Compare
OhKube MDM vs. every major MDM
A feature-by-feature look at how OhKube MDM stacks up against the whole field, graded by the same bar we grade everyone else. Including the gaps we're still closing.
The field
iru
Apple-deep UEM with EDR, identity, and an AI copilot
Jamf
The Apple market leader with a native security suite
Microsoft Intune
Cross-platform UEM built around the Microsoft stack
Mosyle
Apple-only all-in-one bundle at one price
Addigy
Apple MDM built for MSPs, with live remote tools
JumpCloud
Open directory platform with MDM attached
Rippling
HRIS-native IT with physical device logistics
NinjaOne
RMM-first platform with an MDM module
Fleet
Open-source, osquery-based device management
✓Full, shipping capability◐Partial or in progress—Not offered?Unconfirmed from public sources
Platform support
OhKube MDM covers macOS, Windows, iOS/iPadOS, Android, and Linux today. The remaining Apple platforms are not yet supported.
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| macOS | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| iOS / iPadOS | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| tvOS | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ? | — | ? | ◐ |
| watchOS | ◐ | — | ✓ | — | ✓ | — | — | — | — | — |
| visionOS | — | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — |
| Windows | ✓ | ✓ | — | ✓ | — | — | ✓ | ✓ | ✓ | ✓ |
| Android | ✓ | ✓ | ◐ | ✓ | — | — | ✓ | — | ✓ | ✓ |
| Linux | ✓ | — | — | ◐ | — | — | ✓ | ? | ✓ | ✓ |
Enrollment
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| Automated Device Enrollment (ADE/DEP) | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Apple Business / School Manager | — | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Account-driven device enrollment | — | ? | ✓ | ✓ | ? | ✓ | ✓ | ? | ? | ✓ |
| Account-driven user enrollment (BYOD) | ◐ | ? | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ | ◐ | ✓ |
| PreStage enrollment | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Enrollment invitations (token/QR) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Setup Assistant customization | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ? | ? | ✓ |
| Windows Autopilot | — | ? | — | ✓ | — | — | ◐ | ✓ | ◐ | ✓ |
| Android Enterprise modes | — | ✓ | ◐ | ✓ | — | — | ✓ | — | ✓ | ✓ |
| MDM-to-MDM migration tool | — | ✓ | ? | ? | ✓ | ? | ? | ? | ? | ✓ |
Declarative Device Management (DDM)
OhKube MDM ships classic profile management today; DDM support is in development.
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| Declarations, configurations & activations | — | ✓ | ✓ | ◐ | ✓ | ✓ | ✓ | ✓ | ◐ | ✓ |
| Status channel & subscriptions | — | ✓ | ✓ | ? | ✓ | ✓ | ? | ? | ? | ✓ |
| DDM software update enforcement | — | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ? | ✓ |
| Predicate / conditional activations | — | ✓ | ✓ | ? | ? | ✓ | ? | ? | ? | ? |
Device commands & actions
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| Lock / erase / restart / shut down | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ |
| Clear passcode | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ? | ✓ | ? |
| Lost Mode (sound & locate) | ✓ | ✓ | ◐ | ✓ | ◐ | ◐ | ? | — | ✓ | ? |
| Device info & inventory queries | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Install / remove profile | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Install / remove application | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| FileVault key rotation & recovery lock | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ |
| Local admin management & rotation | — | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ◐ |
| Live / instant command execution | — | ? | ? | ? | ? | ✓ | ? | ? | ? | ✓ |
| Command queue + history | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Configuration profiles & payloads
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| Core payloads (Wi-Fi/VPN/Email/Restrictions) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ | ✓ |
| ~20 payload types | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ | ◐ | ◐ | ✓ |
| Full ~72 payload set | — | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | ◐ |
| Custom / signed .mobileconfig | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ | ✓ |
| PPPC / TCC management | — | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ? | — | ◐ |
| Profile builder UI | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ | ◐ |
App & content management
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| VPP / Apps & Books | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ | ◐ |
| Auto-patched app catalog | — | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ | ◐ | ✓ | ✓ |
| In-house / enterprise apps | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Managed app config | — | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ? | ◐ | ◐ |
| Books / eBooks | ✓ | ? | ✓ | ? | ✓ | ? | — | — | — | — |
| Custom package / script store | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Scripts (Bash/Python/PowerShell) | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Patch & OS update management
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| OS update enforcement (deadlines) | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Third-party app patching | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ | ✓ | ✓ |
| Patch policies / rings / deferral | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ✓ | ✓ |
| Patch compliance reporting | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| External patch / CVE feed | — | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ✓ | ✓ |
Security, compliance & threat
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| FileVault management + key escrow | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Activation Lock + bypass | ◐ | ✓ | ✓ | ✓ | ◐ | ✓ | ? | ? | ✓ | ? |
| Compliance policy engine | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ◐ | ✓ |
| CIS / NIST benchmarks built in | — | ✓ | ✓ | ✓ | ✓ | ✓ | ? | — | — | ✓ |
| Native EDR / NGAV | — | ✓ | ✓ | ✓ | ✓ | ◐ | — | ◐ | — | ◐ |
| Vulnerability / CVE management | — | ✓ | ✓ | ✓ | ◐ | ✓ | ◐ | ? | ✓ | ✓ |
| Conditional access / Zero Trust | — | ✓ | ◐ | ✓ | ◐ | ✓ | ✓ | ✓ | — | ◐ |
| ZTNA (network access) | — | ? | ✓ | ✓ | — | ✓ | ◐ | ✓ | — | — |
| GRC / audit-evidence automation | — | ✓ | ◐ | ◐ | ✓ | ✓ | ✓ | ◐ | — | ✓ |
Content & web filtering
OhKube leads hereWhere OhKube MDM leads. Granular per-device and per-group URL, keyword, and category rules with reporting; most of the market stops at DNS or browser-policy filtering.
