Device controls your auditors can read for themselves
Brokers, lenders, wealth managers and fintechs answer to regulators and auditors who want evidence, not assurances. Purple MDM gives them an audit log of every admin action, compliance reports over time, an event stream into your SIEM, and a network that keeps a failing device off until it is fixed.
Sign in to enrol
- Device
- MacBook Air
- Work email
- sam@example.org
- Enrol this device
No links or profiles to send. The device enrols from the email alone.
What you are up against
Evidence on demand
Who did what, when
An auditor wants every admin action and every command with a name against it, and most consoles cannot produce it.Admin rights that never expire
Standing local admin on trading floor and back office PCs is a finding waiting to happen.A failing device on the network
An unencrypted or unpatched laptop stays on the staff network until someone notices.
How Purple MDM is set up
How Purple MDM is set up for a regulated firm
- An audit log and an event streamEvery admin action and command logged with who did it, and signed webhooks and an event stream carrying every enrolment, command, compliance change and admin action to your SIEM.
- Admin rights and local passwordsManaged local admin passwords rotated after each use, and admin rights granted for a set time on approval, then removed.
- Roles that match your controlsAdmin, Helpdesk (lock and fix, no wipe, no recovery keys) and Read only for compliance and audit.
- Network enforcementWith Purple Access, a device that fails a check is moved to a safe network and let back only when it passes.
See everything Purple MDM doesWorkplace WiFi on Purple Access
Security baseline · Office PCs
- BitLocker with key escrowOn
- Windows LAPSOn
- Defender and firewall baselineOn
- Screen lock after 5 minutesOn
- Local admin rights time-limitedOn
- Developer modeBlocked
Meets the baseline
OFFICE-PC-014OFFICE-PC-022OFFICE-PC-031Still missing
OFFICE-PC-009: BitLocker offThe fleet
The regulated fleet
- Desk and trading floor PCsBitLocker, Windows LAPS, update rings, a Defender and firewall baseline.
- MacsFileVault with key escrow, a managed admin account, company sign-in.
- PhonesCompany devices fully managed; personal phones with a work area.
- The SIEMAn event stream and signed webhooks for every change.
- The auditorsRead-only access and exportable reports over time.
- The networkDevice health shared with Purple Access.
FAQ
Questions we hear from teams like yours
Can our auditors see the evidence directly?
Yes. The Read only role sees inventory, compliance reports and the audit log without the ability to change anything, and reports export.
Does Purple MDM feed our SIEM?
Yes. Signed webhooks and an event stream carry every enrolment, command, compliance change and admin action.
Is Purple MDM certified?
Purple MDM does not advertise certifications until each one is confirmed. Ask the Purple team for the current position before you rely on one.
Can a wipe require two people?
Yes. A wipe can require a second admin's approval, and the Helpdesk role cannot wipe at all.
Other industries
Small business
A mixed fleet of Macs, PCs and phones run by whoever has the time, not a specialist.Corporate offices
Every laptop encrypted, patched and signed in with the company identity, with the evidence kept.Professional services
Encrypted, patched laptops with the evidence a client's security questionnaire asks for.
See every device in one console, on your own fleet
Tell us which devices you run, how many, and what you manage them with today. The Purple team shows you Purple MDM on a fleet like yours: zero-touch enrolment, a change previewed and undone, a failed check explained in a sentence, and a device moved off the network and back. Already a Purple customer? Sign in to the app with your Purple account.
- We map your fleetA Purple expert maps your platforms, your groups and how devices arrive today, and answers your questions on enrolment, data regions, roles and migration.
- You see it on devices like yoursA demo of zero-touch enrolment, a previewed change, a failed check explained in plain English and, with Purple Access, a device moved off the network and back.
- You get your quotePriced per device, per month, for the platforms you run, direct or through your Purple partner, with a move in waves planned if you are coming from another MDM.
Your demo
Tell us your fleet. We show you Purple MDM running it.
A Purple expert comes back to book a demo on devices like yours, from the team behind Purple WiFi and Purple Access.