Cross-platform device management

Secure every device. From one console.

Xavier enrolls, configures, secures, and monitors Mac, iPhone, iPad, Apple TV, Android, and Windows devices, all from a single admin console built on each platform's native management protocol.

Get in Touch → Explore security

Manages

macOS iOS iPadOS tvOS Android Windows

Xavier MDM - Dashboard

Xavier dashboard showing a fleet of Mac, Android, iPad, iPhone, and Windows devices

One console. Every platform.

Xavier speaks each platform's native management protocol, so you can enroll, configure, and secure your whole fleet from a single console.

Apple

macOS, iOS, iPadOS, tvOS

The full Apple MDM protocol: Automated Device Enrollment, supervision, Declarative Device Management, configuration profiles, and volume app licensing.

Android

Device Owner

A standalone Device Owner agent provisioned by QR code, with no Google account required and full policy control over the device.

Windows

OMA-DM enrollment

Enroll and manage Windows devices over the native OMA-DM protocol, with configuration, inventory, and remote commands from the same console.

Security by design

Security at every layer

From the certificate that proves a device's identity to the encrypted keys only you can recover, security is built into every step, not bolted on after.

Identity and enrollment

A built-in SCEP service issues and renews each device its own identity certificate through challenge-based enrollment.

Encryption and key escrow

Manage FileVault on Mac, with recovery keys escrowed and encrypted at rest using AES-256-GCM. Keys are decrypted only on an authenticated request.

Posture monitoring

Track FileVault, System Integrity Protection, firewall, Gatekeeper, Secure Boot, BitLocker, and Windows Defender health across the whole fleet, and catch drift before it becomes a problem.

Dependency vulnerability scanning

Scan project dependencies for known vulnerabilities and outdated npm packages, and remediate them straight from the console.

Response on demand

Lock, erase, clear a passcode, or place a device in Lost Mode on demand. Commands stream to the device and report their results back.

Access control and audit

Admin access is protected by JWT and httpOnly sessions with role-based permissions, and every command is recorded in a full audit trail with the user who sent it.

Device detail - security and posture

Xavier device detail page showing enrollment status, supervision, certificates, and a security tab

Dependency vulnerability scan

Xavier scanning project dependencies and flagging known vulnerabilities and outdated packages

Xavier MDM - Homebrew packages

Xavier managing Homebrew packages on a Mac, with installed packages, available updates, and fleet-wide taps

Package management

Manage the software, not just the device

Xavier manages packages across Homebrew, npm, Python pip, and Ruby Gems on every Mac in your fleet. See exactly what is installed, push installs and updates, and keep software current from one console, because outdated packages are a security problem.

Cover Homebrew, npm, Python pip, and Ruby Gems
Install, update, and remove packages remotely
Spot available updates across the fleet at a glance
Keep a complete software inventory for every device

Everything you need to run a fleet

Zero-touch enrollment

Devices configure themselves out of the box: Automated Device Enrollment for Apple, QR provisioning for Android Device Owner, and guided enrollment for Windows. Users power on and get to work already secured to policy.

Configuration profiles and DDM

Push Wi-Fi, VPN, restrictions, and FileVault settings with a visual profile builder, plus modern Declarative Device Management.

App distribution

Deploy App Store and volume-purchased apps and push custom packages to devices, all remotely.

Native macOS agent

A lightweight menu bar app reports inventory, security state, and installed packages in real time. It runs without root by default, with an optional root agent only when privileged tasks need it.

Remote commands

Lock, wipe, restart, install, and inventory on demand. Commands stream to devices and report back their results.

Compliance reporting

See which devices meet your policies at a glance. Compliance and activity reports surface drift before it becomes a problem.

Digital signage

Turn managed iPads, Apple TVs, and Android tablets into signage displays, pushing content and schedules to screens from the same console you use for everything else.

How it works

From a device powering on for the first time to ongoing day-to-day management, Xavier handles the full lifecycle.

Enroll

A device enrolls through Automated Device Enrollment, a QR code, or a profile. Xavier issues its identity certificate and registers it.

Configure

Profiles, restrictions, and apps deploy automatically, so the device reaches the user already set up to policy.

Secure

Encryption turns on, keys are escrowed, and posture checks confirm the device meets your security baseline.

Monitor

Devices report inventory and security status on a schedule. You watch compliance, run commands, and push changes as needed.