Vendor Spotlight: Kandji

Kandji, Inc. is a US company that provides Apple device management and security solutions. From its early days, Kandji has focused on both innovation and customer-centric development, making it a significant player in the enterprise IT and security space, especially for businesses heavily reliant on Apple devices. The company quickly gained attention and financial backing, which enabled its rapid growth and expansion.

The Kandji platform will manage and secure Apple devices like Macs, iPhones, and iPads. Through automation and integration with enterprise security systems, Kandji aims to streamline device onboarding, management, and security for IT and InfoSec teams, allowing organizations to maintain compliance and protect against cyber threats.

Kandji, Inc. Founding and Background

Kandji, Inc. was founded in 2018 by Adam Pettit and a group of co-founders, including Mark Daughters, who currently serves as the Senior Vice President of Workplace. The company’s creation was driven by a clear demand for better Apple device management solutions in the enterprise space.

At the time of its founding, many organizations were rapidly adopting Apple devices but lacked a seamless, comprehensive tool to manage their fleets of devices securely and efficiently. The San Francisco-based business was built specifically to address these challenges. The founders aimed to automate much of the manual work involved in managing Apple devices, focusing on security, compliance, and ease of use.

The company’s Device Harmony platform allows IT administrators to manage Apple devices at scale by automating tasks like software updates, security compliance, and device configurations. This helps companies ensure that their Apple ecosystems remain secure without the need for excessive manual intervention.

Timeline and Evolution

Kandji has rapidly grown since its inception. The company has raised a total of $284.4 million in five funding rounds. The last of these valued the business at $850 million, positioning it as a key player in the Apple device management market.

• 2018: Kandji was founded by Adam Pettit, Mark Daughters, and their team in San Francisco, California. The company was established to address the growing demand for automated and secure Apple device management solutions in enterprises.
• March 2019: Seed funding raised from First Round Capital and Webb Investment Network. The total money invested was $3.4 million.
• October 2019: The launch of the Device Harmony platform, providing businesses with automated Apple device management, covering configurations, compliance, and security for Macs, iPads, and iPhones.
• 2020: Kandji started to gain traction with enterprise customers, as more companies turned to Apple products, especially during the COVID-19 pandemic when remote work significantly increased the demand for secure device management.
• October 2020: Series A funding, raising $21 million in Series A funding led by venture capital firm Greycroft, with additional investments from Okta Ventures and B Capital Group.
• April 2021: Series B funding, raising $60 million in Series B funding to accelerate product development and expand globally. The round was led by Felicis Ventures, and involved First Round Capital, SVB Capital, Greycroft, B Capital Group, Okta Ventures, and the Spruce House Partnership.
• November 2021: Series C funding led by Tiger Global and including Definition, Frontline Ventures, First Round Capital, Greycroft, Felicis Ventures, The Spruce House Partnership, B Capital Group, SVB Capital, and Okta Ventures. Raises $100 million.
• 2021: Kandji added new security features, such as Endpoint Detection and Response (EDR), enhancing its appeal to IT and InfoSec teams.
• 2022: Kandji introduced a wider array of features designed to bridge the gap between IT management and cybersecurity. The company positioned its Device Harmony platform as a unified solution for enterprise security and device management.
• 2023: The business continued to innovate, expanding its global customer base and improving its automation tools for Apple device management.
• July 2024: The company raised an additional $100 million from General Catalyst in Series D funding, bringing its valuation to $850 million. This funding was aimed at enhancing its product capabilities and expanding the team further to meet global demand.

Kandji’s journey reflects rapid growth, driven by its focus on the growing enterprise demand for secure and efficient Apple device management solutions.

The company’s focus on innovation, especially in automation, has helped it attract a large customer base, with some customers managing hundreds of Apple devices using their platform.

Company Ownership

After its five funding rounds, Kandji, Inc. has many institutional investors. These are:

• Tiger Global
• Definition of Capital Management
• Frontline Ventures
• First Round Capital
• Greycroft Partners
• Felicis Ventures
• The Spruce House Partnership
• B Capital Group
• SVB Capital
• Okta Venture
• General Catalyst
• Webb Investment Network

As Kandji, Inc. is a private corporation, it does not need to publish its shareholder register. Therefore, it is impossible to know the exact percentages of ownership that each of these funds have. It is also not possible to know whether there are any private shareholders in addition to these funds. However, it can be assumed that Adam Pettit, the CEO and founder of the company, has a considerable holding.

