Iru is a commercial device management and endpoint security platform run as a SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. service, aimed at IT and security teams managing fleets of Mac, iOS, iPadOS, and Windows devices. It handles automated OS lifecycle management (Managed OS) with staged and delayed rollouts, pushes managed configuration profiles and Auto Apps during Apple's Setup Assistant, and layers in vulnerability management with bulk device exclusion for machines under maintenance. Compliance owners get automated frameworks, a Policy Management module, and ServiceNow sync, while MSPsMSPsA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. get purpose-built multi-client features. It tracks Apple beta program enrollment across devices and lets admins target library items and restrictions accordingly. With 28 releases in the window we track, spanning new OS platforms, compliance tooling, and a growing Auto Apps catalog, the project is under active, frequent development.
Iru is a device-centric platform that unifies security, IT, and compliance around devices and everything they touch.
Which of my Mac devices are ready for Okta Device Trust before the user ever sees the desktop?
pushes managed configuration profiles, PPPC, and background items during Setup Assistant so Okta Verify and Auto Apps are functional before the device is handed over
Which devices should stop counting toward my vulnerability alerts while they're being worked on?
lets you select a batch of machines and exclude them in one action, removing them from detection counts, views, and alerts until you reinclude them
How do I move a fleet onto a new macOS version without pushing it to everyone at once?
phases the OS update declaration across the fleet and supports an embedded delay of up to 90 days before a new target version is even sent, which can be layered with software update deferrals
Which of my devices are running Apple's beta software, and can I control that?
shows beta program enrollment on each device record, in an optional column across device listings, and lets you enforce or target a specific beta program through Library Items and Assignment Rules
Can I exempt specific people from a policy rollout without splitting the whole assignment?
lets admins exclude named users from a policy when publishing or updating it, and re-include them later, without rebuilding the assignment
Are my Windows machines getting the same lifecycle and app management as my Macs?
extends Managed OS lifecycle automation to Windows and offers a separate Windows Auto Apps catalog for automated deployment of common tools
Built from Iru's releases, docs, README and our own runs.
“Seen” marks the month we first spotted a release the vendor didn't date.
Group names and tags are our labels.
+Device Management and Configuration5 capabilitiesIru handles the full lifecycle of managed devices, from initial enrollment and OS updates through to platform-level restrictions and configuration profiles. It covers Apple and Windows endpoints across enrollment customisation, beta program management, and policy-driven restriction delivery.▸
+Managed OS lifecycle managementshippedAutomates OS update targeting and enforcement for Apple and Windows devices, supporting phased rollouts and layered deferral controls.25 releases · 3 other sources · first seen Aug 2026▸
release
25 total
Adds a target OS version setting to Automated Device Enrollment in addition to the existing minimum required OS version, allowing a separate enrollment floor and update target for macOS, iOS, and other supported platforms.
changelog · Oct 2026
· source
· release history
Adds hardware-aware OS enforcement: when using specific version, minimum version, or rolling update options, Iru checks Apple's GDMF metadata service and skips installing incompatible updates on ineligible devices.
announced · Oct 2026
· source
· release history
Adds separate enforcement schedules for minor updates and major upgrades within a single Managed OS Library Item, eliminating the need for extra scoping logic.
announced · Oct 2026
· source
· release history
Adds phased rollout schedules with a configurable window of 1 to 7 days (set in hours), spreading OS declaration delivery gradually to reduce network spikes.
announced · Oct 2026
· source
· release history
Adds a Rolling Enforcement option that delays sending a new target version declaration to Apple devices by up to 90 days, giving admins time to verify a release before fleet deployment.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
announced · Oct 2026
· source
· release history
Supports upgrading managed devices to Windows 11 26H2 via Managed OS.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
What's New in Iru | October 16th · Oct 2026
· source
· release history
example
Target Windows 11 26H2 as the required OS version via library items.$ Select 'Windows 11 26H2' Managed OS Library Item in Iru console settings
Iru now supports Windows 11 26H2 · Oct 2026
· source
Configure severity-based enforcement so critical CVEs are patched immediately while lower-severity findings follow a grace period — reducing exposure on Windows without disrupting users.$ In the Iru console, go to Vulnerability Management > Enforcement Controls, select a CVE severity tier (e.g.
announced · Sep 2026
· source
Slow-roll a new macOS version to your fleet by staggering when devices receive the target version declaration — useful before broad deployment.$ In the Iru console, open your Managed OS for Apple configuration, enable Rolling Enforcement, and set the embedded delay (up to 90 days) to control when a new target version declaration is sent to…
Managed OS for Apple: New embedded delay option · seen Jul 2026
· source
+Apple beta program managementshippedEnrols Apple devices in beta programs, enforces specific beta versions, and surfaces enrollment status so library items can be assigned based on it.8 releases · first seen Oct 2026▸
release
8 total
Supports enforcing beta OS versions via AppleSeed for IT beta tokens from Apple Business inside Managed OS Library Items, with automatic token sync when Automated Device Enrollment (ADE) integrations are configured.
announced · Oct 2026
· source
· release history
Enables assigning library items based on Apple beta program enrollment status.
What's New in Iru | August 7th · seen Aug 2026
· source
· release history
The Software Update Library Item now supports Apple beta program enrollment, allowing end users to opt-in or enforcing a specific program without tying it to a specific version.
Offer Apple beta releases with the Software Update Library Item · seen Aug 2026
· source
· release history
New Assignment Rule on Assignment Maps lets you assign Library Items to devices based on Apple beta program enrollment — either any beta enrollment or specific beta programs.
