search legion

Review · MDM software

Kandji review

Broad Apple management and expanding endpoint tools, but quote-only annual pricing and mixed admin feedback make switching a careful call.

6.8/10Search Legion score

We may earn a commission if you buy through links on this page. It never changes a score or a ranking. How we make money

The bottom line

Worth evaluating for Apple-heavy teams; get a detailed quote and test the fit before switching.

Kandji, now Iru, pairs Apple device management with endpoint security, compliance automation, workforce identity and, according to its homepage, Windows and Android management. Its pricing details list a 14-day trial, but no public starting price; contracts are annual and quotes depend on solution, users and device volume. Compliance Automation and Trust Center list a personalized demo instead of a trial.

Reddit feedback is split: some admins praise the interface and support, while others criticize Blueprint flexibility, scoping and renewal handling. We’d shortlist it for teams prioritizing Apple management, but compare the full quote and confirm cross-platform requirements before committing.

Good fit if

  • Teams centered on Apple device management
  • IT teams seeking automated compliance evidence
  • Organizations wanting endpoint and identity tools together

Skip it if

  • Buyers who need transparent list pricing
  • Teams requiring highly granular device scoping
  • Organizations unwilling to sign annual contracts
Kandji homepage
Kandji homepage, captured Nov 7, 2026

ScoresHow it rates

  • Features8.5
  • Ease of use7.5
  • Value for money4.5
  • Support6.5
  • User sentiment5.5

What works

  • Manages Apple, Windows and Android devices, per the published product details
  • Includes zero-touch deployment for Apple devices
  • Offers endpoint threat detection and vulnerability management
  • Automates continuous compliance evidence collection
  • One Reddit commenter praised its interface and responsive support

What doesn't

  • Starting price is not published
  • Annual commitment and custom quote make cost comparisons harder
  • Some Reddit admins say Blueprint scoping lacks flexibility
  • Reddit renewal feedback includes a reported contract dispute
  • AI governance is listed as early access

01What Kandji actually does

Kandji has rebranded as Iru. The platform keeps its Apple device management and now positions itself as a broader system for managing devices, identity, endpoint security, and compliance. Its stated device coverage includes Apple, Windows, and Android, with tools for enrollment, configuration, app deployment, and security controls.

Beyond device management, Iru describes endpoint threat detection, vulnerability management, and autonomous patching. Its compliance tools collect evidence continuously, while workforce identity offers context-aware, passwordless access. For Apple deployments, the platform supports remote zero-touch setup. Iru also lists AI governance features for seeing which AI tools are in use and setting allow-or-block rules, but those features are marked early access.

That breadth makes Iru worth considering if you want to bring several IT and security jobs under one vendor. But the product’s stated coverage is not proof that it will replace every tool in a mixed-device environment. Check the specific workflows and operating systems you need before treating the rebrand as a reason to switch.

02Where Kandji is strong

Iru’s strongest case is its combination of Apple device management with security and compliance functions. The product information describes enrollment, configuration, app management, security controls, remote Apple setup, threat detection, vulnerability management, and continuous audit evidence. That may reduce the number of separate tools an IT team has to evaluate, though the published materials don’t establish how much overlap there is between modules.

The platform also has a clear Apple deployment story: zero-touch setup is listed, and a commenter on r/macsysadmin praised Kandji’s ease of use, interface, support, and built-in remediation. Another commenter said they moved from Jamf and preferred Kandji. Those are individual reports, not a reliable measure of how the product will fit your environment; other users in the same discussions preferred Jamf.

The expanded Windows and Android positioning could make Iru more relevant to teams that need broader coverage than an Apple-only MDM. Treat that as a point to verify in a demo, not a settled advantage. Ask the sales team to map each required device type and workflow to the exact product and contract line item.

03Where it falls short

Price transparency is the clearest drawback. The published pricing information lists no public price or per-device rate for any solution. Endpoint Management, EDR, Vulnerability Management, Workforce Identity, Compliance Automation, and Trust Center all require custom quotes, with annual commitments billed annually. Pricing is customized by solution, user count, and device volume. There is no free plan; the listed trial is 14 days, while Compliance Automation and Trust Center offer a personalized demo instead of a trial.

That makes a clean cost comparison with Jamf, Mosyle, or a mixed-vendor setup difficult until you get a written quote. One commenter on r/macsysadmin said a Kandji EDR quote exceeded Mosyle’s full cost, but that is one user’s comparison, not a general price benchmark. Ask for renewal terms, included modules, device and user assumptions, and any add-on charges before signing.