Key People

The creation strategy of Kandji, Inc, limited its new CEO to only four executives. The team that currently leads the company includes:

• Adam Pettit, Chief Executive Officer: Pettit founded Kandji in 2018, having just sold his previous venture, which he started up in 2009. That business was interlaced.io, a managed service provider. Before that, Pettit spent four years operating his own technology consultancy firm.
• Wesley Pettit, Chief Product Officer: Wesley is the brother of Adam Pettit and he partnered in the creation and management of Interlaced.io, moving to the Kandji product when Interlaced.io sold.
• Mark Daughters, Senior Vice President of Workplace: Daughters worked at Apple for four years from 2004 to 2009 and then joined the Pettit brothers to found and manage Interlaced.io. As an investor in that business, Daughters made money from the sale and joined in on the creation of Kanji.
• Danny Zorotovich, Chief Financial Officer: Zorotovitch joined Kandji in 2020 and became CFO in 2021. Before joining Kandji, he was the CFO at Sprinklr, an AI-based customer experience management platform.
• Sylvia McCutcheon, Chief Marketing Officer: Sylvia was employee number 4 at Kandji when she was hired in July 2019. Now known as Sylvia LePoidevin, she has had the title of Chief Marketing Officer since December 2021. Before joining Kandji, Sylvia was the Senior Product Marketing Manager at DataFox, which was acquired by Oracle.
• Stephen Ritter, Chief Technology Officer: Ritter joined the company in 2023. He left his position of CTO at Mitek System, an identity verification provider, to join the company. Ritter spent 7 years at Mitek and has a total of 33 years working as a technical expert and leader of development teams.

Locations

Kandji’s headquarters is located in San Francisco, California. This office building is also the location of the Kandji development team. The company has a sales office in Miami and an administration center in San Diego.

As part of its announcement about its Series C funding round in November 2021, the company explained that part of the funds would be used to open a sales office in London, UK, and a data center in Frankfurt, Germany. In February 2022, Kandji set up a UK company to manage its office, however, to date, there has been no announcement of either location commencing operations.

Although it primarily operates out of the U.S., the company serves customers worldwide, leveraging remote work infrastructure and 24/7 global support to cater to international clients.

Kandji has positioned itself as a leading solution for Apple device management, particularly for enterprises with significant numbers of remote or hybrid workers relying on Apple devices

Target Market and Customer Base

Kandji’s target market includes large enterprises, SMBs, educational institutions, and organizations with distributed workforces. The platform’s Apple-specific focus, automated security, and compliance features resonate with IT teams in these markets. It has a strong customer base of companies that rely heavily on Apple devices and need seamless, automated, and scalable device management solutions.

Target Market

1. Enterprises & Mid-Sized Companies: Kandji is designed for organizations that heavily rely on Apple devices across multiple locations or departments. Kandji offers automation tools that help IT teams manage large fleets of Apple devices, streamline security compliance, and automate workflows. This makes it highly appealing to enterprises and mid-sized companies with over 500 employees.
2. Small-to-Medium Businesses (SMBs): Kandji also markets itself to SMBs that are growing in size but may lack a large IT department. SMBs appreciate the simplicity and efficiency of Kandji’s platform, which allows them to manage their Apple devices with fewer resources. Simple setup with automated workflows, pre-built security controls, compliance templates, and low IT overhead thanks to automation appeal to this market sector.
3. Education Institutions: Schools, universities, and other educational institutions using Apple devices for students and staff. Kandji allows easy configuration of iPads and MacBooks, making it ideal for deploying devices to many students and educators. Educational institutions are often looking for scalable, low-maintenance MDM solutions, and Kandji delivers that by simplifying device deployment and management.

Customer Base

1. Apple-Heavy Organizations: Kandji primarily attracts companies that have standardized on Apple hardware for its perceived security, usability, and brand alignment with innovation. Tech startups, marketing agencies, and design firms are particularly noted for their attraction to Macs and Apple mobile devices.
2.  IT and Security Teams: Kandji markets itself as a solution that automates time-consuming tasks for IT and security teams, reducing manual interventions and allowing them to manage fleets of Apple devices without overwhelming resources. It is particularly appealing for cybersecurity, compliance, and device lifecycle management.
3. Compliance-Driven Organizations: Companies in industries with strict regulatory requirements (e.g., finance, healthcare) that need tools to manage device security and comply with standards like SOC 2 or CIS Benchmarks are drawn to this platform. Kandji provides built-in templates to ensure companies meet these requirements, offering peace of mind and reduced risk.
4. Remote & Distributed Workforces: Many organizations adopted remote work policies, and Kandji became highly valuable in managing and securing devices that are outside the traditional office environment. The platform enables IT teams to deploy and manage Apple devices remotely, ensuring they remain secure and up-to-date without requiring on-site intervention.