New Apple Beta Enrollment Assignment Rule · seen Jul 2026
· source
· release history
Surfaces beta program enrollment status on the device record details tab for any enrolled Apple device.
Continued improvements to Apple beta release management · seen Jul 2026
· source
· release history
Adds Apple beta program enrollment and version enforcement for iOS and iPadOS in Managed OS and ADE Library Items.
Continued improvements to Apple beta release management · seen Jul 2026
· source
· release history
+Device restriction profilesshippedPushes platform-level restrictions to managed devices, including app allow/block lists and network behaviour controls across macOS, iOS, iPadOS, and visionOS.5 releases · 1 other source · first seen Sep 2026▸
release
Adds AllowNaturalLanguageEditing, AllowVisualIntelligence, AllowLiveRecognition, AllowSiriAI, and ForceReduceSensitiveContent to the Restrictions Library Item for Apple devices, deployed automatically via DDM declarations alongside existing MDM restrictions.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
New Apple Restrictions for Siri and Apple Intelligence · Sep 2026
· source
· release history
System tray update list automatically clears completed entries as installs succeed, and handles closing open apps when required to finish an install.
Update Windows apps from the system tray · seen Aug 2026
· source
· release history
Extends allowAutomaticAppDownloads, allowCamera, allowListedAppBundleIDs, and blockedAppBundleIDs restrictions to visionOS 27 and later.
Restrictions improvements for Apple beta releases · seen Jul 2026
· source
· release history
Adds ForceCaptivePortalConnectionFromLockScreen restriction for devices running the macOS 27 Apple beta.
Restrictions improvements for Apple beta releases · seen Jul 2026
· source
· release history
Adds ForceWifiConfigurationOnLockScreen restriction for devices running the macOS 27 Apple beta.
Restrictions improvements for Apple beta releases · seen Jul 2026
· source
· release history
example
Block Siri AI and sensitive content on managed Apple devices by enabling the new restrictions in the Iru Restrictions Library Item.$ In the Iru console, go to Library > Restrictions Library Item for Apple, enable `AllowSiriAI` (set to false) and `ForceReduceSensitiveContent` (set to true), then save — Iru will automatically deploy…
New Apple Restrictions for Siri and Apple Intelligence · Sep 2026
· source
+Single Sign-On Extension configurationshippedConfigures SSO extension settings on macOS, including Authenticated Guest Mode when Platform SSO is in use.3 releases · first seen Oct 2026▸
Shared capability: Single sign-on
Also counts toward: Single sign-on
release
Single Sign-On now has upgrades to improve the user sign-in experience.
What's New in Iru | October 30th · Oct 2026
· source
· release history
Authenticated Guest Mode is now available on the Single Sign-On Library Item, allowing guest users to authenticate through SSO flows.
What's New in Iru | August 14th · seen Aug 2026
· source
· release history
Adds Authenticated Guest Mode configuration support to the Single Sign-On Extension Library Item when using Platform SSO with macOS.
Platform SSO for Mac: Authenticated guest mode · seen Aug 2026
· source
· release history
+Automated Device Enrollment (ADE) customizationshippedPushes managed configuration profiles during device setup so that required apps and identity integrations are ready before the user takes control.3 releases · first seen Oct 2026▸
release
Adds minimum OS version enforcement within Automated Device Enrollment (ADE).
What's New in Iru | October 23rd · Oct 2026
· source
· release history
Adds an Update to setting in Automated Device Enrollment, letting admins define a separate target OS version that devices upgrade to before enrolling, independent of the minimum required OS version floor — supported for macOS, iOS, and more.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Target OS version for Automated Device Enrollment · Oct 2026
· source
· release history
Delivers Iru managed configuration profiles (PPPC, background items, etc.) during Setup Assistant when using ADE customization for Mac, so Auto Apps and Okta Verify with Okta Device Trust are fully functional before the end user is released.
ADE customization for Mac: Managed profile delivery · seen Jul 2026
· source
· release history
+Application Deployment1 capabilityIru automates the distribution of third-party applications to managed endpoints through a curated catalog. It removes manual packaging work by keeping common Mac and Windows apps ready to deploy.▸
+Auto Apps catalogshippedAutomatically deploys third-party applications from a curated catalog to Mac and Windows endpoints, covering tools such as Microsoft 365 Apps, Notion, GitHub CLI, and Claude.26 releases · 3 other sources · first seen Aug 2026▸
release
26 total
Iru adds six new Windows Auto Apps to the catalog: Make Me Admin, Meld, Microsoft PowerBI Desktop, Netbird, PDF-XChange Editor, and Private Internet Access.
changelog · Nov 2026
· source
· release history
Iru Agent for Windows now validates the checksum of every app and update it downloads, installing only files that match what Iru sent.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Iru Agent for Windows 1.25.7 · Oct 2026
· source
· release history
Iru adds a GitHub Copilot Auto App for macOS, now available to all customers via the Library Items catalog.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
New macOS Auto App: GitHub Copilot · Oct 2026
· source
· release history
Iru now supports six new Windows Auto Apps — Make Me Admin, Meld, Microsoft PowerBI Desktop, Netbird, PDF-XChange Editor, and Private Internet Access — available to all Iru Endpoint customers via the Library Items catalog.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
New Windows Auto Apps · Oct 2026
· source
· release history
Adds Audacity 4, Bluebeam Revu 21, BluebeamOCR 21, Bria, Defraggler, and ExpressVPN 14 to the Windows Auto Apps catalog for all Endpoint customers.
New Windows Auto Apps · Oct 2026
· source
· release history
New Audacity 4 auto app available in the Iru Library Items section.
