Kandji rebranded to Iru in October 2025 and expanded beyond Apple-only into Windows plus Android, but the install base, pricing structure, and platform DNA still center on 50-500 device Apple fleets at growth-stage tech companies. The Device Management tier covers Mac plus iOS plus iPadOS plus tvOS at a modern-MDM price point, and the cost flips when a focused alternative either undercuts the rate or covers a non-Apple OS that Iru bolts on rather than masters. The picks below address Apple-canonical scripting depth, the cheapest credible Apple MDM, the cheapest credible multi-OS UEM, bundled directory plus MDM plus SSO, and MSP-friendly multi-tenant ops.
Where alternatives win
Jamf Pro is the 20-year Apple-canonical standard with the deepest scripting, the largest IT admin community, and the broadest integration ecosystem; the call when fleet growth has outrun Blueprint duplication and you need Smart Groups plus extension attributes.
Mosyle Business is the cheapest credible paid Apple MDM in the category with a free tier for the first 30 devices, fitting under-100-device fleets where Kandji's per-device rate stops paying back.
Hexnode Pro covers Mac plus iOS plus Windows plus Android plus ChromeOS at roughly half of the per-device rate Kandji and the Apple-first MDMs charge, the correct shape when your fleet is genuinely cross-OS.
JumpCloud Platform bundles open directory plus MDM plus SSO plus RADIUS in a single per-user contract that can replace Kandji plus Okta together, fitting SMB plus mid-market IT teams consolidating tools.
Addigy is purpose-built for MSPs and IT consultants running multi-tenant Apple fleets across many client engagements, the niche where Kandji's single-tenant architecture stops fitting.
By Subrupt EditorialPublished Reviewed
If you have outgrown DIY profiles and need Apple device enrollment plus configuration plus patching in one polished platform, Kandji (now Iru as of October 2025) is the modern default for growth-stage tech companies plus design firms plus media orgs. The Auto Apps plus Library Items workflows genuinely do replace manual scripting, and the out-of-box UX is meaningfully cleaner than the 20-year incumbent for IT teams without a dedicated Apple admin specialist.
Three buyer profiles dominate the endpoint-management space. Apple-first IT teams running 50-500 Mac plus iOS devices pick Kandji, Jamf, or Mosyle head to head. Cross-OS teams with meaningful Windows plus Android fleets lean toward Hexnode, Microsoft Intune, or JumpCloud. MSPs and IT consultants managing many client tenants pick Addigy or Jamf School. Most teams sit firmly in one of these lanes; very few buy across all three.
On cost, Kandji's Device Management lands roughly mid-market on per-device pricing. Jamf Pro is moderately more expensive at the equivalent tier, Mosyle Business undercuts Kandji by roughly a tenth, Hexnode Pro runs at less than half the rate when you accept reduced Apple-specific depth, and JumpCloud's per-user model is competitive only when your average user has one device. The price spread on a 100-device Apple fleet reflects feature scope rather than vendor quality.
Pick by the shape of your fleet. Apple-canonical scripting plus 500+ device scale: Jamf Pro. Cheapest credible Apple MDM with a free starter tier: Mosyle. Genuinely cross-OS at the lowest per-device rate: Hexnode. Replace Kandji plus Okta with one bundled platform: JumpCloud. MSP managing client engagements: Addigy.
Affiliate disclosure: Subrupt earns a commission when you switch to a service through our recommendation links. This never changes the price you pay. We only recommend services where there's a real cost or feature advantage for you, and our picks are based on the data on this page, not on which programs pay the most.
Quick pick by use case
If you only have thirty seconds, find your situation below and skip to that pick.
Apple-canonical 20-year incumbent with the deepest scripting, the largest IT admin community, and Smart Groups plus extension attributes that scale where Kandji's Blueprints stop.
Replaces Kandji plus Okta with one per-user contract covering open directory plus SSO plus MDM plus RADIUS, with a free tier for 10 users plus 10 devices.
Multi-tenant Apple-first platform purpose-built for managing 5-50+ client engagements; Kandji's single-tenant model never fit this shape.
Skip these picks if: Skip these alternatives if your Premium contract is wired into the Iru Context Model plus EDR plus vulnerability mgmt that came with the October 2025 rebrand, or if your Auto Apps plus Library Items library represents 3+ years of compounding configuration that would need to be rebuilt as Jamf scripts; the migration cost typically outweighs the per-device savings in those cases.