Kandji Product Suite

Kandji provides a comprehensive Apple Device Management (MDM) platform that is purpose-built for IT teams managing fleets of Apple devices. Its suite of products and features is designed to automate and simplify the management of macOS, iOS, iPadOS, and tvOS devices while ensuring security and compliance. Here’s an in-depth review of the key components of Kandji’s product suite:

1. Device Management

• Zero-Touch Deployment: Integrates with Apple Business Manager (ABM) and Apple School Manager (ASM).
• Configuration Profiles: IT admins can push configuration profiles to devices for settings like Wi-Fi, VPN, email, etc.
• App Deployment: Allows admins to install and manage both App Store and custom applications across all managed devices.
• Patch Management: Kandji’s platform automatically keeps software and apps up-to-date.

2. Security & Compliance

• Kandji Liftoff: Configures Mac devices the first time they boot up, automatically installing apps, enforcing security settings, and implementing configurations.
• Automated Compliance Enforcement: Automatically corrects device contents and settings when a device falls out of compliance.
• Pre-Built Security Controls: More than 150 pre-built security and compliance controls to meet CIS (Center for Internet Security) benchmarks or other specific organizational standards, such as SOC 2, HIPAA, or GDPR.
• FileVault & Encryption Management: Across all macOS devices, ensuring data security in case of theft or loss.
• Incident Reporting & Device Monitoring: Monitor device health and security statuses in real-time, with automated incident reporting when devices fall out of compliance or require attention.

3. User Experience and End-User Tools

• Self-Service App Portal: A customized Self-Service portal that contains pre-approved apps, resources, and company tools.
• Custom Branding: The Self-Service portal is white labeled.
• Kandji Liftoff for End-User Setup: Apps and settings are installed in the background while the device is in use.

4. Integrations

• Integrations with IT Systems: Integrates with identity management platforms and ticketing systems.
• API Support: Allows businesses to integrate Kandji with other enterprise tools or automate specific processes.

5. Reporting and Analytics

• Comprehensive Dashboards: Provide a snapshot of device health, compliance status, and security alerts in real-time.
• Customizable Reports: Generate reports on device status, compliance levels, security alerts, and more.

Kandji provides a powerful Apple device management solution tailored for IT teams responsible for deploying, managing, and securing fleets of Apple devices (macOS, iOS, iPadOS, and tvOS). It focuses on automating and simplifying the lifecycle management of devices, from deployment to security enforcement and updates.

Key Features: 

• Remote Deployment: Devices are ready to use out of the box, with pre-configured apps, security settings, and user profiles.
• Blueprints for Device Configuration: Ensures consistency in device setup across different groups while allowing customization based on specific needs.
• App Management: Simplifies app management, reducing the need for manual installs or user intervention.
• Automated Patch Management: Automatically monitors and updates software, both for macOS and third-party applications.
• Automated Remediation: Guarantees that devices remain compliant and operational, even when users are remote or IT resources are limited.
• Smart Groups: Allow devices to be automatically grouped based on criteria such as macOS version, installed apps, or security status. Admins can then apply configurations or updates based on these groups.

Kandji integrates with Apple Business Manager (ABM) and Apple School Manager (ASM) for zero-touch deployment, allowing IT teams to configure devices remotely before they even reach the end user.

Kandji Device Management excels at looking after desktops, laptops, tablets, and phones from Apple. The features of the platform include zero-touch deployment, automated patch management, and security compliance. Automation reduces manual IT workloads. It is particularly well-suited for organizations with a strong Apple presence, those operating in regulated industries, and companies with remote or distributed teams.

Other Notable Products

1. Endpoint Detection and Response

Kandji’s Endpoint Detection and Response (EDR) is a relatively new but essential feature. It enhances the security of Apple devices by providing real-time monitoring, threat detection, and automated remediation. EDR continuously monitors endpoints for malicious activity, allowing IT teams to identify and respond to security threats such as malware, ransomware, and suspicious user behavior. The tool quickly isolates compromised devices, mitigating threats without requiring extensive manual intervention.

A key advantage of Kandji’s EDR is its integration with the broader Kandji platform, enabling seamless security enforcement across all managed Apple devices. This integration ensures that not only are devices compliant with security policies but any detected threats are swiftly dealt with in line with those policies. As a relatively new feature, Kandji’s EDR may still be evolving, meaning organizations might find it lacking compared to more mature EDR solutions in terms of advanced threat intelligence and granular customization.

2. Kandji’s Device Harmony

Kandji’s Device Harmony integrates device management, security, and compliance into a unified platform. It manages Apple devices while ensuring that they remain secure and compliant with industry standards. Device Harmony centralizes important functions like app deployment, automated patch management, and security policy enforcement while delivering a user-friendly experience. IT administrators can oversee and manage large fleets of Apple devices with consistent policies, real-time updates, and automated remediation.

One of the key strengths of Device Harmony is its alignment of security and compliance with device management. By tightly integrating security monitoring, compliance enforcement, and device configuration, Kandji ensures that devices remain secure and up-to-date without the need for constant manual intervention. Automated workflows, such as compliance checks and security patches, happen in the background, minimizing disruption for users and reducing the workload for IT teams.

