Featured Spec Sheet
Hybrid: Cloud + On-Prem
Zoho Corp Tier-1
ManageEngine Endpoint Central (Formerly Desktop Central)
Vendor: Zoho Corporation
•
HQ: Chennai, India & Austin, TX
•
Enterprise Release: v11.3 (Active LTS)
Unified Endpoint Management (UEM)
Client Management
Patch Management
Enterprise Mobility (MDM)
Spec Index Score
9.4
/10
★ Rank #1 in Hybrid UEM
850+ 3rd-party patches
Quick Glance Spec Highlights
Verified against Administrator Installation Guide
OS Support
6 OS Families
Win, Mac, Linux, iOS, Android, ChromeOS
Min Server RAM
8 GB (On-Prem)
4 Cores min | 16 GB rec for 5K nodes
Directory Sync
AD + Entra + LDAP
Multi-domain forest sync + SCIM
Max Scale
25,000+ Nodes
Single server | 100K+ in WAN mesh
Free Tier
Yes (25 Nodes)
Permanent free for SMB / Lab labs
Last Verified: September 2026 • Specification Hash: ec#11.3.24
Delivery Model
Hybrid: On-Premise physical bare-metal / hypervisor VM or Cloud SaaS (Zoho Cloud multi-DC globally).
Protocol Support
HTTPS (TLS 1.3 / 1.2 on port 8383), WebSocket live push (port 8027), WebRTC (port 8443 screen share), LDAPS (636).
Multi-Tenant MSP Support
Native MSP Architecture: Available via dedicated Endpoint Central MSP edition with tenant boundary isolation.
WAN Distribution Architecture
Hub-and-Spoke Topology: Branch office Distribution Server caches packages locally with bandwidth throttling to prevent WAN saturation.
High Availability / Failover
Active-Passive Failover Server with secondary IP takeover (<60s heartbeat); automated database replication.
Secure Gateway Server (DMZ)
Reverse proxy gateway in perimeter DMZ for remote off-VPN roaming agent check-in without exposing internal LAN ports.
NAT Traversal
Built-in STUN / TURN relay service for out-of-band remote control & patch broadcast.
Windows Desktop
Windows 11 (24H2, 23H2, 22H2, 21H2 — Pro, Enterprise, Education, SE), Windows 10 (32/64-bit, LTSC/LTSB), Windows 8.1, 7 SP1.
Windows Server
Windows Server 2025, 2022, 2019, 2016, 2012 R2, 2008 R2 SP1 (Both Full Desktop Experience and Server Core).
macOS Architecture
macOS 15 Sequoia, macOS 14 Sonoma, 13 Ventura, 12 Monterey, 11 Big Sur — Native Apple Silicon (M1-M4) & Intel universal binaries.
Linux Distributions
Ubuntu (18.04 - 24.04 LTS), RHEL (7-9), Debian (10-12), CentOS Stream, Rocky Linux, AlmaLinux, SUSE SLES, openSUSE, Fedora.
Mobile & Tablets (MDM)
iOS/iPadOS 14 to 18+, tvOS 14+; Android 9.0 to 15 (Google Android Enterprise Recommended partner).
ChromeOS & IoT
ChromeOS Enterprise enrollment via Google Workspace API; single/multi-app kiosk lockdown and lost-device geo-tracking.
Minimum CPU (Server)
4 Cores (Intel Xeon or AMD EPYC / modern x86-64 equivalent @ 2.4 GHz).
Recommended CPU
8 to 16 Cores for environments managing 5,000 to 25,000 active nodes.
Server RAM Scaling
8 GB (≤1,000 nodes) • 16 GB (1,000 - 5,000 nodes) • 32-64 GB (5,000 - 25,000+ nodes).
Database Engine Backend
PostgreSQL 14+ (Bundled default; zero added cost, up to 10K nodes) or MS SQL Server (2014 to 2022 Standard/Enterprise for >10K nodes).
Storage IOPS & Space
100 GB OS installation; 250 GB - 2 TB SSD repository for patch binaries; min 1,500 IOPS SSD recommended.
Agent Memory Footprint
~35 MB - 50 MB RAM idle; <1.5% background CPU scan with network bandwidth throttling limits.