Auto App: Audacity 4 · Oct 2026
· source
· release history
example
Deploy Parallels Desktop 27 via the service's Library Items interface.$ In the console, go to Library Items and select 'Parallels Desktop 27' from the Auto App catalog
Auto App: Parallels Desktop 27 · Oct 2026
· source
Enable Microsoft 365 Copilot automation by selecting it from the library of available Auto Apps.$ In the Iru dashboard, navigate to Library Items and select 'Microsoft 365 Copilot' from the catalog.
Auto App: Microsoft 365 Copilot · Oct 2026
· source
Enable the TIDAL Auto App for your organization through the Iru console.$ In the Iru console, go to Library Items > Auto Apps, locate 'TIDAL', and enable it for your account.
Auto App: TIDAL · Oct 2026
· source
+Security and Vulnerability Management3 capabilitiesIru provides endpoint detection and response alongside vulnerability management controls that let teams act on threats and manage which devices appear in risk views. Compliance automation ties device posture to recognised frameworks with support for user-level exceptions.▸
+Compliance AutomationshippedAutomates compliance coverage through a Policy Management module and pre-built frameworks, including the ability to assign exceptions at the user level.10 releases · first seen Sep 2026▸
release
10 total
Enables easier access to corporate policies for end users.
What's New in Iru | October 16th · Oct 2026
· source
· release history
Enhances Iru Compliance evidence collection.
What's New in Iru | September 25th · Sep 2026
· source
· release history
Enhances Iru Compliance evidence collection.
What's New in Iru | September 25th · Sep 2026
· source
· release history
Adds Google Cloud Platform to the Iru Compliance connector catalog, enabling configuration and inventory evidence collection across Google Cloud IAM, Cloud Storage, Cloud KMS, and Cloud Logging.
Google Cloud Platform is now available as a compliance source · seen Aug 2026
· source
· release history
Adds an Unassigned option to the Owner and Delegate filters on the Actions list in Compliance Automation, letting admins surface ownerless actions without manually scanning the table.
Filter actions by unassigned owner or delegate · seen Aug 2026
· source
· release history
Compliance Automation now lets you select the compliance framework upfront when generating new policies, rather than configuring it after creation.
What's New in Iru | August 14th · seen Aug 2026
· source
· release history
+Vulnerability Management device exclusionsshippedLets administrators exclude individual or bulk sets of devices from vulnerability views, detection counts, and alerts, with the ability to reverse exclusions in bulk.6 releases · 1 other source · first seen Sep 2026▸
release
Supports deploying Vulnerability Management and Response on Windows devices.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
What's New in Iru | September 18th · Sep 2026
· source
· release history
Adds Vulnerability Management and Response deployment support for Windows devices.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
What's New in Iru | September 18th · Sep 2026
· source
· release history
Inventories all installed Windows applications, maps them against the National Vulnerability Database (NVD), and ranks findings by severity with an active-exploitation flag.
announced · Sep 2026
· source
· release history
Tracks each CVE through statuses — active, remediated, or risk-accepted — with device-level counts for fleet-wide visibility.
announced · Sep 2026
· source
· release history
Adds Bulk Device Exclusion to exclude multiple devices from Vulnerability Management at once, hiding them from all vulnerability views, detection counts, and alerts.
Vulnerability Management Enhancements · seen Jul 2026
· source
· release history
Supports bulk removal of exclusions with the same single-action workflow.
Vulnerability Management Enhancements · seen Jul 2026
· source
· release history
example
Temporarily take a batch of devices out of scope (e.g. machines pending maintenance) so they stop inflating vulnerability counts and triggering alerts.$ In the console, go to Vulnerability Management > Devices, select the target devices, and choose Bulk Device Exclusion to exclude them in a single action.
Vulnerability Management Enhancements · seen Jul 2026
· source
+Endpoint Detection and Response (EDR)shippedDetects and responds to threats on endpoints, with wildcard support available when writing detection rules.1 release▸
release
Adds wildcard support for Endpoint Detection and Response.
What's New in Iru | July 17th · seen Jul 2026
· source
· release history
+Device Visibility and Inventory2 capabilitiesIru surfaces detailed device attributes across records, list views, and the API so administrators have a consistent and queryable picture of their fleet. An AI assistant adds a conversational layer on top of that data.▸
+Iru AI assistantshippedProvides an AI chat interface that lets users query and manage device data without navigating traditional UI flows.8 releases · 3 other sources · first seen Sep 2026▸
Also counts toward: Built-in AI assistant
release
8 total
Adds Iru AI-assisted Library Item creation for BitLocker disk encryption policies on Windows from a plain-language description.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Iru AI assistant for BitLocker and Android Restrictions · Oct 2026
· source
· release history
Adds Iru AI assistance inside Windows Update Library Items to recommend and implement settings based on CIS benchmarks or Microsoft defaults, with preview of each change before approval.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
announced · Oct 2026
· source
· release history
Enables defining common security frameworks when using Iru AI to configure Windows Updates.
What's New in Iru | October 2nd · Oct 2026
· source
· release history
Supports enrollment of devices running Windows 11 26H2 into Iru.
Iru now supports Windows 11 26H2 · Oct 2026
· source
· release history
Records detailed audit history of configuration changes, rotation events, and retrieval events — capturing which user accessed a password, for which device, and when.
announced · Sep 2026
· source
· release history
Enables Iru AI to recommend and implement Windows Update Library Item settings based on CIS benchmarks or Microsoft defaults, with follow-up questions to refine or explain settings.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Windows Update Library Item Recommendations in Iru AI · Sep 2026
· source
· release history
example
Have Iru AI generate a BitLocker encryption policy Library Item from a plain-language description instead of manually configuring each setting.$ In the Iru web app, open Iru AI > describe the BitLocker policy you need (e.g.
changelog · Oct 2026
· source
Generate a BitLocker encryption policy Library Item without manually configuring settings — just describe the policy in plain language.$ In Iru, navigate to Library Items, select 'Create with AI', choose 'BitLocker', then describe your disk encryption policy (e.g.
