Ivanti Alternatives

Seven Ivanti alternatives for endpoint management, patching and IT service management, compared on price and on what they really replace.

Ivanti is a portfolio built from a dozen acquisitions, so the right replacement depends on the Ivanti product you run. For endpoint management and patching, NinjaOne is our first pick, Action1 the free one up to 200 devices and Microsoft Intune the one you may already own. To replace Ivanti Neurons for ITSM, look at Freshservice or Jira Service Management. ManageEngine replaces both halves at once.

Romain CochardCEO of Hack'celeration
Updated 20267alternatives compared5criteria each2026pricing checked

The ranking is editorial: a sponsored placement is always flagged on its card, and no affiliate link changes a score.

The honest take

Why teams leave Ivanti

Ivanti sells endpoint management (Endpoint Manager, the former LANDESK), unified endpoint management (Neurons and the former MobileIron), patching, IT service management (Neurons for ITSM, from Cherwell and Heat) and secure access (Connect Secure, the former Pulse Secure VPN). Its own history page lists twelve companies behind it. Plenty of large IT departments run it well. The reasons people look elsewhere are security incidents, complexity and cost, usually in that order.

Connect Secure became a security liability

In early 2024, CISA issued Emergency Directive 24-01 after observing widespread and active exploitation of vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure. Two flaws, CVE-2023-46805 (authentication bypass) and CVE-2024-21887 (command injection), let an attacker run arbitrary commands when chained. A supplemental direction then required federal agencies to disconnect all instances of the two products. A year later, CISA added CVE-2025-0282 in Connect Secure, Policy Secure and ZTA Gateways to its Known Exploited Vulnerabilities catalog. For many security teams, that run of incidents is the reason the Ivanti renewal is now under review, and the review often spreads to every Ivanti product in the estate.

A portfolio stitched from acquisitions

Ivanti lists LANDESK, Wavelink, Shavlik, Lumension, Heat, AppSense, Concorde Solutions, RES Software, Pulse Secure, MobileIron, Cherwell and RiskSense as part of its history: 12 companies. The products still feel separate. Endpoint Manager, Neurons for UEM, Neurons for ITSM and Neurons for Patch Management each have their own console logic and licensing, and several guides describe a legacy platform with different codebases. You end up paying for overlapping capabilities and training admins on several tools.

Heavy to run on-premises

Ivanti Endpoint Manager is the on-premises suite inherited from LANDESK: you host its core server, keep it updated and keep its agents healthy, and staying secure means applying every service update on time. Ivanti itself now pushes customers toward its Neurons cloud, offering two paths to begin a cloud migration journey. If you are going to migrate anyway, many teams prefer to compare cloud-native tools that never needed a core server, such as NinjaOne, Action1 or Automox.

No price until you talk to sales

Ivanti product pages end in Get a Demo or Contact Sales. That makes budgeting hard: you cannot model the cost of 300 more devices or five more service desk agents without a new quote. Most alternatives here publish at least an entry price, from Action1 free up to 200 endpoints to Freshservice at $19 per agent a month billed annually, so you can build a business case before a single call.

Steep learning curve and slow support

The complaints users raise about Ivanti Neurons for ITSM and Endpoint Manager come back in most Ivanti alternatives guides: a complex interface, a long ramp-up for new admins and support that can be slow to respond. If a single admin holds all the Ivanti knowledge, that is a risk on its own, and simpler tools such as Freshservice or NinjaOne reduce it.
1
Best overall for endpoint and patch management

NinjaOne

4.3/5

NinjaOne is a cloud platform for endpoint management, remote monitoring (RMM) and patching, with remote access, backup, mobile device management and vulnerability management sold as products on the same console. Ivanti alternatives guides list it often, and for a good reason: it does the job that pushes most teams onto Ivanti Endpoint Manager in the first place (deploying software, pushing Windows and third-party patches, seeing every device) without a server to run.

The pricing logic is per device, not per technician. NinjaOne starts as low as $1.50 per endpoint a month at 10,000 endpoints, rising to $3.75 at 50 endpoints or fewer, and the price varies by region and products bought. That range is for the commercial cloud, not the FedRAMP instance. So a 50-device shop pays around $187.50 a month before extras, while a large estate pays less than half that per device. There is no full price list: you get the rest from sales, and month-to-month billing is offered only case by case. Two things to know before you sign: discounts may come in exchange for a multi-month commitment, and without one you can cancel with 60 days of notice. Onboarding, training and support are included at no extra cost.

