Self-hosted MDM platform for Android

Take control of your Android fleet with full sovereignty

MobixMDM locks, deploys, monitors and troubleshoots your Android devices remotely — kiosk mode, security profiles, app deployment and multi-organization — all on your own server, with end-to-end encryption.

See features
No credit card 3 devices included Ready in 30 seconds
mobixmdm.com/app
MobixMDM dashboard
09:41 WiFi87%
WorkSpace · Device TAB-014
MOBIXMDM SECURED · v26.06
Scan
Delivery
Inventory
Chat
GPS
Call
500K+
Supported devices
1000+
Organizations
40+
Security restrictions
100%
Self-hosted
How it works

Up and running in three steps

From a new device to a hardened, monitored terminal, with no prior MDM expertise.

1

Enroll

Scan the enrollment QR code on a new or reset device. The client becomes Device Owner in under 30 seconds, attached to the right organization by token.

2

Configure

Build your profiles: kiosk mode, restrictions, password policies, allowed apps. Assign them to static or dynamic groups.

3

Supervise & secure

Track compliance, battery and connectivity in real time, push apps, take remote control, and lock or wipe on demand.

Capabilities

Everything to manage a hardened fleet

A single console to monitor, secure and automate your field devices, PDAs, tablets and kiosks.

Kiosk mode

Lock the device to one or more apps, hide the system bar and home button, block exits. Customize the launcher (color, watermark logo).

Security profiles

40+ restrictions (camera, USB, Wi-Fi, Bluetooth, NFC, factory reset…), password and lock policies, continuously reconciled.

App deployment

Push your APKs to groups, with resumable download, percent progress, lifecycle (permanent, one-time, inactive) and history.

Remote control

View and control the screen live over WebSocket — support and troubleshooting without traveling.

Real-time diagnostics

CPU, RAM, battery, storage, network, processes and foreground app, streamed live every 3 seconds.

Monitoring & KPIs

Compliance, fleet health, inventory, command queue and alerts — at a glance, with instant ONLINE/OFFLINE presence.

Remote terminal

Per-device shell console and MDM verbs (info, reboot, data wipe…) right from the device page.

Multi-organization & RBAC

Isolated multi-tenant architecture: super-admin, owner per organization, custom roles and fine-grained permissions.

Automatic updates

The DPC client updates itself silently according to the tenant policy (auto, on restart, never).

Google & Microsoft SSO

Invitation-based OAuth2/OIDC authentication, platform apps or each organization's own apps.

QR enrollment

Device Owner provisioning in under 30 seconds, offline-capable, automatic tenant attachment.

Remote lock & wipe

Lock, reboot or wipe a lost or stolen device in one click, with reliable acknowledgment.

14:22WiFi64%
WorkSpace · Device PDA-07
MOBIXMDM SECURED
Scan
Stock
Route
Check
Photo
Call
Kiosk mode

A dedicated device, impossible to misuse

Turn any Android device into a locked-down business terminal. Users only see the apps you authorize — nothing else.

  • Single-app or multi-app kiosk with the MobixMDM launcher
  • System bar, home button and exits blocked
  • Customizable launcher: your brand's background color and watermark logo
  • Admin exit PIN and instant offline application
mobixmdm.com/app/#/profiles
Security profiles
Security profiles

Harden every device to your policy

Build unified profiles combining hardware, network and system restrictions, then assign them to groups. Every edit is versioned and tracked all the way to the device.

  • 40+ restrictions: camera, USB, Bluetooth, NFC, storage, app installation…
  • Password policies, screen lock, factory-reset protection
  • Rule-driven dynamic groups + per-version compliance tracking
  • Continuous reconciliation: impossible to bypass for long
mobixmdm.com/app/#/devices
Inventory & remote control
Control & diagnostics

Troubleshoot without traveling

Take over the screen live, launch a shell console, or open the diagnostics center to analyze a device in real time — wherever it is in the field.

  • Live screen view and control over secure WebSocket
  • Live telemetry: CPU, RAM, battery, storage, network, processes
  • Per-device shell terminal + MDM verbs
  • Remote lock, reboot and wipe with reliable acknowledgment
Security & privacy

Your data, your server, your control

MobixMDM is built for demanding environments: end-to-end encryption, cryptographic integrity and full data sovereignty.

TLS encryption

All traffic between devices and the server is encrypted end-to-end over HTTPS/WSS.

HMAC-SHA256 signing

Every device request is signed with a unique secret: no forged request is ever accepted.

Self-hosted

Your data stays on your infrastructure, never in a third-party cloud. Sovereignty guaranteed.

Strict multi-tenant isolation. Per-organization partitioning at the database level — zero cross-organization leakage.
Granular RBAC. System and custom roles, fine-grained permissions, owner per organization.
40+ hardened restrictions. Camera, USB, Bluetooth, dev options, safe boot, unknown sources…
Anti-reset protection. Factory reset protection and storage encryption enforceable per profile.
Permanent reconciliation. Policies are re-applied at startup, every 60s and on push — unavoidable.
Remote wipe. Immediate lock, reboot and wipe for any lost, stolen or compromised device.
Full Device Owner. Total device control, auto-granted permissions, tamper-proof kiosk.
Traceability. Per-version profile application tracking and configurable deployment history.
In pictures

A dense, clear and fast console

Built for IT teams: paginated tables, global search, export and quick actions.

mobixmdm.com/app/#/dashboard
MobixMDM console

Architecture

A robust, end-to-end design

Spring Boot backend + Android DPC client, multi-tenant isolation and encrypted & signed communication.

Android devices DPC client (Device Owner) Kiosk · Profiles · Apps QR enrollment + tenant token React console Admin · Monitoring · RBAC MobixMDM Core Spring Boot · REST + WS Hibernate multi-tenant filter PostgreSQL Data isolated by tenant_id HTTPS + HMAC / WSS JPA
Comparison

Why MobixMDM

The control of a self-hosted solution, without the per-device costs of classic SaaS suites.

CriterionMobixMDMSaaS MDM suitesProprietary cloud solutions
Self-hosting & data sovereignty✔ Total✘ Limited✘ Vendor cloud
Cost per device✔ None✘ Per-device subscription✘ Per-device subscription
Advanced kiosk mode (multi-app, anti-exit)✔~ Depends on plan✔
Remote control & diagnostics included✔~ Paid option~ Paid option
Multi-organization & fine RBAC✔~ Enterprise edition✔
Source code customization✔ Open✘✘
Instant start (self-service demo)✔ 30s~ Sales demo~ Sales demo

Try MobixMDM right now

Create your demo organization and enroll up to 3 devices free for 7 days.

7-day trial 3 devices No card