Most popular

Express Pro Enterprise Ultimate Ultra

$1.08 billed $1.8 billed $2.7 billed $3.6 billed $5.4 billed
Feature list
annualy annualy annualy annualy annualy
$1.2 billed $2 billed monthly $3 billed monthly $4 billed monthly $6 billed monthly
monthly
14 DAY FREE TRIAL 14 DAY FREE TRIAL 14 DAY FREE TRIAL 14 DAY FREE TRIAL
14 DAY FREE TRIAL

All prices are shown per device/month basis

Enrollment

Self-enrollment

Batch enrollment

SMS enrollment

Quick enrollment without authentication

QR code enrollment

ROM-based enrollment

DEP enrollment

Samsung Knox Enrollment

Android zero-touch enrollment

Apple Configurator enrollment

User Enrollment (iOS)

Enroll with Google Workspace account

Pre-approved enrollment

Add admin users in DEP deployed Mac

devices

Android in the Enterprise

Silent app install

Automatic OS update

Containerization

App configurations

App permissions

Play store layout setting

Remote Actions

Scan device
Scan device location

Lock device

Clear passcode

Wipe device

Clear activation lock

Disenroll device

Install application

Change owner

Rename device

Broadcast message

Set friendly name

Switch ownership after enrollment

Disable kiosk mode (Android)

Enable kiosk mode (Android)

Power Off device

Restart device

Remote Ring

Enable Personal Hotspot (iOS)

Disable Personal Hotspot (iOS)

Enable Lost Mode

Disable Lost Mode

Uninstall application

Import contacts to device

Forced OS updation (iOS)

Set Ringtone (Android)

Delete pre-approved devices

Execute Custom Script (macOS, Windows)

Set new password (Android)

iOS Configurations and Actions

Passcode

Wi-Fi

VPN

Email

Exchange ActiveSync

LDAP

Web clip

Wallpaper

CalDAV

Calendar

CardDAV

APN

Airplay

AirPrint

Lock screen message

Global HTTP Proxy

Fonts

Domain Marking

Configure app notifications

Web content filtering

Certificates

Google account configuration

OS updates

Containerization (Basic)*

Home screen layout

Containerization (Advanced)*
Deploy configurations from .mobileconfig
file*

iOS Essential Restrictions

Allow use of camera

Allow FaceTime

Allow screen capture

Touch ID

Allow Siri

Allow Siri while device locked

Allow voice dialing

Allow automatic sync while roaming

Allow multiplayer gaming

Hide App Store from the device

Allow use of iTunes Store

Force user to enter iTunes store password

for each purchase

Allow in-app purchase

Allow trust enterprise app

Block users from modifying enterprise app

trust

Allow backing up enterprise-deployed

iBooks

Allow syncing managed app data with

iCloud

Allow use of YouTube

Allow Safari

Enable autofill

Force fraud warning

Enable JavaScript

Block pop-ups

Accept cookies

Allow Apple Wallet while device locked

Allow adding Game Center friends

Allow backup to iCloud

Allow document sync

Allow Photo Stream

Allow sharing Photo Streams

Allow iCloud Photo Library

Allow syncing enterprise book metadata

across devices

Block sharing managed documents using

AirDrop

Allow lock screen notifications

Allow Today View in lock screen

Allow Control Center in lock screen

Allow Over-the-air PKI updates

Limit ad tracking

Allow sending diagnostic data to Apple

Allow user to accept untrusted TLS

certificate

Force encrypted backup

Show notification on Apple Watch if worn

Allow opening documents from managed

apps in unmanaged apps (iOS 7+)

Allow opening documents from

unmanaged apps in managed apps (iOS
7+)

Allow explicit music, podcasts and iTunes

U services

Allow iBooks erotica

Set rating region

Movie ratings

TV show ratings

Apps ratings

iOS Advanced Restrictions

Allow AirDrop (7+)

Allow app cellular data usage modification

(7+)
Allow adding or removing Touch ID

Allow iMessage (6+)

Allow Game Center (6+)

Allow pairing with iTunes (7+)

Allow configuration profile installation

(6+)

Allow definition lookup (8.1.3+)

Allow predictive keyboard (8.1.3+)

Allow auto correction

Allow spell check

Allow keyboard shortcuts (9+)

Allow pairing with Apple Watch (9+)

Allow diagnostic submission settings

modification (9.3.2+)

Allow Bluetooth settings modification

(10+)