Iru AI assistant for BitLocker and Android Restrictions · Oct 2026
· source
Deploy new applications via the Iru service catalog interface.$ Browse the Library Items section of the Iru website to select and deploy 'Audacity 4' or other new Auto Apps.
New Windows Auto Apps · Oct 2026
· source
+Device inventory and detailsshippedExposes device attributes such as public IP address on device records, the Prism listing view, and through the enterprise API.6 releases · first seen Aug 2026▸
Also counts toward: REST API
release
App inventory for Windows computers now reports the install path for more applications.
Iru Agent for Windows 1.25.7 · Oct 2026
· source
· release history
Supports enrolling devices running Windows 11 26H2 into Iru so teams can onboard new and upgraded hardware immediately.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Iru now supports Windows 11 26H2 · Oct 2026
· source
· release history
Adds hardware component health data visibility for iPhone and iPad devices.
What's New in Iru | September 4th · Sep 2026
· source
· release history
Makes hardware component health status values available via the enterprise API device details endpoint for iOS and iPadOS devices.
Device health statuses for iOS and iPadOS devices · Aug 2026
· source
· release history
Exposes device system health statuses for hardware components (camera, NFC, baseband, Touch ID, and others) in the device record UI for supported devices running iOS or iPadOS 27 beta.
Device health statuses for iOS and iPadOS devices · Aug 2026
· source
· release history
Adds public IP address reporting for Apple devices, visible on the device record Details tab, as an optional Prism column, and via the enterprise API device details endpoint.
Public IP address now reported for Apple devices · seen Jul 2026
· source
· release history
+Integrations and Multi-Tenant Operations3 capabilitiesIru connects to external platforms and supports managed service providers running multiple client tenants from a single interface. It also offers structured audit capabilities through token-based activity log search.▸
+MSP multi-tenant managementshippedProvides purpose-built multi-tenant management features designed for managed service providers overseeing multiple client environments.5 releases · first seen Sep 2026▸
Also counts toward: Multi-tenant management
release
Adds MSP Billing with itemized billing to increase visibility into MSP margins.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
What's New in Iru | September 25th · Sep 2026
· source
· release history
Adds MSP Billing with itemized billing to increase visibility into MSP margins.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
What's New in Iru | September 25th · Sep 2026
· source
· release history
Adds MSP Billing in the Partner Portal, giving U.S.-based managed service providers daily, per-tenant spend visibility and the ability to update payment methods, billing information, and view past invoices.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Introducing MSP Billing · Sep 2026
· source
· release history
Adds MSP Billing in the Partner Portal, giving managed service providers daily, per-tenant spend visibility, payment method management, billing information updates, and access to past invoices.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Introducing MSP Billing · Sep 2026
· source
· release history
New purpose-built features for MSPs managing multiple clients.
What's New in Iru | July 17th · seen Jul 2026
· source
· release history
+Activity log searchshippedOffers token-based structured search on the activity log so administrators can run precise queries against audit data.1 release▸
release
New token-based search on the activity page for more precise, structured querying of activity data.
What's New in Iru | July 24th · seen Jul 2026
· source
· release history
+ServiceNow integrationshippedProactively pushes device and compliance data to ServiceNow in real time, without waiting for a scheduled poll.1 release▸
release
Enables proactive ServiceNow updates, pushing device or compliance data to ServiceNow automatically.
What's New in Iru | July 10th · seen Jul 2026
· source
· release history
+Other18 capabilities▸
+Managed OS Lifecycle management (Windows)shippedExtends managed OS update capabilities to Windows devices, offering status visibility, per-device patch compliance reporting, and non-disruptive patching with user-facing deadlines.10 releases · 2 other sources · first seen Aug 2026▸
release
10 total
Enables conversational follow-up questions within the Windows Update configuration workflow — for example, asking 'What changes if I move from CIS to Microsoft defaults?' — to refine active hours, restart prompts, notifications, and deferral access in plain language.
announced · Oct 2026
· source
· release history
Enables Iru AI to define common security frameworks for configuring Windows Updates
What's New in Iru | October 2nd · Oct 2026
· source
· release history
Enrollment of devices running Windows 11 26H2 is now supported
Iru now supports Windows 11 26H2 · Oct 2026
· source
· release history
Adds OS update status visibility per Windows device, showing clear update state across your fleet.
What's New in Iru | September 18th · Sep 2026
· source
· release history
Adds per-device patch compliance reporting to Windows Managed OS Library Items, showing Pass, Update past due, or Error status alongside current vs.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄ required Windows 11 build, eligibility date, install enforcement date, and restart enforcement date.
Windows Managed OS patch compliance · Sep 2026
· source
· release history
Adds a clear status view of OS updates for every Windows device.
What's New in Iru | September 18th · Sep 2026
· source
· release history
example
Walk through a CIS-benchmark-aligned Windows Update configuration for a fleet, reviewing each recommended setting before applying it.$ In the Iru console, open a new Windows Update Library Item, then follow the Iru AI prompts: select 'CIS benchmarks' as your starting point, review the proposed active hours, restart prompts,…
announced · Oct 2026
· source
Standardize your fleet to the latest Windows release via Managed OS Library.$ In the console, go to Managed OS Library and select 'Windows 11 26H2' as the target version for deployment.