At a glance: Kandji alternatives
Quick comparison across pricing floor, best fit, and switching effort. Tap a row to jump to the full pick.
Modeled at the per-device or per-user working tier each vendor positions as the Kandji equivalent: Jamf Pro ($5.50/device/mo), Mosyle Business ($3.50/device/mo with free first 30 devices), Hexnode Pro ($1.80/device/mo), JumpCloud Device Management ($9/user/mo assuming one device per user). Annual contract pricing. Pricing verified 2026-05-11.
Jamf Pro is what Kandji has been trying to unseat for seven years and has not quite displaced. The 20-year Apple-canonical platform ships the deepest scripting, the largest IT admin community, Smart Groups that scale where Kandji's Blueprints duplicate, and over 150 reporting criteria where Kandji exposes roughly 14.
The trade: out-of-box UX is dated compared to Kandji's modern interface, the learning curve is steeper, and onboarding typically runs 60-120 days with Jamf services involvement. Reviewers consistently note Jamf is more powerful but less polished day to day, and dedicated Apple admin time is closer to a part-time role than a side responsibility.
The upside: for fleets that have outrun Blueprint duplication (one customer reported needing hundreds of Blueprints across 550 Mac users where they previously ran a dozen), Jamf Pro's Smart Groups plus extension attributes plus scripting hooks are the right tool. The Business Plan tier also bundles Threat Defense plus Connect plus Zero Trust Network Access for security-sensitive enterprises.
Strengths
+20-year Apple-canonical incumbent with the deepest scripting
+Smart Groups plus extension attributes scale beyond Kandji Blueprints
+Largest Apple IT admin community plus marketplace
+Business Plan bundles Threat Defense plus ZTNA
Trade-offs
−Dated UX vs Kandji's modern interface
−Steeper learning curve and longer onboarding
−Typically requires dedicated Apple admin time
Jamf Now
$2.50/device/mo (small biz)
Jamf Pro
$5.50/device/mo annual
Business Plan
$8.50/device/mo with Connect
Enterprise
Custom $15+/device/mo
Pricing verified
2026-05-11
Migration steps
Schedule a demo at jamf.com and scope the implementation with Jamf services (typically 60-120 days).
Audit your Kandji Library Items, Auto Apps, and Blueprints, then map each to Jamf policies plus scripts plus Smart Groups.
Configure Apple Business Manager handoff plus Jamf Pro server (cloud or on-prem).
Run parallel for one quarter so the IT team validates patching, enrollment, and reporting workflows.
Cut over and cancel the Kandji subscription once Jamf covers a full month of fleet operations end to end.
Not for: Pass on Jamf Pro if your fleet is under 100 devices and you want the cleanest out-of-box MDM UX; Kandji plus Mosyle fit those shapes better and Jamf's depth becomes overhead rather than upside at small scale.
Mosyle is the Apple MDM that competes on price without the usual quality drop-off. The free tier covers up to 30 devices forever and is genuinely production-grade, the Business tier undercuts Kandji's Device Management rate by roughly a tenth, and the Fuse tier bundles endpoint security plus IdP at less than Kandji Premium charges for the equivalent stack.
The trade: UI feel is less polished than Kandji's, the third-party integration ecosystem is smaller, and brand recognition trails Jamf and Kandji in tech enterprise procurement conversations. Mosyle is also stronger in education plus SMB than in 500+ employee tech companies where Jamf's community and Kandji's modern UX win.
The upside: for under-300-device Apple-only fleets shopping the cheapest credible MDM, Mosyle Business is the right answer and the only credible option below 50 devices that does not require a JumpCloud-style identity bundle. Apple Business Manager integration plus Munki patching plus Self Service all ship at the entry tier.
“Our Mac fleet has tripled in the last 2 years and guess how much more time I've spent managing Apple devices? None. Once you provision a new device, it's automatically added to a management group based on the user, and everything else is taken care of... It's an absolute god send, and is pretty cheap.”