Allow using voice to type (10.3+)

Force MDM-configured Wi-Fi networks

(10.3+)

Allow creation of VPN configurations

(11+)

Allow AirPrint (11+)

Allow iBeacon discovery of AirPrint

printers (11+)

Allow storing Airprint credentials in

Keychain (11+)

Force use of trusted certificates for secure

printing (11+)

Allow installing apps from App Store (9+)

Allow removing apps

Allow Removal of System Apps (11+)

Allow iBooks store (6+)

Allow Apple Music (9.3+)

Allow iTunes Radio (9.3+)

Allow News (9+)

Allow Podcasts (8+)

Allow downloading purchased apps

automatically (9+)

Allow account modification

Allow erase content and settings

Allow Siri to access user-generated

content (7+)

Allow modifying Find My Friends (7+)

Force use of profanity filter

Allow Spotlight internet results

Allow changing wallpaper

Allow modifying restrictions

Allow modifying passcode (9+)

Allow modifying device name (9+)

Allow users to turn notifications on/off

(9.3+)

Force software update delay

Android Configurations and Actions

Password

Wi-Fi

Email

Exchange ActiveSync

APN

Wallpaper

OS updates

Password for Android container

Web content filtering

Certificates

Global HTTP proxy

Boot/Shutdown Animation

OEM feedback channel (Managed Google

Apps)
Hexnode Launcher (Basic)*

Hexnode Launcher (Advanced)*

Android Essential Restrictions

Allow use of camera

Allow USB Mata Storage Mode

Enable Home button (Samsung Knox)

Allow Power Off (Samsung Knox)

Allow safe mode

Allow Airplane Mode (Samsung Knox)

Allow lock screen shortcuts (Samsung

Knox)

Allow lock screen widgets (Samsung

Knox)

Change screen orientation

Allow Wi-Fi (LG GATE)

Allow Bluetooth (LG GATE)

Allow mobile data (LG GATE)

Allow mobile data while roaming

Allow users to turn 'Mock Location' on/off

Allow users to turn GPS on/off (Samsung

Knox & LG GATE)

Force GPS to fetch location (Samsung

Knox & LG GATE)

Block MDM Administration removal

(Samsung Knox & LG GATE)

Allow backup

Android Advanced Restrictions (Samsung Knox, Android in the Enterprise)

Allow microphone (Device Owner, Profile

Owner)

Allow screen capture (Samsung Knox,

Device Owner, Profile Owner)

Allow clipboard (Samsung Knox)

Copy contents between normal and work

profiles (Profile Owner)

Allow share via other apps (Samsung

Knox)

Allow users to adjust volume (Device

Owner)
Allow outgoing calls (Device Owner)

Hide system bars (Samsung Knox)

Hide status bar (Samsung Knox)

Hide navigation bar (Samsung Knox)

Allow NFC (Samsung Knox)

Allow Android Beam (Samsung Knox)

Allow outgoing beams (Device Owner,

Profile Owner)

Allow Bluetooth configuration (Device

Owner)

Allow Bluetooth data transfer (Samsung

Knox, Device Onwer, Profile Owner)

Allow cell broadcast configuration (Device

Owner)

Allow cellular network configuration

(Device Owner, Profile Owner)

Allow resetting network settings (Device

Owner)

Allow Wi-Fi configuration (Device Owner,

Profile Owner)

Allow hotspot and tethering (Samsung

Knox, Device Owner)

Allow USB Tethering (Samsung Knox)

Allow Wi-Fi Tethering (Samsung Knox)

Allow Bluetooth Tethering (Samsung Knox)

Allow background data sync (Samsung

Knox)

Allow syncing data with Google accounts

(Samsung Knox)

Allow incoming SMS (Samsung Knox,

Device Owner)

Allow sending SMS (Samsung Knox,

Device Owner)

Allow creating/deleting users and

accounts (Samsung Knox, Device Owner,
Profile Owner)

Allow user credential configuration

(Device Owner, Profile Owner)

Allow Developer Mode (Samsung Knox)

Allow USB Debugging (Samsung Knox,

Device Owner)

Allow modify Settings (Samsung Knox)

Allow Power Saving mode (Samsung

Knox)
Allow location sharing (Device Owner,
Profile Owner)

Allow factory reset (Samsung Knox,

Device Owner)

Allow physical external media (Device

Owner, Profile Owner)

Auto update date and time (Device

Owner)

