Device management that
stays out of your way.
mngd is a modern Apple MDM platform built on Declarative Device Management. Less polling. Less noise. Devices do what you declare.
Start free with mngd Patch — no card required up to 25 devices.
Built for where Apple MDM is going,
not where it's been.
Declarative Device Management
DDM is Apple's replacement for the polling-based MDM protocol. mngd speaks DDM natively — declarations, not commands. Devices enforce their own configuration without waiting to be asked.
SCEP enrollment
Devices receive a signed identity certificate at enrollment via SCEP. mngd includes a built-in SCEP CA with a persistent cert/key so devices aren't orphaned by server restarts.
Apple Business Manager
Zero-touch deployment. Devices come out of the box enrolled, supervised, and configured — no imaging, no manual steps. ABM tokens are managed per-org.
MSP multi-tenancy
Manage multiple client orgs from a single MSP account. Consolidated billing, per-org feature flags, and a partner dashboard that gives you the full picture at a glance.
Smart groups & policies
Dynamic device groups built from live inventory data. Assign declarations and profiles to groups — mngd handles delivery, retry, and status tracking per device.
mngd Patch
Start with patch management before committing to full MDM. The mngd Patch agent becomes a full MDM agent — no re-enrollment, no migration, no rip and replace.
SCIM 2.0 provisioning
Sync users and groups from Okta, Azure AD, or any SCIM-compatible IdP. Users are provisioned and deprovisioned automatically. SSO enrollment supported.
FileVault & escrow
Enable FileVault via DDM declaration. Personal recovery keys are escrowed automatically at enrollment and rotated on schedule — no scripts required.
Automation engine
Event-driven automations triggered by device check-ins, CVE alerts, patch status, or custom webhooks. Route notifications to Slack, Teams, or any endpoint.
From box to enrolled in under two minutes.
ABM assignment
Device ships from Apple already assigned to your org in Apple Business Manager.
Zero-touch boot
Device boots, hits Apple's activation server, gets redirected to mngd enrollment.
SCEP cert
Device generates a key pair, mngd issues a signed identity certificate via SCEP.
DDM declarations
mngd pushes the device's full configuration as DDM declarations. Done.
Simple, honest pricing.
Start free with mngd Patch — up to 25 devices, no card. Full MDM at $8/device/month. MSP plans available.
Ready to enroll your first device?
Sign up and enroll your first device in minutes.