3rd-Party Patch Catalog
850+ Pre-Tested Applications across Windows and macOS (Adobe, Chrome, Zoom, Firefox, Slack, VLC, Teams, Edge, etc.) with test & approve automation.
Silent Deployment Formats
MSI, EXE, MSP, MSU, PKG, DMG, APPX, DEB, RPM, PowerShell (`.ps1`), VBScript, Batch scripts, Bash. 8,000+ pre-built templates in software library.
Remote Desktop Protocols
Integrated HTML5 WebRTC remote control (clientless for technicians); multi-monitor switching, file transfer, HIPAA session recording.
OS Bare-Metal Imaging
Automated bare-metal deployment via PXE network boot & USB media; hardware-independent imaging with automated driver injection.
Asset & License Metering
Real-time hardware inventory, warranty tracking, prohibited software auto-uninstallation, software usage metering to eliminate underutilized seats.
SSO / SAML 2.0 Providers
SAML 2.0 integration tested with Entra ID, Okta, PingIdentity, OneLogin, Google Workspace, CyberArk, JumpCloud; SCIM 2.0 auto-provisioning.
MFA Types Supported
TOTP (Google / Microsoft Authenticator), Email OTP, SMS verification, Duo Security push, RADIUS server integration.
RBAC Granularity
Discrete custom permission scoping down to individual computer groups and action boundaries (e.g. Remote Control Only).
Encryption Standards
TLS 1.3 / 1.2 in transit; AES-256 column-level encryption at rest for credentials and BitLocker recovery keys.
Compliance Accreditations
SOC 2 Type II
ISO 27001:2022
HIPAA
GDPR
FedRAMP Moderate (Cloud)
ITSM Ecosystem
ServiceDesk Plus: 100% Native zero-code bidirectional sync • ServiceNow: Certified Store application • Jira Service Management: Native marketplace plugin.
SIEM & Observability
Syslog & CEF event forwarder to Splunk, Log360, Datadog, Elastic Stack, and Microsoft Sentinel for real-time security alerts.
REST API Architecture
Comprehensive RESTful API v2 with OpenAPI 3.0 / Swagger documentation; API token authentication with rate-limiting controls.
Automation & SDKs
PowerShell SDK module (`EndpointCentral-PS`), Python automation scripts, and Webhooks for event-driven orchestration.
Compare core functional capabilities across all four enterprise editions:
Free Tier available up to 25 endpoints
| CAPABILITY / SPECIFICATION | PROFESSIONAL Single LAN |
ENTERPRISE Distributed WAN |
UEM EDITION PC + Mobile MDM |
SECURITY Hardened Defense |
|---|---|---|---|---|
| Automated Patch Management (OS & 3rd-Party) | ✓ Included | ✓ Included | ✓ Included | ✓ Included |
| Software Deployment (MSI / EXE / Scripts) | ✓ Included | ✓ Included | ✓ Included | ✓ Included |
| Asset Intelligence & Inventory Management | ✓ Included | ✓ Included | ✓ Included | ✓ Included |
| Remote Desktop & File Transfer (WebRTC) | ✓ Included | ✓ Included | ✓ Included | ✓ Included |
| WAN Distribution Servers (Bandwidth Throttle) | — | ✓ Included | ✓ Included | ✓ Included |
| Multi-Domain Active Directory Management | — | ✓ Included | ✓ Included | ✓ Included |
| Failover Server (High Availability) | Add-on | ✓ Included | ✓ Included | ✓ Included |
| Full Mobile Device Management (iOS, Android) | — | — | ✓ Included | ✓ Included |
| Modern Management (Windows 11 / macOS MDM) | — | — | ✓ Included | ✓ Included |
| OS Bare-Metal Deployment & Imaging | Add-on | Add-on | ✓ Included | ✓ Included |
| Vulnerability & Threat Assessment | — | — | — | ✓ Included |
| Application Control & Zero-Trust Whitelisting | — | — | — | ✓ Included |
| Browser Security & Web Filtering | — | — | — | ✓ Included |
| Endpoint DLP & BitLocker Management | — | — | Add-on | ✓ Included |
| Base Annual License (50 Endpoints) | $795 / yr | $945 / yr | $1,195 / yr | $1,695 / yr |
Commercial Licensing & Pricing Architecture
ManageEngine provides transparent tier-based node licensing with zero forced vendor lock-in
Permanent Free Tier (≤25 Endpoints)
Edition 1
Professional
$795 / year
50 Endpoints (Single LAN)
Designed for single-office SMBs needing centralized patching, software deployment, and inventory scanning.