Auto-update time zone (Device Owner)

Disable screen lock (Samsung Knox)

Allow VPN configuration (Samsung Knox,

Device Owner, Profile Owner)

Allow app installation (Samsung Knox,

Device Owner, Profile Owner)

Allow app uninstall (Samsung Knox,

Device Owner, Profile Owner)

Allow app control (Device Owner, Profile

Owner)

Allow Google Play Store (Samsung Knox)

Allow app verification before install

(Device Owner, Profile Owner)

Allow/disallow installing apps from

unknown sources (Samsung Knox, Device
Owner, Profile Owner)

Grant/deny app runtime permissions

(Device Owner, Profile Owner)

Parent profile app linking (Device Owner,

Profile Owner)

Bypass Factory Reset Protection (Device

Owner)

App downgrade (Samsung Knox, rooted

Android)

Automatically power on a device when

USB is connected

Automatically power off a device when

USB is detached

Accessibility Restriction

Minimum security level to establish Wi-Fi

connection

Lock Screen Customizations

Apple TV Configurations and Actions

Restart device

Wipe device

Update OS

Wi-Fi
Conference Room Display

AirPlay Security

Certificates

Global HTTP Proxy

Deploy configurations from .mobileconfig

file*

Laptop Support

Mac support

Windows desktop/laptop support

App management for Mac

App management for Windows

macOS Configurations and Actions

Shut down device

Restart device

Clear Activation Lock

Push System Extensions

Push Kernel Extensions/KEXT

Update OS

Passcode

Wi-Fi

CalDAV

Certificates

FileVault

VPN

Email

Exchange ActiveSync

LDAP

Firewall configuration

Time limit
AirPrint

Smartcard settings

Login window customization

Setup assistant

Screensaver

CardDAV

AD Asset Binding

Web content filtering

App configuration

Content caching

Live Terminal

Enable Activation Lock

Configure app-wise system preferences

Wallpaper

Deploy configurations from .mobileconfig

file

Remote view*

Remote control*

Mac Essential Restrictions

Auto-unlock with Apple Watch in proximity

Allow use of Touch ID

Definition lookup

Allow AirPrint

Use trusted certificates for secure printing

Connect with iBeacon

Stream using Music app

Allow Camera

Allow Game Center

Allow adding friends in Game Center

Allow modifying Game Center account

Allow multiplayer gaming

Disable software update notifications

Allow Back to My Mac

Allow Find My Mac

Allow iCloud Mail

Allow use of Calendar

Allow Reminder

Allow use of Address Book

Allow Notes

Auto-upload files in Desktop and

Documents to iCloud

Sync bookmarks with iCloud

Sync document and key-value

Sync passcode

Photo Library

Block connecting external media to the

device

Set a password to remove MDM profile*

Mac Advanced Restrictions

Restrict app installations to users with

admin privileges

Restrict software updates

Allow App Store app adoption

Restrict to MDM-installed apps and

software updates

App verification before install*

Windows Configurations and Actions

Password

Wi-Fi

Email

Exchange ActiveSync
Windows BitLocker

VPN

Configure Registry keys*

Lock device with a custom launcher*

Remote view

Remote control*

Windows Essential Restrictions

Allow use of camera

Allow copy and paste text between apps

Allow Cortana voice assistant

Allow/disallow Cortana when device is

locked

Allow storage card

Allow Telemetry

Allow location services

Block users from renaming the device

Allow changing language

Allow voice recording

Allow enabling/disabling Workplace

Allow auto-play

Allow sync MySettings

Allow sharing Microsoft Office files

Allow saving as Microsoft Office files

Allow notifications on Action Center

Allow Internet Explorer or Microsoft Edge

Allow sign in options

Allow Wi-Fi

Allow Bluetooth

Allow device discovery over Bluetooth

Allow VPN

Allow connecting to VPN over mobile

network

Allow connecting to VPN if roaming

Allow cellular data roaming

Hide toast notifications from lock screen

Allow MMS

Allow MMS sync

Allow RCS messaging

Allow OneDrive file sync

Allow manual MDM administration

removal

Windows Advanced Restrictions

Require device encryption

Allow NFC

Allow USB Connection

Allow user to reset device

Allow screen capture

Allow users to change date and time

Allow changing power and sleep settings

Allow embedded mode

Allow choosing region

Allow use of Windows Store

Allow unlocking developer options

Allow Safe Search

Allow Search to use location

Allow storing images from Vision search

Allow adding non-Microsoft accounts

manually

Allow Internet Sharing

Allow auto-connect to Wi-Fi Sense

Allow connecting to external Wi-Fi
networks manually

Allow Wi-Fi Direct

Allow Data Sense

Allow manual root certificate installation

Allow installation of provisioning package

Mandate signed certificate for

provisioning package

Allow romoval of provisioning package

Receive ads over Bluetooth

Allow device to pair with other devices

over Bluetooth

Allow Windows beta updates

Show Documents folder in Start menu

Show Downloads folder in Start menu

Show File Explorer in Start menu

Show Home group in Start menu

Show Music folder in Start menu

Show Networks in Start menu

Show Pictures folder in Start menu

Show Settings in Start menu

Show Videos folder in Start menu

Show Personal folder in Start menu

Kiosk Mode

iOS and Android basic kiosk (enable kiosk

mode)

Quick Enrollment without authentication

Enterprise app management (install,

upgrade, downgrade) without exiting
kiosk

Add web apps (Android, iOS)

Apple TV kiosk

Windows kiosk
ADVANCED iOS KIOSK

Open web apps in Safari

Open web apps in Hexnode Browser Lite

Single app kiosk mode

Multi app kiosk mode

Autonomous single app mode

Disable touch

Disable device screen rotation

Disable volume buttons

Disable ringer switch

Disable sleep wake button

Disable auto lock

Enable voice over

Enable zoom

Enable invert colors

Enable assistive touch

Enable speak selection

USER ENABLED OPTIONS (iOS 7.0+)

Voice over

Zoom

Invert colors

iOS WEBSITE KIOSK SETTINGS

Disable back button

Disable close button

Wallpaper (Multi app)

ADVANCED ANDROID KIOSK

Open web apps in Hexnode Browser Lite

Multi-app kiosk mode

single app kiosk mode

Enable multi tabbed browsing (Hexnode

secure browser)

