (Miami and San Diego); founded 2018, CEO Adam Pettit
- Status
- Renamed from Kandji Vulnerability Management on 22 October 2025; Kandji tenants upgrade by 1 December 2026
- Price
- Quote-only; annual commitment billed annually; free 14-day trial
- Licence
- A separate line on the Iru bill, counted per device by platform
- Cadence
- App inventory scanned every 15 minutes; matched against NVD CVEs every hour
- Ranking
- CVSS severity plus the Known Exploited Vulnerabilities (KEV) catalogue
- Fix
- The Vulnerability Response Library Item enforces Auto Apps updates by CVE severity
- India
- No Indian region: tenants are hosted on AWS in the United States or Germany
- In India via
- TechBag — Auto Apps coverage check, trial scoping, quote in INR with GST
Understand endpoint vulnerability management before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is endpoint vulnerability management?
An agent on each device lists installed software and flags versions with known CVEs, with no network scan.
A quarterly scan and hand-pushed patches vs Iru Vulnerability Management — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Quarterly scans, hand-pushed patches | Iru Vulnerability Management |
|---|---|---|
| Spotting a vulnerable app | A quarterly network scan, if the laptop is on site | An agent scan every 15 minutes, wherever it is |
| Deciding what goes first | Sorting a spreadsheet by CVSS | CVSS plus a known-exploited (KEV) marker |
| Getting the update out | Packaging and pushing each update by hand | Auto Apps enforcing updates by CVE severity |
| Recording exceptions | A note in someone’s inbox | Risk acceptance and device exclusion in the console |
| Tools involved | Scanner, patch tool and MDM, reconciled by hand | One agent and one console with device management |
| What it is NOT | — | A network, server, web-app, cloud or OT scanner |
The cheapest test is the 14-day trial: enrol twenty laptops, let the 15-minute scans run for a week, and count how many critical CVEs Auto Apps closes.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Agent
The agent that already manages the Mac or Windows laptop lists its installed applications and versions every 15 minutes, so no separate scanner has to be deployed or booked.
Matching
Each hour the inventory is checked against National Vulnerability Database records, and Iru’s Security Research team enriches those entries before they reach the console.
Ranking
Every finding carries its CVSS severity and a marker when the CVE sits in the Known Exploited Vulnerabilities catalogue, so flaws already used in attacks outrank the rest.
Response
Assigned like any Library Item, it tells Auto Apps to enforce updates by CVE severity; risk acceptance and device exclusion cover what you decide not to patch yet.
One agent, two jobs — the Iru Agent that manages each Mac and PC also lists its apps for hourly CVE matching.
Six capabilities. Detect, prioritise, remediate.
Iru Vulnerability Management finds vulnerable apps on managed devices and patches them from the same console.
A fresh look every 15 minutes
The agent rereads installed apps and versions four times an hour, so a vulnerable build installed this morning is visible today.
Hourly CVE correlation
Inventory is compared with NVD CVE records every hour, and Iru’s Security Research team adds context to the raw entries.
Severity you can sort by
Each finding carries its CVSS score, so policies and dashboards split critical and high flaws from the low-severity long tail.
Known-exploited flaws first
CVEs on the Known Exploited Vulnerabilities list are flagged, putting flaws attackers already use ahead of theoretical ones.
Patch from the catalogue
Vulnerability Response makes Auto Apps enforce updates by severity on Mac and Windows, drawing on a catalogue of 200+ apps.
Accept a risk on record
Risk acceptance and device exclusion park a finding you cannot fix yet, rather than leaving it open as a standing alert.
Watch Iru Vulnerability Management in action
The product overview, a short look at Vulnerability Response, and how Intruder.io automated its patching with Iru.
Iru Vulnerability Management
Iru’s own tour of the module: app inventory, CVE findings and the route from a finding to a fix.
Iru in Two: Vulnerability Response
A brief walk through the Library Item that tells Auto Apps to enforce updates by CVE severity.
How Intruder.io automated patching with Iru
Intruder.io describes moving its patching from manual effort to automated updates on Iru.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Scanners find the flaw and stop there. Iru patches it from the same agent.
What it does better than a scanner — and the surfaces it never sees.
