Own your Mac fleet — every device, every byte.
Deploy software, enforce compliance, and support every Mac in your organisation from one console you host yourself. No per-seat pricing. No data leaving your infrastructure.
- $0
- per-seat fees
- 100%
- your data, your servers
- FSL-1.1
- self-hosted edition
THE PLATFORM
Everything modern Mac management needs.
Four pillars — deploy, monitor, support, and scale — in one self-hosted console.
DEPLOY
Zero-touch software delivery.
Package once, deploy everywhere. Munki-backed installs and policy-driven catalogs put the right software on the right Macs — automatically.
- Smart groups auto-assign by criteria
- Per-department & per-device manifests
- Signed, notarized PKG pipeline
MONITOR
See your whole fleet at a glance.
Real-time check-ins, live compliance posture, and OS inventory across every device — no spreadsheets, no guessing.
- Live compliance scoring
- macOS version distribution
- Append-only audit trail
SUPPORT
Help users from anywhere.
Start a remote session, push a fix, or recover a device straight from the console — RustDesk with a native VNC fallback, built in.
- One-click remote control
- Device actions & trust-token recovery
- Self-service software catalog
SCALE
Multi-tenant from day one.
Run isolated tenants per org, region, or business unit — strict row-level isolation, subdomain routing, and edge-aware distribution.
- Row-level tenant isolation
- Subdomain routing + SSO / SAML
- Edge / CDN-backed repo distribution
Deploy in minutes.
Docker Compose. One command. Production ready.
SECURITY & COMPLIANCE
Built to pass your security review.
Nine security audits and counting. The controls your security team asks about are built in — not bolted on.
Tenant isolation
Row-level isolation on every model. JWT cross-validated against tenant context on every request.
Granular RBAC
Six roles with per-scope manage/view, department scoping, and cross-tenant predicate gates.
Device trust tokens
Rotating tokens authenticate check-in, helpdesk, and portal. One revoke kills all three.
Append-only audit log
DB-enforced immutable trail with before→after diffs and 365-day retention.
SSO & SAML 2.0
LDAP, SAML, and local auth with lockout, backoff, and must-change-password flows.
Your infrastructure
Self-hosted via Docker Compose, source-available under FSL-1.1, converting to Apache-2.0 two years after each release. Your data never leaves.
Everything you need.
Built for IT teams managing macOS at scale.
Plans launching soon.
Self-hosted · no per-seat fees · pricing being finalised.
- Up to 25 devices
- Munki catalog
- RBAC + audit log
- Founder-led support
- Self-hosted source available
- Up to 100 devices
- SSO (SAML 2.0)
- Compliance policy
- Remote sessions (RustDesk)
- Webhooks & API keys
- Founder-led support
- Up to 500 devices
- Multi-tenant management
- White-label branding
- Per-tenant RBAC
- Tenant 2FA enforcement
- Customer-visible audit log
- 500+ devices / Unlimited
- Custom integrations
- On-premise option
- Migration support
- Custom SLA terms
- Everything in Enterprise
Be the first paying customer.
ownMDM is pre-launch. We're looking for one Mac IT shop (30–60 devices) to use the platform daily and shape v1 with us.
Free for the first year
Full Business tier, no cap, no upsells. We do the install for you remotely.
Direct line to the founder
Weekly 30-min call. Slack/email reply within 4 hours during business days.
Your voice on the roadmap
Bug reports and feature requests from design partners ship before anything else.
Become a referenceable customer
After 6 months, opt in to be quoted on this page — or stay private. Your call.
15-minute intro call · We'll only take one partner per industry.