Kandji Overview

Learn about Kandji and its capabilities.


You’ve chosen Apple, and we’ve designed a device management experience to match. Kandji is an MDM worthy of your Apple devices. 

Drawing on decades of experience in Apple IT, we saw a dire need for a device management platform that could accommodate growing businesses and increasing regulatory demands. Existing solutions were either overly simplistic or mind-numbingly complex, and didn’t meet the needs of today's organizations. We knew there had to be a better way — so we built Kandji.

Setup, visibility, and the largest library of pre-built controls — Kandji makes device management beautifully simple and insanely powerful — just the way it should be. For more information, see our articles on device requirements and accessing Kandji support.

How it works

There are two primary components to Kandji: the Kandji Web App and Kandji’s proprietary macOS Agent. The Web App is used to configure, review, and report settings on enrolled devices. The Kandji Agent enforces settings, remediates discrepancies, and reports data back to the Web App.

Both components also have many other capabilities.

Web App

  • Specify and configure parameter variables.
  • Generate Blueprints and Kandji installers that allow specific Parameters to deploy to Mac devices.
  • Review automatically generated alerts when action is required.
  • View details about all enrolled devices.
  • Switch devices from one Blueprint to another. 

Desktop Agent

  • Checks-in with Kandji servers on a regular basis. 
  • Verifies Parameters.
  • Remediates any Parameters which do not match the Blueprint configuration.
  • Reports enrollments, check-ins, and remediations to the Kandji Web App. 
  • Runs the last Blueprint configuration received if the Mac is offline. 

Key Kandji Components


Individual settings deployed via Kandji to any enrolled Mac are known as Parameters. Some Parameters are as simple as "Disable Screen Sharing." More complex parameters may require specified variables, such as disabling specific system preference panes. 

Some parameters are only available for certain devices, hardware, or OS versions. 


A collection of Parameters that can be deployed to Mac devices, Blueprints are flexible and open to be used how it would best fit your company.

You can use Blueprints to specify different parameters for your organization's departments. (Designers, Finance, etc..) 

You can also create a Blueprint that adheres to certain compliance standards. (CIS, HIPAA, etc...)

Having a "Testing" blueprint is a great way to verify your configuration works before deployment.


Certain Parameters will trigger alerts to keep you informed of actions that are required. For example, you can receive an alert if a Mac does not have FileVault enabled.


View the entire history of your fleet or a single Mac using the Activity page. Kandji keeps detailed records of every time Mac devices enrollment, check-in, and remediation making auditing painless. 


Ready to get started? Click here to request a demo.