Detection with no scan window to book
The scan runs inside the Iru Agent already managing the laptop, so there is no network scanner to place and no scan credential to store. App inventory refreshes every 15 minutes and is matched to NVD CVEs hourly, so a laptop that never visits the office is still assessed.
The finding and the fix in one console
Most scanners hand over a CVE list and stop. Here the Vulnerability Response Library Item makes Auto Apps enforce updates by CVE severity on Mac and Windows, so the platform that spotted a flaw also patches it. Risk acceptance and device exclusion keep exceptions on record.
Ranking that starts from real attacks
Findings are ordered by CVSS severity and by whether the CVE is in the Known Exploited Vulnerabilities catalogue. That is plainer than Qualys TruRisk or Tenable VPR, but transparent: a KEV marker means attackers already use the flaw, a reason any auditor accepts for patching first.
Where it stops
It assesses apps on Mac and Windows devices running the Iru Agent, and nothing else: Linux, network gear, servers outside the fleet, web apps, cloud and OT are out of scope. Automatic fixes cover only Auto Apps titles. There is no public price, Gartner placement or Indian region.
The numbers behind the platform
What your Iru Vulnerability Management rollout looks like
Hold the catalogue against your apps
Export installed software from current tools and see which titles Auto Apps covers; anything missing needs manual packaging.
Start the 14-day trial
Enrol a pilot group of Macs and Windows 11 24H2 laptops, and let a few days of 15-minute scans build a baseline.
Set the response policy
Choose which severities Auto Apps should enforce, and agree who signs risk acceptances for apps you cannot update yet.
Measure time to patch
Compare open critical and KEV-flagged findings before and after Vulnerability Response, and track how long each takes to close.
Cover what it leaves out
Keep or buy a scanner for servers, network gear and cloud, then sign the annual contract with devices counted by platform.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“A critical browser CVE landed on a Tuesday. By lunch the dashboard showed it on 140 Macs and Auto Apps had updated most of them.”
“The KEV flag is what our CISO reads. It turned a 600-line CVE export into a short list we could defend in a board review.”
“We still run a network scanner for servers and switches. Iru only looks at the laptops, and it never pretends otherwise.”
“Risk acceptance stopped the alert noise on a legacy design tool we cannot upgrade until the next licence renewal.”
“Windows support is newer than Mac. Our Windows 10 machines could not enrol, so plan the OS upgrade before the pilot.”
“Two of our clinical apps are not in Auto Apps, so they still need a manual package. Check your critical titles before signing.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the vulnerability management market — tap any vendor to see why it sits where it does.
TechBag Vulnerability Management Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quote-only, per device by platform; Mac and Windows apps only.
Asset Breadth × Fix Depth
The grid nobody publishes — how many kinds of asset it assesses vs how far it goes in fixing what it finds.
Mac and Windows apps; Auto Apps enforces fixes by severity.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Iru Vulnerability Management vs the vulnerability management field
Against Action1, Qualys VMDR, Tenable Vulnerability Management, CrowdStrike Falcon Exposure Management and Microsoft Defender Vulnerability Management — on coverage, ranking, patching, price, support and India.
| Dimension | Iru Vulnerability Management | Action1 Vulnerability Remediation | Qualys VMDR | Tenable Vulnerability Management | CrowdStrike Falcon Exposure Management | Microsoft Defender Vulnerability Management |
|---|---|---|---|---|---|---|
| What it is | Endpoint app CVEs + fix | Endpoint find-and-fix | Flagship VM platform | Cloud VM (ex-Tenable.io) | Exposure on the sensor | Inside MDE Plan 2 |
| Deployment | SaaS, via Iru Agent | Cloud console, own agent | Agents + scanners, cloud | SaaS or Security Center | Falcon sensor, SaaS | MDE sensor, SaaS |
| Assets covered | Mac + Windows apps only | Win, Mac, Linux devices | IT, cloud, OT, IoT | Hosts and network gear | Endpoint, external, OT | Five OSes, onboarded |
| Detection cadence | 15-min scan, hourly CVEs | Agent-led, not published | Continuous Cloud Agent | Agents + scheduled scans | Sensor, no scan window | Continuous from sensor |
| Prioritisation | CVSS + KEV | CVSS, exploit context | TruRisk scoring | VPR | ExPRT.AI | Threat-led, in portal |
