Stop Advanced Attacks with EDR

Defend against the latest threats with intelligent endpoint detection and response, purpose-built for Mac. Get maximum security with minimal agent overhead.

No credit card required
Free access to all features for 14 days
Free access to support

Setting the standard in Mac security

Kandji’s security research is the cutting edge of threat detection and prevention. 2024 highlights include:

17 novel vulnerabilities

Security researchers were the first to discover and report vulnerabilities affecting Sequoia, Sonoma, and Ventura.

5 novel malware variants

First to discover and protect against numerous threats and malware variants targeting Mac computers.

5 infosec conferences

Security researchers presented on their discoveries at cybersecurity conferences around the world.

Stop more threats

Leading protection against malware and emerging threats is driven by threat intelligence, machine learning, and a dedicated security research team for Mac.

Lower the cost of ownership

A single agent for EDR and MDM enables instant deployment, while automated threat response gives time back to IT teams.

Keep users productive

Built natively in Swift, the Kandji Agent uses Apple's Endpoint Security framework to consume minimal resources and deliver real-time protection.

Backed by dedicated security research.
Accelerated by AI.

Security researchers

Kandji security researchers analyze emerging threats, attacker trends, and endpoint event insights to build proprietary detection models that stop new attacks.

Machine learning

Machine learning models millions of detections and events. These models identify patterns of malicious or anomalous behavior and power detections to stay ahead of attackers.

Key functionality

Instant endpoint protection with automated response and effortless interactions.

File detections

AI-enhanced file analysis stops malware and unwanted programs. Backed by Kandji’s Security Research team and global threat feeds.

Behavioral detections

Real-time process monitoring detects sophisticated threats instantly, stopping advanced attacks before they spread.

Protect Mode

In Protect Mode, the Kandji Agent blocks or kills any malicious processes and quarantines files. Deep integrations with Apple’s Endpoint Security framework allow for real-time response.

Detect Mode

In Detect Mode, the Kandji Agent detects the event, creates a threat event, and generates an alert. It does not take action to quarantine files or block processes.

Set removable storage controls

Lock down external storage access on Mac with encryption and access permission controls for USB drives, DMGs, SD cards, and server volumes.

Release files from quarantine

Admins can release specific files from quarantine across all devices and add them to the allow list in one easy workflow.

Investigate threat events

See exactly what files or actions triggered the event, along with all critical details needed to investigate the threat and assess its impact.

Enforce allow / block lists

Allow or block files by hash or path. The Kandji Agent ignores allowed items and treats blocked items as malware.

Enforce allow and block lists screenshot

Fastest deployment

The fastest to deploy. The easiest to work in.

Unified platform deploys MDM and EDR via the Kandji Agent, eliminating deployment time and ongoing maintenance.

See What's New

Threat Intelligence
January 31, 2025
Banshee Rust Rewrite?
Infostealers targeting macOS are evolving rapidly, making continuous monitoring essential, which our team is always on the lookout for. Many infosteal
Keep reading
Threat Intelligence
January 16, 2025
Potential Stealer: Purrglar in Progress
Unlike traditional viruses or ransomware, stealers are designed with a singular purpose: to quietly infiltrate systems and exfiltrate sensitive data—o
Keep reading
Threat Intelligence
December 12, 2024
Uncovering Apple Vulnerabilities: diskarbitrationd and storagekitd Audit Part 2
Kandji's Threat Research team recently performed an audit on the macOSdiskarbitrationdandstoragekitdsystem daemons, uncovering several vulnerabilities
Keep reading