Oneleet MDM: Go From Monitoring Device Security to Enforcing It
3 min read
Today we're launching Oneleet MDM (mobile device management). It takes the Oneleet agent already on your team's laptops from monitoring device security to enforcing it.
What's in the Release?
- Enforced settings. FileVault, firewall, screen lock, Gatekeeper, and Defender are set by policy and put back when someone turns them off.
- A policy you don’t have to write. One-click secure defaults enforce the device settings that frameworks like SOC 2, ISO 27001, HIPAA, and PCI DSS ask for, such as encryption, screen lock, and firewall.
- Lock, wipe, and recovery key escrow. Lock or wipe a laptop when it’s lost or someone leaves, and keep FileVault recovery keys on file for the forgotten password.
- Apps and updates. Install apps from a catalog on Mac and Windows, and push Windows updates with a deadline.
- Evidence your auditor asks for. Device checks sit next to the rest of your compliance program, and because the settings are enforced, the evidence shows devices that are actually secure.
- Built on the agent you already run. No second agent, console, or vendor. MDM is added to your plan, charged per managed device per month.
How It Helps Your Business
- Have the answer ready for security reviews. When a questionnaire asks how you enforce device security, you can point to settings enforced on every managed laptop and recovery keys on file. That’s a much stronger answer than a screenshot of one laptop, and it’s how we run our own fleet.
- Stop configuring laptops one by one. Turn on secure defaults once, and every laptop gets the settings your auditor checks, including the next new hire’s. Existing Macs enroll without a wipe, and Windows enrolls in one click through the Oneleet agent you already have.
- Run MDM from your compliance platform. Most compliance tools can tell you a laptop is failing a check, but fixing it means a separate MDM with its own login and contract. With Oneleet, you see the problem and fix it in the same place, and your auditor sees the result there too.
Availability
- Platforms: Mac and Windows laptops. Not iPhones or iPads.
- Billing: MDM is a per-device monthly charge, separate from your all-in platform price. You pay for the machines you actually manage, not for your headcount. The Oneleet agent stays included.
- Setup: A Oneleet engineer (a real person and not a setup wizard) works with your team on enrollment. We run Oneleet MDM on our own fleet.
- Docs: Oneleet MDM documentation.
Already a Oneleet customer? Ask your security program manager to add MDM.
Learn more:
- MDM Enrollment on Mac: Profile vs. Apple Business Manager
- MDM for Startups: When You Need It and What to Look For
Head of Technology, Security and Compliance
Head of Technology, Security and Compliance
Product Manager
Product Manager