You cannot defend an estate you have never counted.
Every security conversation collapses eventually into an inventory question. How many endpoints exist. Which of them missed the last patch cycle. Which laptop has not checked in since somebody resigned in March. Which phones are carrying company mail. Programs fall over on this far more often than they fall over on detection quality.
This family is the management layer that answers those questions, and it is deliberately four separate lines, because a Mac studio, a Windows office, and a fleet of field phones are not one problem and should not carry one price.
N-able for the fleet, Addigy for Apple, Zimperium for mobile.
N-able carries the remote monitoring and management agent: inventory, health, and patch state across Windows, macOS, and Linux, with scripted remediation and mobile device management for tablets and phones. Patching is the least glamorous control in this catalog and one of the very few whose absence turns up in almost every incident report ever written.
The web protection line rides the same agent. Filtering and category policy apply on the device, which is the distinction worth grasping: it travels with the laptop into a hotel and a home network, and it sees programmatic traffic as well as browser traffic, incognito sessions included. You get sites reached, their categories and reputations, and bandwidth consumed.
Addigy is Apple-native management rather than a Windows tool with a Mac checkbox bolted on. Configuration profiles, software deployment, security baselines, compliance state, and remote remediation across macOS and iOS, using the enrolment model Apple genuinely supports.
Zimperium puts threat defense on the handset. The detection engine runs on the device instead of depending on a cloud lookup, so it works on an aircraft and on a hostile network. It covers device compromise including jailbreak and root detection, network attack such as interception and rogue wireless, mobile phishing, and the risk profile of applications pulled from either store.
Where the mobile line earns its rate
Mobile is the estate people forget. The handsets hold mail, chat, documents, and the multi-factor prompts guarding everything else, and they are almost never on the corporate network, which means every control you built around that network simply does not reach them.
A phone carrying a hostile configuration profile, or connected through a rogue access point in an airport lounge, is a live route into the same tenant you have spent this catalog protecting. The defense has to live on the device, and it has to work without asking anything of the person holding it.
The lines in this family
Four lines / prices fetched liveRemote Management
per managed device| Function | Remote monitoring and management |
|---|---|
| Visibility | Health, inventory, and patching status |
| Platforms | Windows / macOS / Linux, plus MDM for tablets and phones |
| Remediation | Scripted and remote action from the management platform |
| Counted by | One managed device / monthly |
The base management agent. Nearly everything else in this family assumes something is keeping count of the estate.
DNS and Web Filtering
per managed device| Function | Web security, web filtering, and bandwidth monitoring |
|---|---|
| Enforcement point | On the device, so policy travels off the corporate network |
| Visibility | Browser and programmatic activity, incognito sessions included |
| Policy | Category and reputation based, with per-site rules |
| Reporting | Sites visited, categories, reputations, bandwidth used |
| Counted by | One managed device / monthly |
Added onto the management agent. Buy it for the devices you already manage.
Apple Device Management
per Apple device| Function | Apple device management |
|---|---|
| Platforms | macOS and iOS |
| Controls | Configuration enforcement, software deployment, security baselines |
| Compliance | Automated compliance controls with continuous visibility |
| Remediation | Remote remediation and policy automation |
| Inventory | Hardware and software inventory across the Apple fleet |
| Counted by | One Apple device / monthly |
For estates where Apple is a genuine population rather than an exception.
Mobile Threat Defense
per mobile device| Function | Mobile threat defense |
|---|---|
| Platforms | Android and iOS phones and tablets |
| Detection | On-device behavioral models, with no reliance on cloud connectivity |
| Device risk | Jailbreak and root detection |
| Network risk | Interception, rogue wireless, and tampering with secure communications |
| Application risk | Assessment of applications taken from either app store |
| Counted by | One mobile device / monthly |
The honest boundaries here
Management is not detection. An RMM agent will tell you a machine is missing patches. It will not tell you somebody is currently walking out with the accounting share. Do not read a green patch dashboard as security, and do not buy this family in place of Managed detection.
Web filtering is a strong control against commodity risk and a weak one against a determined intruder already holding local administrator on the device. It also does not open up encrypted traffic to look inside. It lowers exposure; it does not seal it.
Apple management needs the device enrolled, and mobile threat defense needs the application installed. On company-owned hardware that is a policy decision. On personal handsets it is a negotiation, and it is one to have before the invoice rather than after.
Heads up: card statements show FORTIFY 24X7 - CyberDefense is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.