Features

A full comparison of features & support for each product tier:

Mender
Server

Mender
Open Source

Mender
Basic

Mender
Professional

Mender
Enterprise

Management server

Manage remote deployments across a fleet of devices.

Management UI

Manage your devices, software and deployments with a user-friendly UI and dashboard.

Device grouping

Group devices by customer, test/production, geography or anything else.

Quick device filtering

Quickly and easily filter devices by attribute.

Device sorting

Find devices with similar attributes.

Rest APIs

Easily integrate Mender with CI/CD, ERP and custom UIs with standards-based HTTP REST APIs with JWT authentication.

Standalone mode

Use Mender without the server – deployments can be triggered at the device, either manually in the terminal or by custom scripts, in order to support devices without connectivity.

Advanced device filtering

Create advanced filters to find a set of devices using multiple device attributes and operators.

Regex device filtering

Unlimited device filtering, regardless of scale and complexity.

Software version distribution

View software distribution across your device groups in the GUI dashboard.

Robust delta updates

Lower network traffic using a binary delta between two rootfs-image Artifacts, and deploy this delta supporting atomic update, integrity checks, rollback and signature verification. Watch the video

Automatic assignment of delta updates

The Mender server automatically assigns the correct delta update to any given device, based on the software release the device is currently running.

Scheduled deployments

Schedule a software update deployment to start at a specific date and time in the future.

Automatic retry of deployments

The server will automatically retry the deployment on devices where it fails, for a predefined amount of times.

Phased rollouts

Eliminate large-scale failures by dividing a deployment into time-delayed phases, with each phase containing a share of the devices to be updated.

Dynamic groups and deployments

Easily group your devices by attributes. Automatically deploy your software to the devices that need it, and enable devices to receive updates on first boot.

Multi tenancy

Create multiple Organizations (aka tenants), which act as separate environments on a single Mender server, both for users and devices.

Production-ready server configuration

Accessible and configured server, secure by default (such as TLS enabled) with parameters tuned for scale (e.g. polling intervals).

Configured for scaling

A hosted service that scales automatically with your needs.

On-premise server

Run the Mender server in your own infrastructure, such as your data center or existing cloud vendor and customize the server configuration (e.g. access control).

Secure hosted server

Use a server managed and supported by Mender to save time and avoid worrying about its security or scalability.

Extensibility

Update modules

An extension to the Mender client for supporting a new type of software update such as a package manager, container or bootloader.

Custom state scripting

Ability to run pre- and post-install scripts during update process and between any state transition, not just the install state (e.g. checks after update is installed).

Secure Remote terminal

Create a secure live remote terminal session to a given device, either through the UI or CLI.

Compatibility

Support for all types of software

Out-of-the-box support for system, file, application, container and package updates with existing Update Modules.

Mender as Debian package

Mender is easy to install and use for application-based updates, with support for ARMv6 and Debian family OSes e.g. Debian, Ubuntu and Raspbian.

Raspberry Pi reference integration

Mender is fully integrated for system and application-level updates with a ready-to-flash Raspbian image.

Yocto integration

Integrate the meta-mender layer into your build to install and configure the Mender client.

Support for common storage types: eMMC, SD card, raw NAND/NOR flash

Robustness & Security

Automated rollback

Built-in dual A/B root filesystem updates which automatically roll back to the previous system version on any failure, and support for rollback in all types of updates with Update Modules.

Full image updates

Ensure consistent software across your device fleet.

Secure TLS communication

Client, server and management REST APIs only use TLS with secure configuration, all communication is authenticated and encrypted.

Code signing verification

End-to-end signatures with verification on the client and signing can be done in access-restricted and offline environments.

Integrity checksum to avoid corruption

End-to-end checksum verification on client and creation when Mender Artifact is built.

Hardware security for device authentication

Ensures OTA update process is secured by leveraging cryptography operations on device.

Elliptic curve cryptography support for device authentication

Keys can be much shorter and achieve the same level of security.

Two factor authentication

Extra layer of protection for user authentication with OTP-compatible app like Authly and Google Authenticator.

Role-based access control (RBAC)

Restrict unnecessary network access based on user's roles within an organization – allowing enhanced compliance, reduced costs and decreased risk of breaches and data leakage.

Mutual TLS for device authentication

Leverage existing device certificates to authenticate against the Mender server.

Audit logs

Improve security, compliance and accountability by logging important events that can later be analyzed in case of security or operational incidents.

Configuration

ADD ON

Configuration UI

Define a set of key-value attributes to configure a device to your needs.

Reporting

Track applied configuration as reported by the device.

Scripting

Define exactly how any given configuration is applied to a device.

Role-based access control

Limit which users can configure devices.

Audit log

See history of configuration settings applied on each device and by whom.

Troubleshoot

ADD ON

Remote terminal

Secure real-time access to devices to quickly diagnose and fix issues.

File transfer

Copy files to and from devices, to do deep analysis or quick updates.

Port forward

Forward a port to/via the device to test and connect to services.

Remote terminal session log

Replay the complete terminal session.

Remote terminal audit log

See who connected to devices and when.

Role-based access control

Limit which users can connect with given groups of devices.

Support

Community forum at Mender Hub

Community of dedicated users with a fast-growing number of boards and operating systems.

Consulting and technical support

We provide deep expertise specializing in the implementation of OTA update management.

SLA-backed support

Expert support with guaranteed response times.

Training for Mender server operations

Mender Open Source

View the docs

Mender Basic

Mender Professional

Mender Enterprise

Choose the plan that's right for your fleet of connected devices

Comparing pricing for each tier

Video: an introduction to the advanced features available in Mender Enterprise

Watch the full screen video

Video: large scale software update management and deployment with Mender Enterprise

Watch the full screen video

PRODUCT BRIEF

Automate Over-the-Air Software Updates with Mender

An overview of the reasons to choose Mender for OTA updates to your IoT devices.

Download

PRODUCT BRIEF

Mender Enterprise: Customized for fine-grained updates and large-scale deployments

An overview of the supported version of Mender for enterprise.

Download

PRODUCT BRIEF

Mender Professional: a secure, up-to-date hosted management server

The advantages of using a hosted updated management server for your IoT updates.

Download

DATASHEET

Requirements Checklist for OTA Updates

A guide to the requirements of secure OTA updates and risks of not implementing them.

Download