| Remediation | Auto Apps enforces fixes | One-click patching | Patching is an add-on | Reports, does not patch | Ranks, does not patch | Intune tasks, blocking |
| Pricing model | Per device, by platform | Per endpoint, annual | Per asset | Per asset, 1–3 years | Falcon module, quoted | Per user, add-on |
| Published entry price | Not published | Free to 200, then $4 | ~$199–250/asset (rep.) | $3,700 for 100 assets | Quote only | $2/user/month add-on |
| Included vs add-on | Its own licence line | Patching in same plan | Patch, CAR are add-ons | Web and cloud separate | Needs Falcon platform | Premium data costs extra |
| Integrations | Iru stack, S3, MCP | Multi-tenant, own engine | ServiceNow, Jira, CMDB | ITSM, SIEM, connectors | Beside Falcon EDR | Intune, Sentinel, XDR |
| India data | US or EU only | Promised for 2026 | IN1 India platform | in01 site, AWS Mumbai | India cloud announced | Azure India geo |
| Support | 24/5 chat, portal, email | Support fee on paid tier | 24/7, no extra charge | 24x365 costs $400 more | Not itemised publicly | Your Microsoft plan |
| Lock-in and exit | Tied to the Iru agent | One agent, both jobs | Many apps, one agent | Exports, on-prem route | Best inside Falcon | Microsoft 365 gravity |
| Best fit | Apple-first Iru fleets | Patch-gap teams | Broad estates, India pod | Published-price VM | Existing Falcon estates | Microsoft 365 E5 shops |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Iru Vulnerability Management if…
- ✓Your laptops are mostly Macs already managed by Iru Endpoint, and you want their app CVEs found without a scanner
- ✓You want a found vulnerability patched by Auto Apps from the same console, by severity, with no hand-off to another team
- ✓A CVSS and known-exploited ranking is enough, and you would rather explain a KEV flag than a proprietary score
Compare alternatives if…
- ✓Servers, network devices or cloud accounts need assessing too — Qualys VMDR and Tenable cover those surfaces
- ✓You want a price before talking to sales — Tenable lists one, and Action1 is free up to 200 endpoints
- ✓Vulnerability data must stay in India — Qualys, Tenable and Microsoft each document an Indian hosting site
Do not expect…
- ✓Linux, network, web-app, cloud or OT scanning
- ✓Automatic patching for apps outside the Auto Apps catalogue
- ✓A published price, an Indian hosting region or a Gartner placement
Iru Vulnerability Management is one of 20 vulnerability management products TechBag carries. The Vulnerability Management guide narrows them to a shortlist and shows the reasoning. →
What does chasing app vulnerabilities by hand cost you?
Drag the sliders (managed Mac and Windows devices; IT-hour cost). Estimates model IT time spent tracking app CVEs and pushing updates by hand at an assumed 1.5 hours per device a year, with 70% of it removed by agent scanning and Auto Apps enforcement. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Not published: Iru Vulnerability Management is quote-only, licensed per device by platform on an annual contract billed annually, with a free 14-day trial and 24/5 support in every plan. Per-Mac prices on third-party sites are an old Kandji list, not current. TechBag gets the quote itemised by platform and bills in INR with GST.
14-day trial
Best for proving Auto Apps coverage
- Free for 14 days
- Mac and Windows app scanning
- Vulnerability Response policies
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
Annual licence
Best for fleets already on Iru Endpoint
- Quote-only, per device by platform
- Annual commitment, billed annually
- 24/5 support and free onboarding
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
What share of devices are Macs and Windows PCs? Linux machines and servers outside Iru get no coverage.
Are Windows laptops on Windows 11 24H2 or later? Older builds cannot be managed by Iru at all.
Do your business-critical apps appear in Auto Apps? Titles outside it still need manual updates.
Which CVSS levels should Vulnerability Response enforce at once, and which wait for a change window?
Who approves risk acceptance and device exclusion, and how often are those decisions reviewed?
Which scanner will cover servers, network devices, web apps and cloud accounts alongside Iru?
Will auditors and customers accept US or EU hosting, given Iru offers no Indian region?
Does the quote count devices per platform and state the annual term? Ask for INR with GST.
Questions buyers ask
Ready to evaluate Iru Vulnerability Management?
Check which of your apps Auto Apps can patch, or let a TechBag advisor scope a trial that pairs Iru with a scanner for servers and cloud.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.