The Iru Blog

What is endpoint monitoring? A practical IT and security guide

What is a cybersecurity risk assessment? How to conduct one

What is vulnerability remediation? 4 ways to handle it

What is vulnerability remediation? Vulnerability remediation is the process of eliminating security vulnerabilities before attackers can exploit them. It involves identifying affected systems, prioritizing the most critical risks, and taking corrective action.

What is endpoint vulnerability management (EVM)? (+Best practices)

Endpoint vulnerability management (EVM) is the process of identifying, evaluating, prioritizing, and remediating security weaknesses on your endpoints before attackers can exploit them. Modern endpoint fleets are constantly changing. New devices come online, software updates roll out at different times, and vulnerabilities appear every day. For context, 2025 saw 49,183 new Common Vulnerabilities and Exposures (CVEs).

Compliance Automation momentum: new frameworks and industry recognition

As of this week, Iru Compliance Automation supports three new frameworks: CMMC, NIST SP 800-171, and ISO 27701. These frameworks join the others within Iru Compliance Automation today (SOC 2, ISO 27001, ISO 42001, GDPR, HIPAA, NIST 800-53, and NIST CSF 2.0), bringing the total to ten.

What is endpoint visibility and control, and how does it work?

Endpoint visibility gives you a real-time view of your endpoints, including device inventory, patch status, configurations, running processes, and security posture. Your new list iEndpoint control lets you act on that data by deploying patches, enforcing policies, restricting software, and remediating threats.tem Endpoint visibility and control combines monitoring and remediation, helping you identify risks and fix them from a single platform. Visibility without control creates security gaps since detecting issues is only half the job. The ability to remediate them quickly is what reduces risk. Features like automated patching, policy enforcement, and continuous compliance help reduce manual work and keep your endpoints secure. Every endpoint tells a story. One laptop is missing critical patches. Another is running unauthorized software. A contractor's device hasn't checked in for weeks. You know exactly what's happening across your environment, but knowing isn't the same as fixing.

How to automate Mac patch management with Iru in 3 simple steps

WWDC 2026: The declarative era is here

Apple just removed the legacy MDM commands for software update management. As of OS 27, not deprecated with a long runway, not flagged as discouraged, they’re gone. That's a clear signal yet that the declarative era is here.

Mac MDMs: How to Manage and Secure Your Device Fleet

Mac mobile device management (MDM) is a framework that lets IT administrators remotely set up, manage, and secure Apple devices from a single place. When a device is enrolled, it receives a profile that builds a channel between the device and the MDM server. When IT applies a policy or issues a command in the MDM console, the software sends a notification to the device, which retrieves the information and applies it locally. Businesses use Mac MDM to automate device onboarding, enforce company security policies, deploy apps and updates, and maintain compliance, all without needing to physically engage with the device.

Endpoint Drift: Why EDR coverage breaks down at scale [+ Take the quiz to see where you stand]

Your dashboard says every endpoint is covered. Patches show as deployed. Policies look locked down.

How to build a tech stack that runs itself

Gorilla's IT lead shares the playbook he uses to automate onboarding, offboarding, and compliance with Iru so routine work runs itself and the team can focus on higher-value projects. IT teams are being asked to do more than ever. Device management, security, compliance, AI enablement, and often all of it with a team of one. The difference between keeping up and falling behind often comes down to how much of the routine work can run without you.

Zero-Trust Endpoint Security: How To Defend Your Largest Attack Surface

In January 2026, the Dutch Data Protection Authority (the agency responsible for protecting citizens' personal data) had its own employee's work-related data accessed and stolen. Attackers exploited critical zero-day vulnerabilities in Ivanti's endpoint mobile management software before patches were even available. That same day, bad actors attacked the European Commission, and Finland's government IT provider lost data on up to 50,000 employees. All three incidents traced back to a single point of failure: endpoint management tools that granted access based on device identity alone, without verifying whether those devices were actually secure.

Securing Windows: Vulnerability management, auto patching, and OS updates

Unpatched software is behind roughly 60% of breaches. And with AI models getting better at finding exploitable vulnerabilities faster than most teams can remediate them, the window between disclosure and exploitation is shrinking fast.

Local admin cccounts on Mac: should IT teams create them?

Updated May 2026. For IT teams deploying Mac computers, the question is: To create local IT admin accounts on those computers or not? What Are Mac Admin and Standard User Accounts? To be clear on what we’re talking about: A local IT admin account is a user account with admin privileges created on a Mac in addition being used as to the primary user account. There are several reasons IT teams might want to distribute such accounts—but there are also good reasons why they might not. There are also several ways to do so, as well as a couple of alternatives that could obviate the need to deploy such accounts altogether. Let’s walk through each of those decisions.