> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rad.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Endpoint Management Integrations

> Connect your endpoint management platforms to RAD Security for unified device inventory, compliance posture, and device remediation.

# Endpoint Management Integrations

Integrate your endpoint (UEM/MDM) platforms with RAD Security to bring managed-device inventory and device compliance posture into a single, correlated view alongside your runtime, cloud, and Kubernetes security data — and trigger remediation on a device directly from RAD.

These integrations are **read-only for ingestion**: RAD Security pulls device inventory and compliance findings from your provider on a scheduled basis. The **one exception** is device remediation — RAD can trigger a remediation action on a device through your provider. That action is RBAC-gated, requires tenant write permission, and is recorded as an OCSF Device Control Finding for audit.

## Benefits

<CardGroup cols={2}>
  <Card title="Unified Device Inventory" icon="laptop">
    Aggregate managed-device inventory — hostname, OS, hardware, owner, and compliance state — from your endpoint platform into one dashboard.
  </Card>

  <Card title="Device Compliance Posture" icon="shield-check">
    Surface device compliance findings alongside cloud, runtime, and Kubernetes signals for end-to-end coverage.
  </Card>

  <Card title="Device Remediation" icon="screwdriver-wrench">
    Trigger a remediation action on a non-compliant or compromised device directly from RAD, gated by RBAC and audited.
  </Card>

  <Card title="Correlated Analysis" icon="diagram-venn">
    Correlate device posture with runtime and cloud detections to prioritize what matters.
  </Card>
</CardGroup>

## Supported Integrations

<AccordionGroup>
  <Accordion title="Automox" icon="laptop">
    **Status:** Available

    [View Setup Guide →](/rad-security/integrations/endpoint-management/automox-setup)

    Connect Automox to ingest device inventory and compliance findings, and trigger device remediation.

    **Key Features:**

    * Managed-device inventory
    * Device compliance findings
    * Device remediation actions
    * API token authentication (Organization ID required)
    * Scheduled data ingestion
  </Accordion>

  <Accordion title="Microsoft Intune" icon="microsoft">
    **Status:** Available

    [View Setup Guide →](/rad-security/integrations/endpoint-management/microsoft-intune-setup)

    Connect Microsoft Intune to ingest device inventory and compliance findings, and trigger device remediation.

    **Key Features:**

    * Managed-device inventory
    * Device compliance findings
    * Device remediation actions
    * Azure AD app registration (OAuth client) authentication
    * Scheduled data ingestion
  </Accordion>

  <Accordion title="Iru" icon="laptop">
    **Status:** Available

    [View Setup Guide →](/rad-security/integrations/endpoint-management/iru-setup)

    Connect Iru to ingest device inventory and compliance findings, and trigger device remediation.

    **Key Features:**

    * Managed-device inventory
    * Device compliance findings
    * Device remediation actions
    * API token authentication
    * Scheduled data ingestion
  </Accordion>

  <Accordion title="Jamf Pro" icon="apple">
    **Status:** Available

    [View Setup Guide →](/rad-security/integrations/endpoint-management/jamf-pro-setup)

    Connect Jamf Pro to ingest device inventory and compliance findings, and trigger device remediation.

    **Key Features:**

    * Managed-device inventory
    * Device compliance findings
    * Device remediation actions
    * OAuth 2.0 client-credentials authentication
    * Scheduled data ingestion
  </Accordion>
</AccordionGroup>

## What Data is Collected

<AccordionGroup>
  <Accordion title="Device Inventory" icon="laptop">
    Managed devices pulled on a schedule, mapped to **OCSF Device Inventory Info (5001)**.

    * Hostname, operating system, hardware, serial number
    * Device owner and management state
    * Managed / compliant flags and risk level
    * First-seen and last-seen timestamps
  </Accordion>

  <Accordion title="Compliance Findings" icon="shield-exclamation">
    Device compliance posture, mapped to **OCSF Compliance Finding (2003)** and stored as security findings.

    * Compliance state per device and policy
    * Severity and finding context
    * Feeds unified posture analysis and RADBot
  </Accordion>

  <Accordion title="Device Remediation" icon="screwdriver-wrench">
    The **one write capability** — RAD is otherwise read-only. RAD can trigger a remediation action on a device through your provider.

    * Gated by RBAC (requires tenant write permission)
    * Recorded as an **OCSF Device Control Finding** for audit
    * Action and result captured (actor, device, action, result, timestamp)
  </Accordion>
</AccordionGroup>

## Use Cases

<CardGroup cols={2}>
  <Card title="Compliance Management" icon="shield-check">
    Track device compliance gaps from discovery through remediation across your managed fleet.
  </Card>

  <Card title="Asset Visibility" icon="laptop">
    Use managed-device inventory to understand your endpoint estate and reduce the device attack surface.
  </Card>

  <Card title="Threat Response" icon="screwdriver-wrench">
    Trigger remediation on a non-compliant or compromised device directly from RAD, audited end to end.
  </Card>

  <Card title="RADBot Prioritization" icon="robot">
    Leverage RADBot to prioritize device findings based on real-world impact.
  </Card>
</CardGroup>

## Getting Started

<Steps>
  <Step title="Choose Your Platform">
    Select your endpoint management platform from the supported integrations above.
  </Step>

  <Step title="Generate API Credentials">
    Create API credentials in your endpoint platform with permission to read device inventory and compliance, and to run remediation actions.
  </Step>

  <Step title="Configure in RAD Security">
    Add the integration in your RAD Security workspace with the generated credentials.
  </Step>

  <Step title="Verify Connection">
    Confirm the integration is active and device data is being synced.
  </Step>
</Steps>

## Next Steps

<CardGroup cols={2}>
  <Card title="Automox Setup" icon="laptop" href="/rad-security/integrations/endpoint-management/automox-setup">
    Connect Automox for device inventory, compliance, and remediation
  </Card>

  <Card title="Microsoft Intune Setup" icon="microsoft" href="/rad-security/integrations/endpoint-management/microsoft-intune-setup">
    Connect Microsoft Intune for device inventory, compliance, and remediation
  </Card>

  <Card title="Iru Setup" icon="laptop" href="/rad-security/integrations/endpoint-management/iru-setup">
    Connect Iru for device inventory, compliance, and remediation
  </Card>

  <Card title="Jamf Pro Setup" icon="apple" href="/rad-security/integrations/endpoint-management/jamf-pro-setup">
    Connect Jamf Pro for device inventory, compliance, and remediation
  </Card>

  <Card title="Data Sources Overview" icon="database" href="/rad-security/integrations/data-sources">
    Explore all available data sources
  </Card>

  <Card title="RADBot" icon="robot" href="/rad-security/getting-started/radbot">
    Learn how RADBot helps prioritize findings
  </Card>
</CardGroup>