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| Web / DNS content filtering | ✓ | ? | ✓ | ◐ | ✓ | ◐ | — | — | — | — |
| Per-device / per-group URL rules | ✓ | ? | ◐ | — | ◐ | — | — | — | — | — |
| Category-based filtering | ✓ | ? | ✓ | ◐ | ✓ | ? | — | — | — | — |
| Blocked-content reporting | ✓ | ? | ✓ | ◐ | ✓ | ? | — | — | — | — |
Identity, SSO & directory
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| SSO integrations (Entra/Okta/Google) | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Platform SSO (macOS) | — | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ◐ | ? |
| Managed Apple Accounts / ABM federation | — | ? | ✓ | ✓ | ✓ | ✓ | ✓ | ? | ? | ? |
| Built-in IdP / directory | — | ✓ | ◐ | ✓ | ◐ | ◐ | ✓ | ✓ | — | — |
| SCIM provisioning | — | ✓ | ? | ✓ | ? | ✓ | ✓ | ✓ | ✓ | ✓ |
| Cloud LDAP / RADIUS | — | — | — | — | — | — | ✓ | ✓ | — | — |
| HRIS-driven lifecycle | — | ✓ | — | ◐ | — | — | ✓ | ✓ | — | — |
Automation, RMM & remote support
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| Smart groups + criteria engine | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Automation / policy actions | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Scheduled / triggered automation | ◐ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Remote control / screen share | — | ? | ✓ | ✓ | ✓ | ✓ | ✓ | — | ✓ | — |
| Live terminal / remote shell | — | ? | ◐ | ◐ | ? | ✓ | ✓ | ◐ | ✓ | ✓ |
| RMM monitoring / alerting | — | — | — | — | — | ✓ | ◐ | ✓ | ✓ | ◐ |
| osquery / live SQL queries | — | — | — | ◐ | — | — | ✓ | — | — | ✓ |
Reporting, multi-tenancy & developer platform
| Capability | OhKube MDM | iru | Jamf | Intune | Mosyle | Addigy | JumpCloud | Rippling | NinjaOne | Fleet |
|---|---|---|---|---|---|---|---|---|---|---|
| Inventory, reporting & dashboards | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Audit log | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Self-service portal | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| RBAC | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Multi-tenant (per-tenant isolation) | ✓ | ◐ | ◐ | ◐ | ◐ | ✓ | ◐ | ◐ | ✓ | ◐ |
| REST API | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Scoped API keys | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Webhooks | — | ✓ | ✓ | ◐ | ✓ | ✓ | ? | ✓ | ✓ | ✓ |
| Config-as-Code / GitOps | — | ✓ | ◐ | ◐ | — | — | ◐ | — | — | ✓ |
| AI assistant / copilot | — | ✓ | ✓ | ✓ | ✓ | ◐ | ✓ | — | ◐ | ◐ |
| MCP server (LLM agent access) | — | ✓ | — | — | — | — | — | — | — | — |
| Education (Shared iPad / Classroom) | — | — | ✓ | ◐ | ✓ | — | — | — | — | — |
| Device logistics (buy/ship/store) | — | — | — | — | — | — | — | ✓ | — | — |
| Content caching server | — | ? | ✓ | ? | ✓ | ? | — | — | — | — |
Where OhKube MDM stands out
🎯
Per-device & per-group content filtering
Granular URL, keyword, and category rules per device or group, with blocked-content reporting. Most rivals stop at DNS-level or browser-policy filtering.
🏢
True multi-tenant isolation
Every tenant gets its own isolated database, not a shared table with a tenant column. MSP-grade separation that most of the field can't match.
🧩
Core MDM breadth at parity
Profiles, smart groups, compliance, automation, enrollment, commands, patch reporting, RBAC, and self-service are all present and shipping.
Competitor capabilities compiled from each vendor's public websites, documentation, and comparison pages, July 2026. Marks reflect public claims, not endorsements; a "?" means we couldn't confirm it from public sources. Spot something out of date? Tell us and we'll fix it.
See the filtering difference live
Bring one device to a 30-minute demo and we'll set up per-device content rules you can watch take effect in real time.
Book a demo