Fit is another risk. Some Reddit users praise Kandji’s usability; others criticize its Blueprints as less flexible than Jamf’s scoping. The discussions also include older Apple-only descriptions, while Iru now advertises Windows and Android. Confirm current capabilities and test your own policies before switching. AI governance is listed as early access, so don’t treat it as a mature control.

04Kandji pricing: what you'll actually pay

Kandji, now Iru, does not publish list prices for its products. The published pricing information lists Endpoint Management, Endpoint Detection & Response, Vulnerability Management, Workforce Identity, Compliance Automation and Trust Center as custom-quote offerings; it gives no monthly or annual price for any of them. There is no published tier ladder, so we can’t calculate a jump between tiers or compare per-device costs.

The listed billing terms are an annual commitment, billed annually. Quotes depend on the solution, user count and device volume, which makes a detailed, itemized quote important before you switch. The pricing information lists a 14-day free trial, but says Compliance Automation and Trust Center offer a personalized demo instead of a trial. Confirm which products the trial covers and whether the quote bundles separate tools. No priced add-ons are listed. If you need transparent, self-serve pricing, this is a drawback: budget planning depends on getting a quote, and the published information does not provide enough detail to estimate your bill.

05Switching to (or from) Kandji

Before moving, map which devices and functions you expect to manage. Iru’s product information covers Apple, Windows and Android management, plus endpoint security, identity and compliance; that breadth does not tell us how much work a migration will take for your current setup. The published material does not specify migration tooling, supported imports, data-export formats or what happens to historical compliance evidence. Ask for those details, and test enrollment, policies, apps and evidence collection with a limited group before committing.

Annual commitments are a practical lock-in risk: confirm renewal dates, notice periods and any costs for ending service early in the contract. The product information does not publish those terms. We also don’t have Reddit reports in the published sources, so we can’t credibly name common reasons users leave or claim a recurring migration problem. If you’re switching away, request written export and offboarding steps before signing; if you’re switching in, get a detailed quote and validate device scoping, especially if you need granular controls.

From the threadsWhat users say

Reddit feedback is split: some admins praise Kandji’s usability, support and ease of training, while others criticize its Blueprint flexibility and sales or renewal practices. The Iru rebrand and move to quote-based pricing have also prompted skepticism, though complaints about future price hikes are concerns, not confirmed changes.

Easy to use
Overall ease of use. The UI is well thought out, functionality is refined and they continue to make monthly improvements that make my job easier
r/macsysadmin · view thread
Blueprint flexibility
Kandji uses whats called "Blueprints" and its about as flexible as cement
r/macsysadmin · view thread
Strong fan opinions
I am a huge Kandji fan. I converted from JAMF and will never look back
r/macsysadmin · view thread
Renewal pressure
They told us we'd need to sign the renewal without the eval completed or else they would terminate our environment
r/macsysadmin · view thread

Questions people ask

Are Iru and Kandji the same?

Yes. Kandji has rebranded as Iru. The product keeps its Apple device management capabilities and expands management to Windows and Android. Iru also brings together endpoint security, workforce identity and compliance tools for IT and security teams.

How much does Kandji cost?

A starting price is not published in the pricing information available to us. Pricing is customized by solution, user count and device volume, with an annual commitment billed annually. The information lists a 14-day free trial, but Compliance Automation and Trust Center are listed with a personalized demo instead of a trial.

What is Kandji used for?

Kandji, now Iru, is used to manage devices, identity and compliance. Listed capabilities include device enrollment and configuration, app management, endpoint security, vulnerability management, compliance evidence collection and passwordless workforce access. It also offers remote zero-touch Apple deployment; AI tool visibility and allow-or-block rules are listed as early access.

How does Kandji compare with Jamf?

Reddit opinions differ. Some Kandji users praise its ease of use and training, while others say Jamf offers more granular control and that Kandji’s Blueprints feel rigid. These are individual admin reports, not a controlled comparison. One commenter recommends Kandji when learning time is a concern; another prefers Jamf for fine-tuning.

Can Kandji manage a personal Mac with limited access?

A commenter on Reddit says Kandji does not support macOS User Enrollment, and other commenters warn that enrolling a personal Mac gives the organization substantial administrative control, including the ability to lock or wipe it. If a company requires Kandji for work, commenters recommend asking it to provide a work Mac.

Sources

  1. Kandji homepage
  2. Kandji pricing, compiled via web search from rework.com, getcaspian.io, zapro.ai, iru.com
  3. Reddit: Kandji has rebranded to Iru
  4. Reddit: Jamf vs Kandji for Enterprise
  5. Reddit: Moving from Jamf to Kandji
  6. Reddit: Contracted to company wanting Kandji on my own mac