Iru now supports Windows 11 26H2 · Oct 2026
· source
+Privacy Library ItemshippedLets admins configure and customize app permission prompts shown to end users on managed devices.9 releases · 1 other source · first seen Sep 2026▸
release
9 total
Extend Privacy Library Item coverage to Mac computers.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
What's New in Iru | October 30th · Oct 2026
· source
· release history
Extends the Privacy Library Item's Recommended privacy permissions area to support Mac (macOS apps and Safari website permissions), in addition to iPhone and iPad.
changelog · Oct 2026
· source
· release history
Extends the Privacy Library Item's Recommended privacy permissions area to support macOS, allowing admins to bundle app and Safari website permissions into a single user consent prompt.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Recommended privacy permissions for Mac · Oct 2026
· source
· release history
Adds Privacy Library Item to let administrators polish app permission prompts seen by end users.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
What's New in Iru | October 2nd · Oct 2026
· source
· release history
Adds Privacy Library Item to polish app permissions for end users
What's New in Iru | October 2nd · Oct 2026
· source
· release history
Adds Privacy Library Item to let admins polish app permission prompts shown to end users.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
What's New in Iru | October 2nd · Oct 2026
· source
· release history
example
When onboarding managed iPhones, configure recommended permissions so users receive a single grouped consent prompt instead of per-app popups.$ In the admin console, open the Privacy Library Item, navigate to the 'Recommended privacy permissions' section for iPhone and iPad, add the required app permissions and Safari website permissions,…
Recommended privacy permissions for iPhone and iPad · Sep 2026
· source
+Remote ShellshippedProvides a root command-line session on a managed Mac, launchable from a detection or device record, that remains connected during Partial Isolation so administrators can contain a threat and run live forensic commands simultaneously.5 releases · 2 other sources · first seen Oct 2026▸
Also counts toward: Command-line interface
release
Keeps the Remote Shell connection alive through partial device isolation, so containment and investigation can happen at the same time.
announced · Oct 2026
· source
· release history
Remote Shell stays connected while a Mac is in Partial Isolation, so you can contain a threat and investigate it at the same time.
Remote Shell · Oct 2026
· source
· release history
Remote Shell gives you a root command line on a managed Mac, reachable directly from a detection or the device record in the Iru console.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Remote Shell · Oct 2026
· source
· release history
Makes Remote Shell available as an add-on for customers running Iru Endpoint Management without the EDR package.
announced · Oct 2026
· source
· release history
Adds a Launch Remote Shell button inside the detection window so admins can open a secure tunnel to a managed Mac without leaving the investigation context.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
announced · Oct 2026
· source
· release history
example
Contain a suspected compromise and run live forensic commands on the Mac without losing shell access when Partial Isolation is applied.$ In the Iru console, open a detection or the device record, click 'Remote Shell', then run your investigation commands — Partial Isolation can be enabled on the same device without dropping the…
Remote Shell · Oct 2026
· source
Contain a suspicious Mac and investigate without losing detection context or pivoting between tabs.$ In the Iru console, open the firing detection, apply partial isolation to the device, then click 'Launch Remote Shell' to open a terminal beside the detection details and device posture — the shell…
announced · Oct 2026
· source
+Android Restrictions Library ItemshippedConfigures platform-level restrictions for managed Android devices, including control over managed Google accounts and credential manager policies in work profiles.6 releases · 1 other source · first seen Aug 2026▸
release
Adds native Iru AI integration for building BitLocker and Android Restrictions Library Items directly within Iru.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
What's New in Iru | October 23rd · Oct 2026
· source
· release history
Iru AI now builds Library Items for BitLocker on Windows and Android Restrictions from a plain-language description.
changelog · Oct 2026
· source
· release history
Adds Iru AI-assisted Library Item creation for Android Restrictions from a plain-language description.
Iru AI assistant for BitLocker and Android Restrictions · Oct 2026
· source
· release history
Adds managed Google account support and credential manager controls for Android work profiles.
What's New in Iru | September 4th · Sep 2026
· source
· release history
Adds a managed Google Account setting to the Android Restrictions Library Item, with two modes controlling which managed Google Accounts are permitted on company-owned Android devices with work profiles.
Require a managed Google Account on Android devices · Aug 2026
· source
· release history
Adds a Credential managers setting to the Android Restrictions Library Item, letting admins set a default policy to block all credential managers or allow the device's pre-loaded system credential managers in the work profile on managed Android devices.
Control credential managers on Android devices · Aug 2026
· source
· release history
example
Generate an Android Restrictions Library Item for managed devices by describing the restrictions you need in plain language.$ In Iru, navigate to Library Items, select 'Create with AI', choose 'Android Restrictions', then describe the restrictions (e.g.
Iru AI assistant for BitLocker and Android Restrictions · Oct 2026
· source
+FileVault recovery key rotationshippedAutomatically rotates and escrows FileVault recovery keys after an administrator views them, with full audit logging of key access events.4 releases · 2 other sources · first seen Oct 2026▸
Also counts toward: Administrative audit log
release
Enables automatic FileVault key rotation triggered by Iru.
What's New in Iru | October 23rd · Oct 2026
· source
· release history
Adds Automatically rotate keys after viewing setting in the FileVault Library Item to rotate FileVault recovery keys automatically after an administrator views them, with configurable rotation timing; key views remain recorded in the device activity timeline.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
changelog · Oct 2026
· source
· release history
Enables automatic FileVault recovery key rotation after an administrator views the current key, configurable via Automatically rotate keys after viewing in the FileVault Library Item.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Automatically rotate FileVault recovery keys after viewing · Oct 2026
· source
· release history
Key view events continue to be recorded in the device activity timeline.