What you gain against Ivanti is speed. Moving from on-premises Ivanti EPM means installing the NinjaOne agent on each machine and rebuilding your patch policies, with no core server left to maintain. What you lose is the comfort of a full price list: beyond the per-device range, the final quote depends on the products you add.

Standout features
  • Per-device price that drops from $3.75 to $1.50 with volume
  • RMM, patching, remote access and MDM in one console
  • 14-day free trial, onboarding and training included
+Pros
  • ✓Nothing to host: agent plus cloud console
  • ✓Third-party patching built into the patch module
  • ✓Fast to learn for a technician coming from Ivanti
−Cons
  • ✗Full price list only through sales
  • ✗Month-to-month billing only case by case
  • ✗Final price depends on the products you add
NinjaOne vs Ivanti
CriterionNinjaOneIvanti
DeploymentCloud onlyOn-premises EPM or Neurons cloud
Price modelPer endpoint, $1.50 to $3.75 a monthQuote through sales
Trial14 daysDemo on request
PatchingOS and third-partyAdd-on to Endpoint Manager
Verdict

The safest switch for an IT team that wants Ivanti's endpoint and patch job done from the cloud, with a price per device you can model before the call.

Try NinjaOne →
2
Best full suite to replace Ivanti end to end

ManageEngine (Endpoint Central and ServiceDesk Plus)

4.1/5

ManageEngine is the closest like-for-like replacement for the Ivanti portfolio, because it sells the same two halves. Endpoint Central covers what Ivanti Endpoint Manager does: patching (third-party apps included), software deployment and packaging, remote control, asset inventory, and, on the UEM edition, remote lock or wipe for laptops. OS imaging is the OS Deployment add-on, in no base edition. ServiceDesk Plus covers the ITSM half that Ivanti Neurons for ITSM (formerly Cherwell and Heat) handles: incidents, assets, changes and projects.

Both have public prices, which is rare in this category. Endpoint Central Professional starts at $795 a year for 50 endpoints, about $1.32 per endpoint a month, and the UEM edition starts at $1,095 a year for 50 endpoints. ServiceDesk Plus is free for up to five technicians on its Standard edition, and its Professional edition (service desk plus assets) starts at $495 or $645 a year for two technicians and 250 IT assets, depending on the deployment you pick. The more endpoints you buy, the lower the unit price. Two details the headline hides: the minimum paid tier is 50 endpoints (a free edition covers up to 25), and these are annual prices, since annual billing saves 16% over monthly.

The catch is the same as Ivanti's: you can run it on-premises, which means a server, a database and upgrades to manage. The interface is dense and the admin learning curve is real. Two more traps on the service desk side. The free ServiceDesk Plus edition has no support included, and support costs an annual maintenance fee of $35 per technician. And change and release management is a paid add-on on Standard and Professional ($2,395 a year on-premises): only Enterprise, from $1,195 a year for two technicians on-premises, includes it.

Standout features
  • Endpoint and ITSM from one vendor, like Ivanti
  • Public price grid for both products
  • On-premises or cloud deployment
+Pros
  • ✓Endpoint Central Professional at $795 a year for 50 endpoints
  • ✓Free ServiceDesk Plus edition for up to five technicians
  • ✓Volume pricing: the unit price falls as you add endpoints
−Cons
  • ✗Change management is an add-on below Enterprise
  • ✗On-premises means you still run servers
  • ✗Free edition support costs $35 per technician a year
ManageEngine (Endpoint Central and ServiceDesk Plus) vs Ivanti
CriterionManageEngine (Endpoint Central and ServiceDesk Plus)Ivanti
Endpoint price$795/year for 50 endpointsQuote
ITSMServiceDesk Plus, free up to 5 techniciansNeurons for ITSM, quote
DeploymentCloud or on-premisesCloud or on-premises
ImagingOS Deployment add-onEndpoint Manager
Verdict

The pick when you want to replace Ivanti's endpoint and service desk products together, keep an on-premises option and pay a published price.

Try ManageEngine (Endpoint Central and ServiceDesk Plus) →
3
Best for Microsoft 365 shops

Microsoft Intune

4.0/5

Microsoft Intune is the cloud endpoint management service inside Microsoft 365. Intune Plan 1 is the base: cross-platform device management, built-in security, mobile application management and endpoint analytics. It is included in Microsoft 365 E3 and E5 and in EMS E3 and E5, and it can be bought standalone at $8.00 per user a month.

