All comparisons

Swiss. Independent. Privacy first.

cybee versus
Iru.

A client asks for security evidence, and your team already uses Iru. Begin with what the installed platform covers. Add something only when the remaining job is clear.

ComparisonVendor information checked 18 September 2026

cybee

Security work and scoped device and Workspace records through your assistant.

Iru

A platform spanning device management, security, identity and compliance products.

Compare today’s product, not an old category.

If a client names Iru, or an existing deployment is still referred to as Kandji, establish which products the team actually uses. The old name alone does not describe the current scope. An endpoint management subscription and a wider security and compliance deployment are different starting points.

The client might want a control to be operating, evidence that it operated during a period, or a document explaining the company’s wider practices. List those separately. Assign an owner and an evidence source to each requirement.

There is more here than device management.

Iru describes device deployment, updates and policy enforcement across several operating systems. Its endpoint security product includes detection and response. Read the management scope. Read the security scope.

Its Trust Center is a customer facing sharing surface, with questionnaire and document access workflows. Review which information a customer can access and how access is granted. Read the Trust Center description.

From there, compare the actual deliverable. A useful client record needs a clear source, period, scope and access policy. Inspect the existing result before adding another system.

Match the scope to the responsibility.

Swipe across to see both products

What each product does.
The jobcybeeIru
Device operationsSecurity on supported Macs. Not general fleet administration.Management products cover deployment, updates and policy enforcement.
ProtectionBehaviour, signatures and local inspection support device protection.A dedicated endpoint security product provides detection and response.
Buyer evidenceA sealed, dated device Passport, with Workspace account evidence separately scoped.Trust Center and compliance products support sharing and questionnaire workflows.
Commercial scopeFree protection and Workspace visibility. Paid hardening, records and training.Select the products, users and devices relevant to the quote.
Three decisions before adding another tool.
Responsibility

Who maintains the control and investigates the finding?

Evidence

Which record answers the client’s exact question?

Gap

What useful work remains after the existing setup?

Where features overlap, compare how your team would use them and the evidence they produce.

A trust page and a sealed record need inspection.

Check each report’s sources, dates and missing devices. Ask whether a later update changes the version a client has already received.

cybee’s device Passport describes observed controls on assessed Macs. The seal lets the recipient check for changes against cybee’s sealed copy. It does not establish independence from cybee, certify the organisation or complete the policy and supplier sections of a questionnaire.

Connected Google Workspace has its own account observations and paid sealed record. Account activity and MFA observations apply to the connected organisation. They do not answer for personal accounts or unrelated cloud services. Training is included in the paid plan, while completing a module and proving a device control remain different kinds of evidence.

Choose how the work gets done.

Iru documents both operational event data and an MCP connection for endpoint workflows. Compare which tasks the connection supports and how approvals work. Inspect the documented endpoint workflow options.

Try a real task with the person who will use it: find an affected device, review a proposed change and retrieve the result later.

cybee puts that conversation in the assistant the team already uses. Alerts can arrive through Slack, Teams or SMS. The important distinction is between receiving a finding, authorising a sensitive action and confirming the outcome. Keep all three events visible in the record.

Keep the current controls working.

Plan for separate workflows unless a supported connection is confirmed. Before combining agents or configuration tools, verify compatibility and agree which system owns each setting. A better evidence presentation is not a reason to remove effective protection.

A focused gap or a wider programme?

Iru’s broader management, identity and compliance functions may be central to your setup. Evaluate cybee for a specific gap in Mac protection, security settings or customer evidence.

cybee’s free plan includes device protection, the posture score and Google Workspace visibility. Paid hardening, security training, the sealed device Passport and Workspace account and offboarding records cost 9 per Mac monthly or 90 annually, in CHF, EUR or USD, excluding tax.

Iru’s pricing page requests a quote based on the selected solutions and estate. Compare the quoted scope, billing unit and commitment. Review current Iru pricing.

Common questions.

Is Iru just the old Kandji device manager?

No. The current product family includes management, endpoint security, identity and compliance offerings. Inspect the products licensed and deployed rather than relying on the historical name.

Does Iru have a page for sharing security information?

Yes. Its Trust Center supports customer facing security information and document workflows. Compare the content, sources, dates and access behaviour of the specific record you intend to share.

Should we add cybee if our existing record is sufficient?

Start with the unmet job. If the existing protection and evidence already satisfy the requirement, another product is not automatically necessary. Assess a specific security, configuration or record gap.

Read the sources.

Official product and documentation pages used for this comparison. Editions and availability can change; review the relevant package before choosing.

Provable security: protection, hardening, and a dated record of the technical work.

Device protection covers supported Macs. The Trust Passport is not a certification, an independent audit or a guarantee of acceptance.

Stronger security.
Proof built in.

Protection for your devices. A record of the work.

Start in your Chat, CLI, IDE or TerminalmacOS
curl -sSf https://get.cybee.dev | sh
Read the installation guide

Copying the command does not install anything.