✓ Unlimited Technicians
✓ Bundled PostgreSQL
✓ Bundled PostgreSQL
Edition 2
Enterprise
$945 / year
50 Endpoints (Multi-Branch)
Adds WAN Distribution Servers and multi-domain Active Directory support for multi-location enterprises.
✓ Distribution Servers
✓ Bandwidth Throttling
✓ Bandwidth Throttling
Top Recommended
Edition 3
UEM Edition
$1,195 / year
50 PCs + 50 Mobile MDM
Unifies full desktop lifecycle management with enterprise iOS & Android MDM, kiosk lockdown, and bare-metal imaging.
✓ PC + Mobile in 1 Console
✓ OS Imaging Included
✓ OS Imaging Included
Edition 4
Security Edition
$1,695 / year
50 Endpoints + Hardened Defense
Includes endpoint vulnerability scanning, application zero-trust whitelisting, browser security, and peripheral device control.
✓ Vulnerability Assessment
✓ App Whitelisting & USB DLP
✓ App Whitelisting & USB DLP
Compare Against Direct Alternatives
Head-to-head architectural analysis against the three most requested enterprise alternatives
Cloud Only
★ 9.1 Score
Microsoft Intune
Vendor: Microsoft Corporation
DEPLOYMENT
100% Cloud SaaS (No On-Prem)
KEY ARCHITECTURAL PRO
Deepest Microsoft 365, Entra ID Conditional Access, and Autopilot integration.
KEY ARCHITECTURAL CON
No on-premise air-gap server; 3rd-party patch catalog requires Enterprise App add-on.
$8/user/mo standalone
RMM + UEM
★ 9.2 Score
NinjaOne
Vendor: NinjaOne LLC
DEPLOYMENT
100% Cloud SaaS (AWS Multi-Region)
KEY ARCHITECTURAL PRO
Fastest agent execution, high-velocity responsive UI, deep SNMP network monitoring.
KEY ARCHITECTURAL CON
No permanent free tier; no bare-metal PXE imaging; custom quote pricing only.
~$3-$5/device/mo
Hybrid Enterprise
★ 8.8 Score
Ivanti Neurons for UEM
Vendor: Ivanti, Inc.
DEPLOYMENT
Hybrid: Cloud + On-Prem (EPM)
KEY ARCHITECTURAL PRO
Autonomous self-healing AI bots, superior ruggedized Android/Zebra hardware support.
KEY ARCHITECTURAL CON
Complex setup requiring heavy MS SQL infrastructure; no free tier for small teams.
Enterprise Quote
Direct Architectural Comparison Summary
| TECHNICAL METRIC | Endpoint Central | Microsoft Intune | NinjaOne | Ivanti Neurons |
|---|---|---|---|---|
| Delivery Model | Hybrid (Cloud + On-Prem) | 100% Cloud Only | 100% Cloud Only | Hybrid (Cloud + On-Prem) |
| Permanent Free Tier | Yes (Up to 25 Nodes) | No (Trial only) | No (Trial only) | No (Trial only) |
| 3rd-Party Patch Catalog | 850+ Apps (Included) | Requires Add-On ($3.25) | 200+ Core Apps | 350+ Enterprise Apps |
| Bare-Metal OS Imaging | Native PXE / USB Image | Autopilot (Modern only) | — | Native EPM Imaging |
| Air-Gapped LAN Support | Yes (Zero WAN dependency) | No (Requires Azure) | No (Requires AWS) | Yes (On-Prem Server) |