That is the whole point for an Ivanti customer. If your company already pays for Microsoft 365 E3 ($39 per user a month, paid yearly), you may be paying Ivanti for device management that your Microsoft license covers. Before renewing an Ivanti UEM or Endpoint Manager contract, check what your E3 or E5 seats include, because Microsoft is folding advanced Intune features into them in 2026: E3 gets Remote Help, Advanced Analytics and the Plan 2 capabilities, and E5 adds Endpoint Privilege Management, Cloud PKI and Enterprise App Management. Without E3 or E5, they are add-ons on top of Plan 1: Plan 2 at $4.00, Remote Help at $3.50 and Endpoint Privilege Management at $3.00 per user a month, paid yearly, or the full Intune Suite at $10.00 per user a month.

The weak spot is patching beyond Microsoft. Intune updates Windows well, but third-party application updates come from Enterprise App Management, part of E5 with the 2026 change and $2.00 per user a month otherwise, or from a companion tool such as Action1. Intune is also licensed per user, which suits knowledge workers with several devices each. Kiosks and shared devices take a device-only license, which loses app protection policies and Conditional Access.

Standout features
  • Often already paid for in Microsoft 365 E3 or E5
  • Plan 1 standalone at $8 per user a month
  • Native link to Entra ID and conditional access
+Pros
  • ✓No extra license if you own E3 or E5
  • ✓Strong Windows, iOS and Android device management
  • ✓Add-ons priced per user, from $2 to $5
−Cons
  • ✗Third-party app updates need E5 or a $2 add-on
  • ✗Per-user licensing; kiosks need device licenses
  • ✗Advanced features cost extra outside E3 and E5
Microsoft Intune vs Ivanti
CriterionMicrosoft IntuneIvanti
LicensingPer user, $8/month standaloneQuote, per device or user
Third-party patchingIn E5, else $2/user/monthAdd-on to Endpoint Manager
Advanced add-onsPlan 2 in E3, else $4/user/monthSeparate Ivanti modules
IdentityEntra ID nativeIntegrates with directories
Verdict

Check this one first if you run Microsoft 365: the cheapest Ivanti replacement may be a license you already own, plus a third-party patch add-on.

Try Microsoft Intune →
4
Best Ivanti Neurons for ITSM replacement for mid-size IT

Freshservice

4.0/5

Freshservice is Freshworks' IT service management tool, and a frequent pick in Ivanti alternatives guides for teams leaving Ivanti Neurons for ITSM. Many of those teams inherited Cherwell or Heat, two products Ivanti bought, and they want out of heavy configuration. Freshservice gives them incident, problem, change and release management in a clean interface, plus IT asset management and a self-service portal.

Prices are public and per agent, the people who work tickets: you are billed only for full-time agent seats, and occasional helpers use Day Passes from $3, with three free at sign-up. Starter costs $19 per agent a month billed annually ($29 billed monthly) and covers incidents, knowledge, tasks and the support portal. Growth is $49 ($59 monthly) and adds the service catalog, SLA management, on-call and cloud management. Pro is $99 ($119 monthly) and adds problem, change, major incident and release management, which a team coming from Ivanti will expect. Enterprise is on quote and adds a sandbox and audit logs.

Watch the extras. Freddy AI Copilot costs $29 per agent a month on top, billed annually ($35 monthly), and assets are licensed in Asset Units sold in packs of 500. For a 10-agent team on Pro, the base is $11,880 a year before AI or assets. That is still usually simpler to budget than a Neurons quote, and the 14-day trial gives unrestricted access to every feature. One contract detail: downgrades and cancellations only take effect at the end of your term, so keep the first term short. If the per-agent bill becomes the problem later, our Freshservice alternatives cover the next move.

Standout features
  • Full ITIL processes on Pro
  • Billed on full-time agent seats only
  • Interface agents learn in days
+Pros
  • ✓Public prices for three of four plans
  • ✓14-day trial with every feature unlocked
  • ✓Asset management in the same tool
−Cons
  • ✗Change and problem management need Pro at $99
  • ✗Freddy AI Copilot adds $29 per agent
  • ✗No endpoint patching: pair it with an RMM
Freshservice vs Ivanti
CriterionFreshserviceIvanti
Entry price$19/agent/month billed annuallyQuote
ITIL processesChange and problem on Pro, $99/agent/month14 ITIL 4-certified practices
Trial14 days, all featuresDemo on request
Endpoint patchingNoSeparate Ivanti products
Verdict

The fastest way off Ivanti Neurons for ITSM for a mid-size team: plan on the Pro tier if you run formal change management.