Automatically rotate FileVault recovery keys after viewing · Oct 2026
· source
· release history
example
Ensure FileVault recovery keys are rotated immediately after an admin views one, closing the window where a viewed key could be reused.$ In the Iru web app, open the FileVault Library Item > enable 'Automatically rotate keys after viewing' > set the rotation delay > save and deploy.
changelog · Oct 2026
· source
Ensure a viewed FileVault recovery key is never reusable — enable auto-rotation so a new key is escrowed immediately after any admin view.$ In the Iru console, go to the FileVault Library Item > turn on 'Automatically rotate keys after viewing' > set the desired rotation timing > save the Library Item.
Automatically rotate FileVault recovery keys after viewing · Oct 2026
· source
+Local Administrator Password Solution (LAPS) for MacshippedGenerates, rotates, and escrows unique local administrator passwords for managed Macs using native Open Directory APIs with role-based access control and detailed audit history.6 releases · first seen Sep 2026▸
Also counts toward: Administrative audit log, Role-based access control
release
Adds a new LAPS Library Item for Mac that automatically generates, rotates, securely escrows, and controls access to local administrator passwords.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Introducing macOS LAPS · Sep 2026
· source
· release history
Enables management and rotation of multiple local administrator accounts per device, with the ability to import accounts from ADE Library Items and password policies from Passcode Library Items.
announced · Sep 2026
· source
· release history
Implements password rotation through the Iru Agent using native Open Directory APIs, preserving SecureToken and Volume Ownership on Apple silicon rather than relying on Apple's SetAutoAdminPassword MDM command.
announced · Sep 2026
· source
· release history
Records detailed audit history of configuration changes, rotation events, and retrieval events — capturing which user accessed a password, for which device, and when.
announced · Sep 2026
· source
· release history
Supports strong, customizable passwords with automatic rotation on a schedule and after each viewing.
Introducing macOS LAPS · Sep 2026
· source
· release history
Enforces role-based access control on password retrieval so only authorized users can view a device's local admin credential.
announced · Sep 2026
· source
· release history
+Single Sign-On Library Item (Templates)shippedProvides pre-configured templates for SAML and OIDC single sign-on setup across popular web applications, including SCIM user provisioning guidance.5 releases · first seen Oct 2026▸
Also counts toward: Single sign-on, OIDC SSO, SAML SSO
release
New setting to configure a web login URL allow list.
Platform SSO OpenID and web login settings for macOS 27 · Oct 2026
· source
· release history
Adds OpenID sign-in support to the Single Sign-On Library Item for macOS 27 and later, enabling identity provider web sign-in pages (including MFA) at the login window, Lock Screen, and FileVault unlock.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Platform SSO OpenID and web login settings for macOS 27 · Oct 2026
· source
· release history
New setting to sync the web login password to the local macOS account.
Platform SSO OpenID and web login settings for macOS 27 · Oct 2026
· source
· release history
Adds 209 pre-configuration templates for SAML and OIDC single sign-on across commonly used web applications, including Slack, Zoom, and Google Workspace.
Single Sign On is a Few Clicks Away with More Than 200 Application Templates · seen Aug 2026
· source
· release history
Templates also cover SCIM user provisioning configuration, guiding identity administrators through the full setup process.
Single Sign On is a Few Clicks Away with More Than 200 Application Templates · seen Aug 2026
· source
· release history
+Android Enterprise domain upgradeshippedAllows administrators to seamlessly upgrade existing Android Enterprise integrations from a managed Google Play account to an organization's managed Google domain without re-enrolling devices.3 releases · 1 other source · first seen Oct 2026▸
release
Upgrade Android devices to a managed Google domain directly within Iru.
What's New in Iru | October 30th · Oct 2026
· source
· release history
Enables upgrade of an Android Enterprise integration from a managed Google Play account to an organization's managed Google domain directly from the Iru web app, without re-enrolling devices.
changelog · Oct 2026
· source
· release history
Adds an Upgrade to managed Google domain button in the Iru web app, letting admins upgrade an Android Enterprise integration from a managed Google Play account to their organization's managed Google domain without re-enrolling any devices.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Upgrade your Android Enterprise integration to a managed Google domain · Oct 2026
· source
· release history
example
Upgrade an existing Android Enterprise integration to a managed Google domain without disrupting enrolled devices.$ In the Iru web app, navigate to your Android Enterprise integration.
Upgrade your Android Enterprise integration to a managed Google domain · Oct 2026
· source
+Large custom app installer supportshippedSupports background downloads of custom app installers up to 30 GB in size.3 releases · first seen Oct 2026▸
release
Adds auto-resume for interrupted Mac Custom App downloads caused by network hiccups or devices sleeping.
Mac Custom Apps: Now with support for 30 GB installers · Oct 2026
· source
· release history
Raises the Mac Custom App Library Item installer size limit to 30 GB, with background downloading in the Iru Agent so other Library Items are not blocked.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Mac Custom Apps: Now with support for 30 GB installers · Oct 2026
· source
· release history
Supports background downloads of custom app installers up to 30 GB.
What's New in Iru | October 16th · Oct 2026
· source
· release history
+MDM user-channel enrollment statusshippedExposes MDM user-channel enrollment status on Mac device record user lists, in the Prism Users category, and via the enterprise API for bulk reporting.3 releases · first seen Sep 2026▸
release
Exposes MDM user-channel enrollment status in the Prism Users category for bulk reporting.
MDM enabled user reporting for Mac · Sep 2026
· source
· release history
Adds MDM user-channel enrollment status to the user list on Mac device records.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
MDM enabled user reporting for Mac · Sep 2026
· source
· release history
Exposes MDM user-channel enrollment status via the enterprise API for bulk reporting.
