Know every piece of software on every Mac, whoever installed it.
Developers install what they need, when they need it, and most of it never passes through IT. Visibility gives you one live inventory of the software across your fleet, so you can say what's on any Mac without asking the person using it.
- Free on the Team plan, with no device or user limits
- Group views with Business
The problem
Your MDM knows which Macs you own. It doesn't know about the command-line tools, packages, and extensions people install for themselves every day. That's the software that ends up in security questionnaires and incident reviews, and today the only way to find it is to go and ask.
What you get
One inventory for every kind of software.
Homebrew formulae and casks, npm packages, VS Code extensions, and macOS apps all show up in the same list. Filter by source, or see everything at once, without stitching together reports from separate tools.
Find any package, on any device, in seconds.
Search the fleet for a package or a specific version and get back every device running it. When an advisory comes out, you know straight away who's affected and who isn't.
See what each package pulled in.
A package rarely arrives alone. Workbrew shows the dependencies each one pulled in and how they relate, and tells apart what someone asked for from what was installed as a dependency.
Every device, down to the detail.
Drill into a single Mac to see its users, what they can install, and exactly what's on it. Known vulnerabilities are flagged across the fleet automatically.
How it works
The Workbrew Agent runs on each Mac and reports the software installed on it every time it checks in, about every 15 minutes while the Mac is awake. Reporting changes nothing on the Mac, so you can see the whole fleet before you manage any of it.
Workbrew brings those reports together into one inventory and matches every package against public vulnerability databases as new advisories come in. You see the whole fleet, and any device in it, from the console.
Frequently Asked Questions
No. A device starts out read-only: the Agent reports the software installed on it and the vulnerabilities in it, and receives no commands, default software, or policies. Nothing changes on the Mac until you choose to let Workbrew manage it.
Homebrew formulae and casks, npm packages, VS Code extensions, and macOS apps. A Mac without Homebrew still reports everything else it has installed.
Workbrew detects known vulnerabilities on every plan, and the Team plan shows a summary of where your fleet stands. The details behind it, such as package names and CVE identifiers, come with Vulnerability Patching, Business, and Enterprise.
Deploy Workbrew free
See everything your fleet runs, on the free Team plan.