AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 40/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 1 known CVE (vendor-level match — see the CVE list below) and is tracked as ~51 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
Kandji, founded in 2018, is a large (250+ employee) platform for centrally securing and managing Mac, iPhone, iPad, and Apple TV devices.
Known CVEs (1)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
An issue in Iru, Inc Kandji Agent before v.4.7.5(5374) allows a local attacker to escalate privileges via a client validation gap to invoke restricted agent functionality.
What it does
Kandji is an Apple device management and security platform for Mac, iPad, Apple TV, and iPhone. It enables enrollment, app deployment, security controls, zero-touch deployment, and automated OS updates. The vendor has rebranded as Iru and extended the platform to Windows and Android devices, endpoint detection and response, and vulnerability management.
Strengths
Enrolls any device in seconds from a single portal
Keeps hundreds of apps patched on Mac and Windows
Enforces critical security settings via native management frameworks
Brings Mac computers to CIS Level 1 or Level 2 security benchmarks with one-click templates
Prevents the use of unapproved or unsafe apps across endpoints
Manages Mac and Windows devices with a low-overhead agent that installs at enrollment and updates itself automatically
News about Kandji (6)Where this comes fromItems from Kandji's own public feeds — changelog, blog, GitHub releases or status page — that name Kandji in the headline or summary. News from Kandji that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