MDM enabled user reporting for Mac · Sep 2026
· source
· release history
+Device Return to Service managementshippedSupports automated re-enrollment workflows for wiped devices, allowing automatic retry of enrollment attempts without manual intervention.2 releases · 1 other source · first seen Sep 2026▸
release
Enables devices to automatically retry enrollment when using Return to Service.
What's New in Iru | September 11th · Sep 2026
· source
· release history
Adds a Retry enrollment option (checked by default) inside the Erase device modal when Use Return to Service is enabled, allowing iPhone and iPad on iOS 27 or iPadOS 27 or later to automatically reattempt enrollment if the initial post-erase attempt fails.
Automatic retry enrollment for Return to Service · Sep 2026
· source
· release history
example
Re-enroll a wiped device without manual intervention when the first enrollment attempt fails after a Return to Service erase.$ In the Erase device modal, check 'Use Return to Service', then confirm 'Retry enrollment' is checked (on by default) before submitting — applies to iPhone/iPad running iOS 27 or iPadOS 27 or later.
Automatic retry enrollment for Return to Service · Sep 2026
· source
+Directory Sync configuration and managementshippedAllows administrators to configure directory sync integrations, customize sync frequencies or schedules, and trigger on-demand synchronization.3 releases · first seen Aug 2026▸
Also counts toward: Scheduled jobs
release
Adds customizable directory sync schedules and on-demand sync in Iru Identity.
What's New in Iru | September 4th · Sep 2026
· source
· release history
Adds a Refresh and Sync Now capability for directory sync integrations.
Iru Identity Directory Sync Enhancements · Aug 2026
· source
· release history
Adds configurable sync frequency per directory sync integration, with intervals including Manual Only, Every 30 minutes, every hour, 2 hours, 4 hours, 8 hours, 12 hours, daily, every 2 days, or weekly.
Iru Identity Directory Sync Enhancements · Aug 2026
· source
· release history
+Platform SSO web sign-in (macOS)shippedEnables identity-provider web-based sign-in, including MFA, at the macOS login window, Lock Screen, and FileVault unlock, with options to sync the web login password to the local account and configure a web login URL allowlist.1 release · 1 other source · first seen Oct 2026▸
Also counts toward: Multi-factor authentication, Single sign-on, OIDC SSO
release
Adds OpenID sign-in support and web login settings to the Single Sign-On Library Item for macOS 27 and later, enabling identity-provider web sign-in (including MFA) at the login window, Lock Screen, and FileVault unlock, with options to sync the web login password to the local account and set a web login URL allow…
changelog · Oct 2026
· source
· release history
example
Let users sign in to a macOS 27 device at the Lock Screen through your IdP's MFA web page instead of a local password.$ In the Iru web app, open the Single Sign-On Library Item > enable OpenID sign-in > set the web login URL allow list > enable 'Sync web login password to local account' > scope to macOS 27+ devices >…
changelog · Oct 2026
· source
+Iru for Startup bundleshippedPackages the platform as an all-in-one offering targeted at startup organisations.2 releases · first seen Oct 2026▸
release
Introduces the Iru for Startup bundle as an all-in-one platform offering.
What's New in Iru | October 2nd · Oct 2026
· source
· release history
Introduces new Iru for Startup bundle providing an all-in-one platform
What's New in Iru | October 2nd · Oct 2026
· source
· release history
+Safari Extensions managementshippedDeploys and restricts Safari Extensions on macOS via a dedicated Library Item, requiring user channel MDM to be enabled for the target Mac user.1 release · 1 other source · first seen Sep 2026▸
release
Adds support for managing Safari Extensions on macOS through the Safari Extensions Library Item, requiring user channel MDM to be enabled for the target Mac user.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Manage Safari Extensions for Mac · Sep 2026
· source
· release history
example
When deploying or restricting Safari Extensions on a managed Mac, ensure user channel MDM is enabled for the target user before applying the Safari Extensions Library Item.$ In the console, navigate to the Safari Extensions Library Item and configure your desired Safari Extension policies, then confirm the target Mac user has user channel MDM enabled.
Manage Safari Extensions for Mac · Sep 2026
· source
+Google Cloud Platform Compliance ConnectorshippedEnables collection of compliance evidence from Google Cloud projects, including IAM, Cloud Storage, Cloud KMS, and Cloud Logging, using read-only service accounts.2 releases▸
release
Adds Google Cloud Platform to the Iru Compliance connector catalog, enabling configuration and inventory evidence collection across Google Cloud IAM, Cloud Storage, Cloud KMS, and Cloud Logging.
Google Cloud Platform is now available as a compliance source · seen Aug 2026
· source
· release history
Connects to a Google Cloud project via a read-only service account and JSON key for scoped, least-privilege access.
Google Cloud Platform is now available as a compliance source · seen Aug 2026
· source
· release history
+Localization supportshippedProvides localized interfaces for end-user-facing components, including Passport, Self Service, Liftoff, and the Iru menu bar app.1 release · first seen Oct 2026▸
release
Adds Korean localization to Passport, Self Service, Liftoff, and the Iru menu bar app in Iru Agent for Mac 5.2.7 (5401).
changelog · Oct 2026
· source
· release history
+Library Item execution timingshippedLets administrators configure whether custom Library Items execute during or after the Liftoff onboarding event.1 release · first seen Oct 2026▸
release
Adds a post-Liftoff processing option to Custom App, Custom Printer, and Custom Script Library Items for Mac, letting admins choose whether items run during or after Liftoff.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
changelog · Oct 2026
· source
· release history
Lines in monospace are the tool's own words: help text
parsed from its source, or an endpoint from its API document. Under
release, a line is our summary of a dated release. Under
docs, it is quoted from the tool's own documentation or
website. Each links back to the source it came from.