Major competitors

Kandji faces competition from several major players in the Apple device management and broader mobile device management (MDM) space. Some competitors offer similar solutions for managing Apple devices but often cater to a wider range of platforms, such as Windows, Android, and Linux.

The major competitors to Kandji include:

1. Jamf

Jamf is the leading Apple device management platform and is Kandji’s biggest competitor. It offers a comprehensive suite of tools for managing macOS, iOS, iPadOS, and tvOS devices, with a strong focus on security, app management, and automated deployment.

• Strengths: Deep integration with the Apple ecosystem, advanced features for large-scale deployments, and success in both the education and enterprise sectors.
• Key Difference: Jamf has a more established market presence and a wider array of integrations, though Kandji offers more streamlined automation and easier setup for less technical IT teams.

2. Mosyle

Mosyle is another Apple-only MDM solution that focuses on automating Apple device management. It is popular for its affordability and ease of use, particularly for schools and SMBs.

• Strengths: Cost-effective, with free plans available for education. A simple user interface and easy to deploy.
• Key Difference: Mosyle’s pricing structure is more attractive to small organizations and schools, while Kandji focuses more on enterprises needing advanced compliance and security features.

3. Omnissa Workspace ONE (AirWatch)

Omnissa Workspace ONE is a broader unified endpoint management (UEM) platform that supports multiple operating systems, including macOS, Windows, Android, and iOS. It is part of Omnissa’s larger enterprise suite.

• Strengths: Cross-platform support for mixed device environments. Integration with VMware’s extensive security and cloud services.
• Key Difference: Omnissa is ideal for companies managing diverse device ecosystems, while Kandji is more focused on providing a seamless, Apple-specific solution with automated workflows.

4. Microsoft Intune

Microsoft Intune is a cloud-based MDM and endpoint management solution that integrates with Microsoft 365 and Azure services. While it supports Apple devices, its strength lies in managing Windows and Microsoft environments.

• Strengths: Strong integration with Microsoft 365, Azure AD, and other enterprise Microsoft tools. Cross-platform device management.
• Key Difference: Intune is a broader enterprise tool focused on Microsoft ecosystems, making it less Apple-specific compared to Kandji. Organizations already heavily invested in Microsoft may prefer Intune for its full integration.

5. ManageEngine Mobile Device Manager Plus

ManageEngine’s Mobile Device Manager Plus is a cross-platform MDM tool designed to manage both corporate-owned and BYOD devices. It offers support for macOS, iOS, Android, and Windows devices.

• Strengths: Cross-platform compatibility. Affordable for small and mid-sized businesses.
• Key Difference: While ManageEngine supports Apple devices, it lacks Kandji’s focus on automated compliance and specialized Apple features, making Kandji a better fit for Apple-centric enterprises.

6. Addigy

Addigy is another Apple-focused device management platform that supports both macOS and iOS devices. It’s known for its multi-tenant capabilities, which make it popular with managed service providers (MSPs).

• Strengths: Multi-tenant management for MSPs. Good balance between ease of use and powerful management features.
• Key Difference: While Addigy is an Apple-focused solution like Kandji, it is particularly attractive to MSPs needing multi-client support, while Kandji is more focused on in-house enterprise IT teams.

7. Hexnode

Hexnode is a cross-platform UEM solution offering support for Apple devices along with Windows, Android, and Linux. It is popular among SMBs and enterprises for its flexibility and affordability.

• Strengths: Wide device compatibility and multi-OS support. Competitive pricing with strong features for small businesses.
• Key Difference: Hexnode supports a wider variety of devices, while Kandji’s strength lies in its exclusive focus on the Apple ecosystem and its automation features for Apple device management.

Market Analysis

Kandji is tailored for organizations that rely heavily on Apple devices and require advanced automation, compliance, and security features with minimal manual intervention.

Some competitors, such as Jamf, VMware Workspace ONE, and Microsoft Intune, offer broader platform support, making them more attractive to companies with diverse device fleets. Others, like Mosyle and Addigy, provide more cost-effective or specialized Apple management features but may lack Kandji’s depth in automation and compliance.

Conclusion

Kandji’s automated compliance and user-friendly interface make it a strong contender. However, for mixed-device ecosystems or businesses deeply embedded in other platforms, solutions like Jamf or VMware Workspace ONE might offer more flexibility. Kandji’s premium pricing and Apple-exclusive focus may not fit all organizations. Businesses that rely heavily on Apple devices get an excellent balance of automation, security, and ease of use, making it a highly valuable tool for streamlining device management.

Kandji focuses on corporate-owned devices, and its support for managing BYOD is not as satisfactory as other MDMs. However, the platform’s ability to automate tasks like updates and security checks ensures that it can handle large corporate-owned fleets without overwhelming IT resources.