Try Freshservice →
5
Best ITSM for teams already on Jira

Jira Service Management

3.9/5

Jira Service Management is Atlassian's service desk, now sold within its Service Collection. For a team leaving Ivanti Neurons for ITSM, the strongest argument is the link with engineering: an incident or a change request in the service desk connects directly to the Jira issue that fixes it, without an integration to maintain.

The pricing is public and per agent, and customers who raise requests are unlimited and free. The Free plan covers up to three agents with 2 GB of storage and 100 email notifications a day. Standard costs $26.90 per agent a month on monthly billing for 10 agents ($21.50 at 75) and already includes asset and configuration management, the CMDB an Ivanti customer looks for, with 5,000 Assets objects. Premium, at $61.60 per agent for 10 agents ($55.28 at 75), adds change management with CAB approvals, advanced incident and problem management and 50,000 objects. Enterprise is billed annually only.

The limits are configuration and scope. Jira Service Management does not patch or deploy software to endpoints, so you still need an endpoint tool from this list. Its flexibility is also its cost: schemes, workflows and automation rules need an admin who knows Jira. Automation is metered, too: 1,250 automation steps per month on the Free plan, 3,000 per user on Standard. So are assets: above the included allowance, objects start at $0.02 each a month, so importing 20,000 objects from an Ivanti CMDB onto Standard adds $300 a month at that rate, before volume discounts.

Standout features
  • Free plan for three agents
  • Incidents linked to Jira engineering work
  • CMDB included from Standard (5,000 objects)
+Pros
  • ✓Public per-agent prices
  • ✓Unlimited free customers raising requests
  • ✓Large app marketplace
−Cons
  • ✗No endpoint patching or deployment
  • ✗Needs a Jira-savvy admin
  • ✗Change management waits for Premium ($61.60 at 10 agents)
Jira Service Management vs Ivanti
CriterionJira Service ManagementIvanti
Entry priceFree for 3 agents, then $26.90/agent at 10 agentsQuote
CMDBStandard, 5,000 objects includedIncluded in Neurons for ITSM
Dev linkNative JiraIntegration
Endpoint toolsNoYes, separate products
Verdict

A strong ITSM switch when your engineers live in Jira, as long as you budget Premium for change management and keep a separate endpoint tool.

Try Jira Service Management →
6
Best free patch management for small fleets

Action1

3.9/5

Action1 is a cloud patch management platform for Windows, macOS, Linux and Windows Server, with automated patching of hundreds of third-party applications, vulnerability remediation, software deployment, browser-based remote access and asset inventory. If what you mostly used in Ivanti was Patch for Endpoint Manager or Neurons for Patch Management, this is the most direct and the cheapest swap.

Its pricing is unusual: Action1 is free for your first 200 endpoints, with no feature limits, and the free edition never expires. Past 200 endpoints you fill in a form and get a quote. That makes it easy to run alongside Ivanti for a month on a pilot group before deciding. Note that free users get community support through Discord rather than a support contract.

The limits show in larger or regulated environments. Action1 is a patch and endpoint tool, not a full suite: no service desk and no OS imaging. It pairs well with Intune, a combination Action1 itself promotes for third-party patching.

Standout features
  • Free for the first 200 endpoints, no feature limits
  • Windows, macOS, Linux and third-party patching
  • Browser-based remote access included
+Pros
  • ✓Real free plan, not a time-limited trial
  • ✓Cloud-native: no WSUS server to run
  • ✓Pairs well with Intune for third-party apps
−Cons
  • ✗Quote only above 200 endpoints
  • ✗Community support on the free edition
  • ✗No service desk or OS imaging
Action1 vs Ivanti
CriterionAction1Ivanti
PriceFree to 200 endpointsQuote
ScopePatching and endpoint managementFull IT suite
HostingCloud onlyOn-premises or cloud
SupportCommunity on free editionContract support
Verdict

The obvious first test if patching is the Ivanti module you pay most for, and you manage fewer than 200 machines.

