Full Fleet Visibility.
Effortless Patching.
OrchardPatch gives you complete visibility into your managed macOS fleet and keeps it patched without touching your MDM.
Your MDM handles enrollment. OrchardPatch handles visibility and patching from there.
Admins need a complete picture of what's installed across their fleet.
Most don't have one. Not because they missed something. Because no tool was built to show them.
Fleet app visibility was never MDMs’ job
MDMs track what you enrolled. Apps that arrived via download, script, or user install are invisible unless you already knew to look. Most fleets have gaps no one has seen.
Most patching tools create MDM conflicts
They demand Secure Token access and wrestle Apple MDM for device ownership, creating conflicts and breaking standard-user environments. There shouldn’t be a tradeoff.
Rolling your own doesn’t scale
Patch scripts get you started. Maintaining them across macOS updates, app version changes, and edge cases becomes its own full-time job.
Full visibility. Smart patching. Zero friction.
OrchardPatch works alongside your existing MDM. Not against it.
Fleet Visibility
The agent discovers every app on every Mac at check-in, including ones your MDM has never seen. See your entire fleet in one place.
Software Catalog
Browse 1,000+ apps and deploy any of them to any device in your fleet, even ones not currently installed. No scripting, no command line. Powered by Installomator.
MDM-Safe Patching
Patching runs at the system level. No Secure Token required, no MDM conflicts, no admin rights needed. Works on standard user accounts in privilege-managed environments.
You control the scope.
One app on one device to your entire fleet.
One app, one device
Something is outdated on a specific Mac. Patch just that. Nothing else touched.
One app, your entire fleet
Push one app update to every Mac at once. Consistent versions across the fleet.
All outdated apps, one device
Catch up a single machine in one operation. Every outdated app handled.
Everything, everywhere
Full fleet remediation. Every outdated app on every device, in one go.
Up and running in minutes
One pkg. One install. Your fleet in view.
Deploy the Agent
Deploy via Jamf, your MDM, or directly on each Mac. The agent runs as a LaunchDaemon. No admin rights needed on managed machines.
See Your Fleet
OrchardPatch immediately builds a complete inventory of every installed app across all managed devices. Version conflicts and outdated apps surface automatically.
Patch with One Click
Choose Silent, Managed, or User Prompted. Hit Deploy. OrchardPatch handles the rest, powered by Installomator with 1,000+ supported apps.
Built for enterprise, including hardened environments
The agent LaunchDaemon runs at the system level, following the same deployment pattern as your existing MDM. No admin rights needed. Works in privilege-managed environments.
OrchardPatch is in active development.
Early fleets are running now. Join the list and we'll reach out when your spot is ready.
No spam. No marketing fluff. Just a heads-up when it's ready.