Strengths
+Free tier for the first 30 devices, then the cheapest paid Apple MDM
+Apple Business Manager plus Munki patching at the entry tier
+Fuse bundles security plus IdP at less than Kandji Premium
+Strong fit for SMB plus education plus mid-market Apple-only
Trade-offs
−Less polished UI vs Kandji
−Smaller third-party integration ecosystem
−Weaker brand recognition in tech enterprise procurement
Free
$0 up to 30 devices
Business
$3.50/device/mo annual
Fuse
$5/device/mo with security + IdP
Premium Plus
$8/device/mo annual
Pricing verified
2026-05-11
Migration steps
Sign up at mosyle.com (free 30-device tier, no card required).
Configure Apple Business Manager handoff plus a Mosyle MDM server.
Re-create Kandji Library Items as Mosyle profiles plus scripts (the mapping is closer than Jamf's).
Re-enroll devices via Apple Business Manager into Mosyle.
Cancel the Kandji subscription once Mosyle covers a full month of fleet operations.
Not for: Mosyle falls short for enterprises needing the deepest Apple scripting community plus broad integration ecosystem; Jamf Pro plus Kandji Premium fit those shapes better at 500+ device scale.
Hexnode is the multi-OS UEM you reach for when your fleet is genuinely mixed and you do not want to run Kandji plus Microsoft Intune in parallel. The Pro tier covers Mac plus iOS plus iPadOS plus Windows plus Android plus ChromeOS at roughly half of Kandji's per-device rate, with kiosk mode plus scripting plus compliance plus reports included.
The trade: Apple-specific feature depth is weaker than Kandji's (no Auto Apps equivalent, less polished Library Items mapping), the Apple admin community is smaller, and the Mac UX feels engineered for cross-OS parity rather than Apple-first polish. Reviewers consistently rate Hexnode lower than Kandji or Jamf on Apple-specific feel but higher than either on multi-OS breadth at the price point.
The upside: for SMB plus mid-market with genuinely mixed fleets (engineers on Mac, sales on Windows, warehouse on Android, executives on iOS), Hexnode beats running Kandji plus Microsoft Intune side by side on combined cost plus operational simplicity. The Ultra tier adds advanced threat protection plus DEM for security-conscious shops.
Strengths
+Multi-OS UEM (Mac, Windows, iOS, Android, ChromeOS) in one platform
+Pro tier runs at roughly half the per-device rate of Apple-first MDMs
+Ultra adds advanced threat protection plus DEM
+Strong fit for mixed-OS SMB and mid-market fleets
Trade-offs
−Weaker Apple-specific feature depth (no Auto Apps)
−Smaller Apple admin community
−Less polished Mac UX vs Kandji or Jamf
Express
$1.08/device/mo
Pro
$1.80/device/mo with UEM
Ultra
$3.30/device/mo with threat protection
Ultimate
$4.20/device/mo with API + SSO
Pricing verified
2026-05-11
Migration steps
Sign up at hexnode.com (14-day trial across all tiers).
Configure multi-OS enrollment plus policies plus compliance rules.
Migrate Kandji configurations to Hexnode policies (manual mapping; the Apple-specific bits need re-creation).
Re-enroll Apple devices via Apple Business Manager and Windows devices via Azure AD.
Cancel Kandji plus any standalone Windows MDM once Hexnode covers the full multi-OS fleet.
Not for: Hexnode falls short for pure-Apple enterprises with deep Auto Apps plus Library Items dependencies; Kandji Premium plus Jamf Pro fit those shapes better when Apple-specific feature depth matters more than cross-OS breadth.
JumpCloud is the open directory platform that swallows the MDM line item rather than the other way around. The Platform tier bundles IdP plus SSO plus MDM plus RADIUS plus conditional access plus audit logs on one per-user contract, so an SMB or mid-market IT team paying separately for Kandji plus Okta can collapse both into a single vendor.
The trade: per-user pricing gets expensive when users have multiple devices (think MacBook plus iPhone plus iPad), Apple-specific MDM depth lags behind Kandji and Jamf, and the Mac admin community is smaller than at the Apple-first MDMs. The platform is also more directory-first than MDM-first, which is a feature for IT generalists and a bug for dedicated Apple admins.
The upside: for SMB plus mid-market IT teams whose Okta or Azure AD contract is up for renewal and whose Kandji subscription has been quietly compounding, JumpCloud Platform genuinely does replace both at a per-user rate that lands competitive when the average user has one or two devices. The free tier (10 users plus 10 devices) is also production-grade and rare in the directory plus MDM category.
