Self hosted alternatives for Apple MDM?
So far, I have been using Hexnode, but it has become very expensive. I'm currently paying about $500 per month for 95 devices. While they offer a lot of features, I only use it for: 1)Remotely wiping devices. 2) Creating a custom configuration with 2–3…
So far, I have been using Hexnode, but it has become very expensive. I'm currently paying about $500 per month for 95 devices. While they offer a lot of features, I only use it for: 1)Remotely wiping devices. 2) Creating a custom configuration with 2–3 restrictions. 3) Setting a custom wallpaper. Is there another alternative I could use, or could I even self-host or vibe-code something similar? Thank you. Edit: Thank you so much for so many recommendations, i think apple revamped their whole business page business.apple.com and they offer mdm stuff as well. The reason that i didn't use ABM before was because it wasn't supported in my country.
Collected discussion
If you’re worried about price, just use the free Apple Business stuff.
is it really that easy to manage macs etc with intune? every org ive been at will use it for everything windows, and I have devices in my tenant, but I never fucking hear from those users. Genuinely wouldnt suprise me if they had some apple local admin. meanwhile claude fucking updates everyday via intune on windows PCs and inevitably fucks the update up and wipes the install
Macs aren't great. iPad and iPhone is almost fully fledged
Is this new? I did look into ABM a few months ago but it couldn't use it because it wasn't supported in my country & it also asked for a duns number. But it looks like they changed everything and revamped the whole page.
Is this new? I did look into ABM a few months ago but it couldn't use it because it wasn't supported in my country & it also asked for a duns number. But it looks like they changed everything and revamped the whole page.
Within the last couple of months they did change it around and started offering basic MDM features for free. I’m in the USA so the DUNS number wasn’t a problem for me. I’m not sure what advice to give you on that or how it varies between countries unfortunately.
We signed up when it was called Apple Business Essentials, then it became free when they rebranded it. Not sure what the country requirements are though.
Apple’s own MDM is free now and works reasonably well.
This is what I use for my own business. It does the job and the price is right. From there, I'd check with a VAR. There are more MDM choices popping up.
Can you not use Apple Business Manager for this?
You might need to elaborate on what the driver is for needing a self-hosted option. It exists but is on the rare side nowadays for RMM solutions; for MDM, I can't say I've ever heard of one. $5/endpoint isn't particularly crazy although if you're not doing much with it I can understand the value not quite being there. Are you in M365? Especially for SMBs, Intune is often the functionally "free" option since it is part of so many suites. If you have <300 users, Business Premium is a crazy value and includes it. Otherwise, I'd just look at the gazillion MDM options out there. Jamf is probably going to be at least as expensive. I've never messed with it, but Mosyle has a reputation of being "Jamf that we have at home" and quite a bit cheaper (potentially fine for your limited needs). vibe-code something similar I really hope you can understand how incredibly irresponsible it would be to pursue this option in a business setting, even if it was viable, which I'd doubt.
Self-hosting an MDM seems insane to me these days. That said, in the grand majority of countries where Apple Business is available, the Built-In Management is now a free feature. It's not pretty and requires custom configs to get most option, but it works and because it's integrated into AB, there's no APNS Cert, ADE token, or VPP token to deal with. The other option if you use M365 and already have licences that include it, is Intune.
Mosyle is $1/mo per device for what you need.
I don’t recommend hosting your own, but if that’s a hard requirement then look at something like NanoMDM https://micromdm.io I’d recommend instead looking at Apple Business (free), Mosyle ($1/device for their basic MDM) or SimpleMDM ($2.50/device so half the price of Hexnode) I manage Intune, Hexnode and Mosyle for my clients. Mosyle is great for Apple-only MDM. I prefer Intune over Hexnode - I don’t really like Hexnode much to use.
I don’t have an answer but just commenting to say that it’s been years since I’ve seen a companies MDM requirements be so minimal? I genuinely don’t know that a product exists that is going to be simple enough and therefore cheap. There probably is a vibe coded or otherwise open source option out there (I’ve honestly never looked), but I’d really be asking the question if it’s REALLY worth it or if you should be using more of the features you get with your current platform? If not to extract more value from it, but because your company surely needs more than just those features you’ve mentioned?
+1 for recommending M365 if you already use it for email licensing. Everything you asked for is dead simple to build in intune config. Mac stuff, not so much. But iPads and iphones are very simple and pretty robust for options.
If free is the requirement it's either fleet mdm or micromdm.
While we use on-prem for everything we can, even mail, mdm is the one thing we decided against. Yes, there are solutions like matrix silverback etc, but they also are sometimes expensive and can cause problems. It's way easier to go with a good mdm and say "the mdm saves us one worker which costs amount x, so in general we will save money".
Fleet MDM
You're massively overpaying for that use case, and plenty of lower-cost SaaS options exist for simple wipe, restrictions, and wallpaper at 95 devices. On the self-hosting question: a real Apple MDM requires you to manage your own APNs certificate pipeline, a persistent push server, and enrollment infrastructure, which is a serious ongoing maintenance burden. Vibe-coding something on top of that is risky because the APNs layer is not forgiving of downtime or certificate lapses. Unless you have dedicated engineering time, a cheaper SaaS tier will cost less than the hours.
Isn't Jamf Apple MDM?