Screenshots
From the release notes, newest first. Click one to see it full size.
Breaking-change disciplinehow rarely a release breaks users, and notice given
Maintenance riskquiet time against its own cadence, maintainers
Innovation & surfacenew capabilities, API and MCP surface
Five scores for Iru, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.
Each score is 0–100 on a published rubric, derived from data this site already shows.
A dimension we cannot measure says so — it is never scored 0 and never enters a rank.
How this is scored
Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
Documentation quality — the release-notes rubric published on the analytics page, unchanged.
Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.
Release-note detail over time
See how much detail Iru puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.
What Iru connects to, runs on and detects, read from its release notes and docs. So far: 9 new supported platforms, 4 new integrations, 3 updated supported platforms, 1 updated integration, 1 new compliance framework.
Show
When
18 changes, tracked since Sep 18, 2026.
Oct 282026
newNew Windows Auto Apps added to catalog
With Make Me Admin, Meld, Microsoft PowerBI Desktop, Netbird, PDF-XChange Editor, Private Internet Access
New Windows Auto Apps have been added to the catalog and are now available for all Iru Endpoint customers. Make Me Admin Meld Microsoft PowerBI Desktop Netbird PDF-XChange Editor Private Internet Access
updatedManaged OS approved versions for macOS Golden Gate, Tahoe, and Sequoia
With macOS 27.2, macOS 26.7.2, macOS 15.8.2
The latest approved version for Golden Gate is now 27.2; for Tahoe, 26.7.2; and for Sequoia, 15.8.2, with the following release dates: macOS 27.2 : Oct 26, 2026 macOS 26.7.2 : Oct 26, 2026 macOS 15.8.2 : Oct 26, 2026
The Single Sign-On Library Item now supports OpenID sign-in on macOS 27 and later, so users can sign in through identity provider web sign-in pages, including multi-factor authentication, at the login window, Lock Screen, and FileVault unlock.
Platform SSO OpenID and web login settings for macOS 27Source ↗
Oct 152026
updatedAndroid Enterprise integration — managed Google domain upgrade
With managed Google Play account
Admins can now upgrade an Android Enterprise integration from a managed Google Play account to their organization's managed Google domain, directly from the Iru web app and without re-enrolling any devices.
Upgrade your Android Enterprise integration to a managed Google domainSource ↗
Oct 142026
newRecommended privacy permissions for Mac
With macOS, Safari
The Privacy Library Item's Recommended privacy permissions area now supports Mac, in addition to iPhone and iPad. Admins can recommend app permissions for macOS apps and website permissions for Safari
newWindows 11 26H2 enrollment and Managed OS Library Item
Devices running 26H2 can now be enrolled in Iru, so your team can onboard new hardware and upgraded fleets without waiting or building workarounds. We've also added a new Managed OS Library Item for Windows 11 26H2, which lets IT teams set 26H2 as the target version and keep devices on a consistent,...
newNew Windows Auto Apps added to Iru Endpoint catalog
Adds Audacity 4, Bluebeam Revu 21, BluebeamOCR 21, Bria, Defraggler, ExpressVPN 14, GitHub Copilot. 7 in all.
New Windows Auto Apps have been added to the catalog and are now available for all Iru Endpoint customers. Audacity 4 Bluebeam Revu 21 BluebeamOCR 21 Bria Defraggler ExpressVPN 14 GitHub Copilot
newApple Restrictions Library Item — Siri and Apple Intelligence controls
With AllowNaturalLanguageEditing, AllowVisualIntelligence, AllowLiveRecognition, AllowSiriAI, ForceReduceSensitiveContent
The Restrictions Library Item for Apple devices now supports the following restrictions: AllowNaturalLanguageEditing AllowVisualIntelligence AllowLiveRecognition AllowSiriAI ForceReduceSensitiveContent
New Apple Restrictions for Siri and Apple IntelligenceSource ↗
Sep 282026
updatedManaged OS approved versions for iOS and iPadOS
With iOS 27.0.1, iOS 26.7.1, iPadOS 27.0.1, iPadOS 26.7.1
The latest approved versions are now 27.0.1 and 26.7.1, with the following release dates: iOS 27.0.1 : Sep 28, 2026 iOS 26.7.1 : Sep 28, 2026 iPadOS 27.0.1 : Sep 28, 2026 iPadOS 26.7.1 : Sep 28, 2026
newWindows Managed OS patch compliance status reporting
With Windows 11, Managed OS Library Item
The Managed OS Library Item for Windows now reports whether each assigned device has reached the Windows 11 build the Library Item requires. Devices show as Pass, Update past due, or Error, and expanding a device row shows its current build against the required build, plus the eligibility, install enforcement, and restart enforcement dates.
Nothing first seen in this window. That doesn't mean Iru shipped nothing, only that we found no record of it.
Changes per month New Updated Retired
2026-09
4
2026-10
14
How we count
Read from 36 of 88 release notes and docs updates we hold for Iru. "First seen" is the earliest note that names something; "last" is the latest. Our history may start partway through Iru's life, so an old integration can show a recent first-seen date.
Each change counts once: "added 40 checks" is one line, so the numbers measure how often coverage moves, not how big the catalogue is or how well it detects.
Releases
Coverage in all entries
88 entries
No entries match these filters.
November 20261
October 202634
September 202623
August 202616
July 202614
Add the badge to your README
Maintain this project? The badge links readers straight to this page, so they can
follow every release here.