Keep everything current, without chasing anyone to update.
Software Updates lets everyone keep their own tools up to date without admin rights, and brings the rest of the fleet current on a schedule you set. Updates stop depending on someone remembering to run them.
- Free on the Team plan, with no device or user limits
- Automatic and scheduled updating with Business
The problem
Out-of-date software is where known vulnerabilities live, and on most fleets updating is left to each person. Standard users can't update without admin rights, admins don't want to hand those out, and the tools that need it most are the ones nobody's looked at in months.
What you get
Updates without handing out admin rights.
Standard users can install and update their software without sudo, so nobody needs local admin just to keep their tools current. Workbrew handles the elevated steps itself, in a narrow and controlled way.
Out of date is easy to see, and easy to fix.
The Workbrew app shows people what's out of date on their Mac and lets them update it in a click. Developers who'd rather stay in the terminal update the way they always have.
Upgrades on your schedule, not theirs.
On Business, Automatic Upgrades brings outdated software current across the fleet daily, weekly, or monthly. Pick which kinds of software it covers and which device groups it targets, and run it outside working hours.
How it works
Workbrew gives each person on a managed Mac permission to run updates without admin rights. When something's out of date, they can update it from the Workbrew app or the terminal.
On Business, an Automatic Upgrades policy does it for them. Each device picks up the schedule at its next check-in and upgrades the formulae, casks, npm packages, and VS Code extensions you chose, so the whole fleet stays current without anyone running a thing.
Frequently Asked Questions
No. With managed access turned on, Workbrew lets the people on each managed Mac install and update software without local admin rights. Workbrew handles the steps that need elevated privileges itself.
Business and Enterprise. On the free Team plan, people update their own software from the Workbrew app or the terminal. Automatic Upgrades, which brings the fleet current daily, weekly, or monthly, starts on Business.
Vulnerability Patching fixes software with known vulnerabilities, at the severity you choose, as soon as a device checks in. Software Updates keeps everything current, vulnerable or not, on a schedule. Many teams use both.
Deploy Workbrew free
Keep every Mac current, starting on the free Team plan.