mngd Patch
Free up to 25 devices — no card required

Keep every Mac patched.
Without the MDM cost.

mngd Patch runs a lightweight agent on each Mac, tracks every third-party app and the OS, and remediates what's out of date. Start here — add full MDM when you need it.

Get started See pricing

1–25 devices free, forever. No trial clock. No credit card.


3,000+
Apps covered
macOS
OS update tracking
CVE
Priority scoring
MSP
Multi-tenant ready

what it does

Apps you already have installed are the attack surface.

The agent inventories every app on every Mac and scores each one against known CVEs. Out-of-date apps get patched silently — no user interaction required when the app isn't running.

3,000+ apps covered CVE scoring via OSV.dev Silent install when app is closed

macOS updates without the MDM fight.

Tracks available and installed macOS versions across your fleet. Nudge users to update, defer updates by policy, or enforce a deadline. No MDM enrollment required.

SOFA-backed version tracking Nudge, defer, or enforce by policy Works on non-enrolled Macs

One agent, same dashboard as mngd.

When you outgrow Patch — enrollment, profiles, Santa, SCIM — flip a flag. No rip and replace, no re-enrollment, no migration. Your fleet stays in place.

Same agent binary Same fleet inventory One-flag upgrade to full MDM

How it works.

A lightweight agent runs on each Mac. It phones home on a schedule, gets its instructions, and does its job quietly. You watch a dashboard. Your users don't notice.

01

Install the agent

One pkg, deployed however you already deploy software — Munki, Jamf, manual, MDM, whatever. The agent enrolls itself and appears in your dashboard within seconds.

02

Agent inventories the Mac

On first run and on a schedule, the agent reports every installed app, its version, and the current macOS version. CVE scores are applied server-side.

03

You set policy, we remediate

Define patch windows, deferral rules, and notification preferences. The agent checks in and acts — silently patching closed apps, nudging users for open ones.

04

Slack and email alerts

Get notified when a high-severity CVE lands in your fleet, when a patch fails, or when a Mac falls behind your compliance threshold.


What mngd Patch doesn't include — intentionally.

Patch is the entry point. It doesn't try to be everything. These capabilities live in mngd.

MDM profile deployment ADE / DEP enrollment Apple Business Manager VPP app distribution Santa allow/deny listing DDM declarations mSCP compliance baselines SCEP certificates Bootstrap Token escrow
Compare Patch vs mngd →

pricing

Free
$0
1–25 devices, forever

Full access to every Patch feature. No credit card, no expiry. Real work, not a teaser.

App patching, all features
macOS update tracking
CVE scoring
Slack + email alerts
Up to 25 devices
Get started
Usage
$0.99/device/mo
101+ devices · annual billing

Per-device for larger fleets. Annual default, monthly at +20%. No setup fees.

Everything in Flat
Unlimited devices
MSP multi-tenant dashboard
Volume discounts available
Get started

Managing multiple customers? See MSP pricing →


Ready for full MDM?

When you need device enrollment, configuration profiles, Apple Business Manager, Santa, or mSCP compliance — upgrade to mngd. Same agent, same fleet. One flag flipped.

Compare plans Start with Patch

Start patching today.
It's free.

Up to 25 devices, every feature, no card required.

Create your account Read the docs