Allow other browsers

Allow user control of Wi-Fi

Allow connecting to available Wi-Fi

networks

Allow adding hidden Wi-Fi Networks

Block users from deleting saved Wi-Fi

network

Allow Wi-Fi hotspot

Enable mobile data in kiosk

Choose preferred network type

Allow user control of Bluetooth

Disable system bars on rooted devices

Enable/disable status bar in kiosk

Keep screen On

Block users from changing brightness

Allow user control of device brightness

Set brightness level

Disable power button

Change /enforce volume

Disable recent apps button

Allow app crash reporting

Clear apps from background when users

leaves the app

Allow app downgrade

Enable user location check-in

Enable Hexnode Messenger

Flashlight control
Turn Airplane Mode On/Off

Show device and server details on device

Disable software keys

App auto-launch

Hide app icon

Show blocked package details

Allow permissions page

Allow device sync

Install apps from Play Store while in kiosk

Kiosk wallpaper

Allow exiting kiosk from the device

Kiosk exit configurations in Peripheral

Settings

Set screen orientation*

Scroll and pagination in launcher*

Force mandatory app installation

View app catalog in kiosk

Lock task mode

Hexnode Document Viewer

Hexnode Video Player and Image Viewer

Customise launcher layout

Stop non-kiosk apps running in the

background

Relaunch active app on inactivity

Clear app data on launch

Reload active app on inactivity

Hexnode Inbox*

Hexnode Calendar*

Basic screensaver configurations*

Advanced screensaver configurations

Digital signage display

Kiosk Screensaver

Advanced Kiosk Launcher

Title branding in kiosk

Change Password option in Peripheral

Settings

ANDROID WEBSITE KIOSK SETTINGS

Open web apps in the browser of your

choice

Whitelist URLs in Hexnode Browser Lite

and Hexnode Browser

Open web apps in full screen

Refresh web apps periodically

Show/hide Back button

Show/hide Forward button

Show/hide Reload button

Show/hide Home button

Show Print icon

Show 'Clear Session' option

Show web web app on the toolbar

Browser theme color

Set screen orientation

Pinch-to-zoom web page

Overview mode

Wide viewport

Custom display mode for Hexnode

Browser Lite

Auto-refresh web apps when inactive

Ignore SSL errors

Remote debugging
Allow/disallow JavaScript

Auto-play view

Allow/block file upload

Capture and upload image

Enable/disable cache

Clear cache remotely

Clear cookies remotely

Clear web storage remotely

Clear browsing history remotely

Clear forms on page reload

Save form data

Allow/disallow web apps to use location

services

Disable keyboard and navigation bar

Disable back button

Disable text selection

Prompt exit from Hexnode Kiosk Browser

Block downloads on Hexnode Kiosk

Browser

Keep download history

Open links in new/existing tab

Set number of tabs

Idle timeout when playing media

Private browsing

Customize Hexnode kiosk browser

settings

Customize Hexnode browser lite settings

WINDOWS KIOSK

Single app kiosk

Multi app kiosk

ADVANCED APPLE TV KIOSK

Disable Touch

Disable auto lock

Enable VoiceOver

Enable zoom

Enable invert colors

USER ENABLED OPTIONS (tvOS 7.0+)

Voice over

Zoom

Invert colors

App Management

Android & iOS app management

Apple TV app management

Windows & Mac app management

App Wrapping*

Native apps for containerization (iOS)*

Hexnode Inbox*

Hexnode Calendar*

Android & iOS App Management

App installation

App uninstallation

Install and update enterprise apps

App uploading with Manifest URL

Mandatory apps