“If you're looking for a solution that's completely under one roof, offers all the capabilities you need, and simply works great without any issues or outages, then I think JumpCloud is a fantastic product.”
Strengths
+Bundles open directory plus MDM plus SSO plus RADIUS on one contract
+Free tier covers 10 users plus 10 devices forever
+Replaces Kandji plus Okta together at SMB plus mid-market scale
+Strong fit for IT generalists consolidating vendors
Trade-offs
−Per-user pricing gets expensive at 2+ devices per user
−Weaker Apple-specific MDM depth vs Kandji or Jamf
−Smaller Mac admin community
Free
10 users + 10 devices
Device Management
$9/user/mo annual
Platform
$19/user/mo with IdP + SSO
Platform Prime
$24/user/mo with API + CSM
Pricing verified
2026-05-11
Migration steps
Sign up at jumpcloud.com (free 10-user tier, no card required).
Configure JumpCloud Open Directory plus MDM enrollment plus SSO applications.
Migrate the Okta directory to JumpCloud via SCIM provisioning (the directory move is the heavier lift).
Re-enroll Apple devices through Apple Business Manager into JumpCloud MDM.
Cancel Kandji and Okta once JumpCloud covers identity, SSO, and MDM end to end.
Not for: JumpCloud is suboptimal for 500+ device Apple-first fleets with deep scripting needs; Kandji Premium plus Jamf Pro fit those shapes better when Apple feature depth matters more than vendor consolidation.
Addigy is the Apple MDM that knows MSPs exist. The platform is multi-tenant from the ground up: one Addigy console manages 5-50+ separate client engagements with isolated tenants, per-client billing, per-client reporting, plus a live terminal and scripting layer purpose-built for IT consultants rather than in-house admins.
The trade: smaller customer base than Kandji or Jamf, weaker community, and the single-tenant UX (when an in-house IT team somehow lands here) feels engineered for MSP ops rather than internal IT work. Premier tier identity automation is also younger than Kandji's AD/Okta integration.
The upside: for managed service providers, fractional CIO consultants, and IT firms running Apple-fleet engagements for many small-business clients, Addigy's multi-tenant architecture beats Kandji plus a stack of one-tenant-per-client Kandji subscriptions on both cost and operational simplicity. Pro Mac at $5 per device covers Apple device mgmt plus automation plus patching plus remote scripts, which is the working tier most MSPs land on.
Strengths
+Multi-tenant architecture purpose-built for MSPs
+Live terminal plus scripts at the Pro Mac tier
+Identity automation on Premier
+Strong fit for MSPs and fractional IT consultants
Trade-offs
−Smaller customer base than Kandji or Jamf
−Weaker community plus integration ecosystem
−Less polished single-tenant UX for in-house IT
Free Trial
14 days
Pro Mac
$5/device/mo annual
Premier
$7/device/mo with identity automation
Strength
MSP multi-tenant Apple ops
Pricing verified
2026-05-11
Migration steps
Sign up at addigy.com (14-day trial across both tiers).
Configure multi-tenant client orgs plus per-client policies plus billing.
Migrate each Kandji client tenant to its Addigy tenant via Apple Business Manager re-enrollment.
Configure the live terminal plus scripts plus automation library across client tenants.
Cancel each Kandji subscription as the corresponding Addigy tenant covers a full month of operations.
Not for: Addigy is suboptimal for single-tenant in-house IT teams managing one fleet; Kandji plus Jamf Pro fit those shapes better and the multi-tenant scaffolding becomes overhead rather than upside.
Paid plans from $5.00/mo
When to stay with Kandji
Stay with Kandji (now Iru, rebranded October 2025) if your Auto Apps plus Library Items workflows have replaced manual scripting at scale, your Premium contract bundles EDR plus vulnerability mgmt your security team relies on, or your fleet is locked into the Apple-first roadmap that defined the original Kandji product. The picks below address Apple-canonical Jamf Pro, education-priced Mosyle, multi-OS Hexnode, directory-bundled JumpCloud, and MSP-friendly Addigy.
Endpoint management alternatives split along three vectors: workflow shape (Apple-first vs cross-OS vs identity-bundled), fleet scale (under 30 devices vs 30-500 vs 500+), and tenancy (single-tenant in-house vs multi-tenant MSP). The five picks address each combination once.
