Features

BrewMDM gives a team one place to manage Homebrew across a fleet of Macs while keeping the control plane on infrastructure the team operates.

Fleet inventory

See the formulae and casks installed on each Mac, the versions in use, packages that are out of date, and the drift between a device and its assigned policy.

Signed policy and offline enforcement

Policies are signed before an agent accepts them. An enrolled Mac keeps enforcing the policy it has already received while it is away from the network, then reconciles when it returns.

Vulnerability intelligence

Package inventory is joined to vulnerability information so an operator can identify affected Macs and decide which updates need attention first.

Self-service

People can request the software they need through a controlled self-service path. The request stays inside the policy and approval rules the team has set.

Rings and notifications

Move package changes through rings, from a small first group to the rest of the fleet, and notify the people responsible when an update needs their attention.

SCIM and SSO

Use SCIM to keep identity records current and SSO to give people access through the identity provider their organisation already uses.

Audit trail

Keep an audit trail of policy, device, identity, and administrator actions so an operator can answer what changed, when, and by whom.