Silent app installation

App blacklisting

App whitelisting

Downgrade enterprise apps

App group

VPP management

App catalog

App configuration deployment (iOS)

tvOS App Management

App installation

Mac App Management

VPP app installation

Enterprise app installation

Mandatory apps

Enterprise app installation using DMG files

App blacklisting

App whitelisting

App configurations

Windows App Management

App installation from Windows store

Enterprise app installation

Mandatory apps

MSI app installation with arguments*

App blacklisting

App whitelisting

Remote Management

Remote view

Remote Control

File Management

File Management

Remote file manager

All Files
Media and Documents as Kiosk Files

Location Tracking

Location view of a single device on a map

Location History

Delete location history

Allow users to push current location from

the device

Location view of a defined group on a

map

Enable or Disable Mock Location (Android)

Export location history

Location filter

Geofencing

Offline location tracking*

Location history retention 15 days 60 days 90 days 120 days 365 days

Mac Hexnode Agent

Broadcast message

Location tracking

App catalog

Mobile Data Management

Data usage reports

Restrict cellular data usage

Restrict cellular data usage on roaming

Set data usage limit

Data usage alerts

Data usage restriction

Call history*

90-day Cellular/Wifi Data retention (iOS &

Android)**

Group Policy Management

User and device groups

Dynamic Groups

Dynamic group manual sync

Custom Groups

Dynamic group filters

AD Groups

Windows GPO*

Dynamic group auto sync 4 hours 1 hour 15 minutes 5 minutes

Active Directory Integration

AD import of users and groups

AD based policy management

AD based group management

AD based self enrollment

AD based Dashboard customization

AD sync scheduling

Azure AD

Multiple domain support

Reports

Device reports

User reports

Location reports

Compliance reports

Application reports

Filters and Export

Data management reports for (devices,

device groups and) apps

Audit Reports

Scheduled Reports

Policy Management

Archive Policy
Policy templates

Integrations

API support

Apple DEP

Apple VPP

Okta

SCCM (ConfigMgr) integration

Notifications and Alerts

Low battery alert notifications in the

portal

Compliance alert on home screen

Low battery email alerts

Event notifications by email

Alert on inactivity Days Days Days, Hours, Days, Hours, Days, Hours,

Minutes Minutes Minutes

Action/Activity history retention* 15 days 60 days 90 days 120 days 365 days

Multi Login and Roles

Enter CAPTCHA after 3 failed login

attempts

Two step verification for admin login

Multiple Technicians login

Predefined roles

Configure CAPTCHA settings

Technician SSO using Google, Microsoft

and Okta

Custom roles (Basic – permission control

for a tab as a whole)

Custom roles (Advanced – separate

permission control for each option within
the tab)

Number of Technicians 1 2 3 4 5

Brand Customization

Header logo

Login page logo

Favicon Icons
Custom Device Scan

Basic device scan (location, battery level,

reported time)

Advanced scan*

Intelligent MDM*

Automation*

Workflow and approval (basic)*

Custom alerts*

Create Custom Attributes with custom

labels and values*

Workflow and approval (advanced)*

Windows OS Deployer*

Mac OS Deployer*

Self Service*

Enrollment via Self Service Portal*

User management functions*

Local user management*

Threat Management*

Threat management*

Mobile App Reputation Service (MARS)*

*Coming
soon