Patch state, configuration drift, DNS resolution, and the devices nobody remembered to count. Endpoint management is where breaches are quietly prevented and where postmortems quietly end. Four published rates spread over N-able N-sight, Addigy, and Zimperium, every one of them counting its own category of equipment.
Three things worth understanding about this program before you price it, written for somebody who will be asked to defend the decision internally.
N-sight applies operating system and third party updates on a schedule you set and then reports what actually took. The reporting matters more than the applying: an estate where ninety-four percent of machines are current and you know precisely which six percent are not is in a different position from one where nobody can say.
DNS filtering refuses to resolve categories and known-bad domains, so a hostile destination is never reached rather than reached and then judged. It is priced apart from the management line because the estates that need it hardest are rarely the whole estate.
Apple hardware is managed in Addigy against Apple's release cadence, not approximated by a tool built for Windows. Mobile devices carry Zimperium, which detects on the handset instead of routing personal traffic through an inspection service. Each platform gets the tool that was designed for it.
Each control is priced against its own unit and can be bought without the others. Rates come live from the billing catalog. Anything added here is held in the schedule and checked out from the rate schedule.
N-able N-sight installed on the machine, handling monitoring, patching for the operating system and for third party software, remediation by script, and an inventory of assets. This is the line that keeps a fleet current and, more usefully, tells you exactly which machines are not and how far behind they have fallen.
DNS filtering delivered through the same N-sight agent, refusing to resolve categories and known-bad domains so a hostile destination is never reached in the first place. Held as its own line so it can be applied where it earns its keep instead of switched on everywhere by default.
Addigy for Apple hardware: enrollment, configuration profiles, macOS and iOS update enforcement, and software deployment against Apple's own release cadence. Apple estates run through tooling designed for Windows drift within a release or two, and this line exists so yours does not.
Zimperium running on the handset or tablet, catching a compromised device, an application behaving badly, a network that should not be trusted, and phishing arriving by any route other than email. Detection happens on the device rather than by routing traffic through an inspection service, which keeps personal use private on a handset that is also somebody's phone.
Management is a broad word and it is used loosely in this industry. Here is what these four lines do not carry.
Nobody puts endpoint management in a board deck. It is nevertheless the program whose absence appears most often in the timeline of an incident.
Any program can be bought on its own. Most estates end up running several, and the reason they work well together is that one desk operates all of them.
Heads up: card statements show FORTIFY 24X7 - Enterprise Secure Systems is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.