Pricing was pulled from each vendor's site or sales conversations on the review date (2026-05-11). We score on cost-at-volume for representative IT teams (50, 200, and 500 devices), Apple-specific feature depth, cross-OS breadth, identity bundling, and operational lift to migrate. We weight against tools whose advertised pricing excludes essential features (patching, identity, EDR) at the entry tier, and against tools whose Apple support depth has stagnated since the Kandji rebrand to Iru shifted competitive pressure cross-OS.
Update history2 updates
Initial published version with 5 picks.
Backfilled to Stage 2 schema with structured verdict, 4-paragraph intro, Quick Verdict, Feature Matrix (4 picks across 8 dimensions), Usage Cost Table (50/200/500 devices), per-pick author ratings, and 2 sourced testimonials (Mosyle/HOLDFAST, JumpCloud/Symplicity). Reframed positioning to acknowledge the Kandji → Iru rebrand (October 2025) and the platform's expansion into Windows plus Android. Pricing prose tightened to one anchor per paragraph.
Frequently asked questions about Kandji alternatives
Is Kandji still called Kandji or is it Iru now?
Kandji rebranded to Iru in October 2025 and expanded the platform beyond Apple-only into Windows plus Android under a unified Iru Context Model. Existing Kandji customers transition to Iru, and the pricing structure plus core Apple MDM workflows remain. Most procurement conversations still surface as Kandji-named in search, so this guide uses Kandji throughout while noting the rebrand where it matters.
When does Kandji's pricing become problematic?
Roughly when the platform's Apple-first polish stops being load-bearing for your fleet. An Apple-only growth-stage team on Device Management is paying mid-market per device monthly; the same fleet on Mosyle Business lands roughly a tenth cheaper, Hexnode Pro runs at less than half the rate when you accept reduced Apple depth, and Jamf Pro is moderately more expensive but ships the scripting plus community that scales beyond Blueprint duplication. Kandji pays back when the modern UX plus Auto Apps library plus Premium EDR matter to your security team; for under-50-device fleets or cross-OS fleets, alternatives are typically better cost-fit at the same scale.
Is there a free Kandji alternative?
Mosyle Free covers up to 30 Apple devices forever and is genuinely production-grade. JumpCloud Free covers 10 users plus 10 devices with directory plus MDM plus SSO plus MFA. Hexnode plus Addigy plus Jamf offer trial periods but no permanent free tier. For an under-30-device Apple fleet, Mosyle Free is the right starting point; for an under-10-user mixed fleet wanting bundled identity, JumpCloud Free fits better.
Which Apple MDM is the canonical industry standard?
Jamf Pro is the 20-year canonical Apple MDM with the deepest scripting, the largest IT admin community, and the broadest integration ecosystem. The Business Plan tier adds Threat Defense plus Connect plus Zero Trust Network Access for security-sensitive enterprises. Jamf is the right call once your fleet has outrun Blueprint duplication and you need Smart Groups plus extension attributes that scale; below 100 devices, Kandji's polish typically wins on operational fit.
What replaces Kandji for cross-OS fleets?
Hexnode Pro covers Mac plus iOS plus Windows plus Android plus ChromeOS at less than half of Kandji's per-device rate, the cheapest credible multi-OS UEM. For Microsoft 365 shops already paying for E3 or E5 bundles, Microsoft Intune ships with the license at no incremental cost. For SMB plus mid-market wanting identity bundled with MDM, JumpCloud Platform replaces Kandji plus Okta together at a per-user rate that lands competitive when the average user has one device.
Ready to switch?
Our top Kandji alternative: Jamf Pro
Jamf Pro is the 20-year Apple-canonical standard with the deepest scripting, the largest IT admin community, and the broadest integration ecosystem; the call when fleet growth has outrun Blueprint duplication and you need Smart Groups plus extension attributes.
The team behind subrupt.com. We track subscriptions, surface cheaper alternatives, and publish comparisons where the score formula is on the page so you can recompute it yourself. We do not claim 30,000 hours of testing. What we claim is live pricing from our database, a transparent composite score, and honest savings math against a category baseline.
Get notified of price drops for Kandji
We'll email you when Kandji or its alternatives lower their prices.
Track Kandji and find more savings
Add Kandji to your dashboard to monitor spending and discover even more alternatives.