Try Action1 →
7
Best cloud patching with a flat per-device price

Automox

3.8/5

Automox is a cloud-native patching and endpoint automation platform for Windows, macOS and Linux, computers and servers alike. It replaces the patch job of Ivanti Endpoint Manager or Ivanti Neurons for Patch Management with an agent and a web console, and, on Automate Enterprise, its Worklets (scripts you schedule across devices) cover the custom fixes Ivanti admins used to package by hand.

The entry plan, Patch OS, costs $1 per endpoint a month with an annual commitment, or you can pay monthly for what you use with no commitment (the annual plan saves 25%). For 500 endpoints that is $500 a month, or $6,000 a year. Read the plan line carefully, though: Patch OS covers operating system patching. Third-party application patching (633+ titles), software deployment and API access sit in Automate Essentials, which has custom pricing. Most Ivanti customers patch Chrome, Adobe and Java too, so the $1 headline is rarely the real price. Two billing rules matter too: annual plans are charged upfront for the endpoints you subscribe, and each device you add above that is billed at the same rate, annualized and prorated for the rest of the term. Volume discounts start at 200 device licenses or with a multi-year contract.

Automox is narrower than Ivanti: no service desk, no imaging, no MDM for phones. It suits teams that want patching solved and run everything else elsewhere. Note that Standard support allows up to five tickets a month; unlimited tickets come with the Preferred support level. If remote support is the gap, our remote desktop software ranking covers dedicated tools.

Standout features
  • Patch OS at $1 per endpoint a month, annual
  • Windows, macOS and Linux from one console
  • Worklets scripting on Automate Enterprise
+Pros
  • ✓Flat per-device entry price
  • ✓Monthly pay-as-you-go option, no commitment
  • ✓Covers servers as well as laptops
−Cons
  • ✗Third-party patching needs a custom-priced plan
  • ✗No service desk or mobile devices
  • ✗Remote control listed with Automate Enterprise
Automox vs Ivanti
CriterionAutomoxIvanti
Entry price$1/endpoint/month, annualQuote
Third-party patchingAutomate Essentials, custom pricingIncluded
HostingCloud onlyOn-premises or cloud
ScriptingWorklets (Automate Enterprise)Packages and scripts
Verdict

A clean cloud patching swap at a simple price, as long as you price Automate Essentials if you need third-party apps.

Try Automox →
At a glance

7 Ivanti alternatives compared

The seven alternatives side by side, with the entry price each pricing page shows and its billing unit (per endpoint, per user or per agent). The edge column gives the main reason to pick each one over Ivanti. Tap a tool to jump to its card.

Best forEdge over IvantiFree planTeam sizeVisit
1NinjaOneBest overall for endpoint and patch managementCloud RMM and patching, per-device price4.3/5$3.75 per endpoint/month at 50 endpoints or fewer—IT teams and MSPsVisit →
2ManageEngine (Endpoint Central and ServiceDesk Plus)Best full suite to replace Ivanti end to endEndpoint and ITSM from one vendor, public prices4.1/5Endpoint Central from $795/year for 50 endpoints✓Mid-size to enterprise ITVisit →
3Microsoft IntuneBest for Microsoft 365 shopsOften included in Microsoft 365 E3 or E54.0/5Plan 1 $8/user/month standalone, included in Microsoft 365 E3 and E5—Microsoft 365 companiesVisit →
4FreshserviceBest Ivanti Neurons for ITSM replacement for mid-size ITITSM agents learn in days4.0/5$19/agent/month billed annually ($29 monthly)—Mid-size IT teamsVisit →
5Jira Service ManagementBest ITSM for teams already on JiraService desk linked to Jira engineering3.9/5Free for 3 agents, Standard $26.90/agent/month at 10 agents✓IT teams working with developersVisit →
6Action1Best free patch management for small fleetsFree patching up to 200 endpoints3.9/5Free for the first 200 endpoints, quote above✓Small fleets, up to 200 freeVisit →
7AutomoxBest cloud patching with a flat per-device price$1 per endpoint OS patching3.8/5Patch OS $1/endpoint/month with annual commitment—Mixed OS fleetsVisit →

Ivanti for reference: Endpoint Manager, Neurons for UEM, Neurons for Patch Management, Neurons for ITSM and Connect Secure are sold through sales, on quote. Endpoint tools bill per device or per user, ITSM tools per agent: compare on the same unit.

Is your tool missing from this page? Email us: hello@hackceleration.com

Buyer's guide

How to choose an Ivanti alternative

Ivanti is not one product but several categories under one brand, so the first step is naming the category you are replacing. Endpoint management (UEM) tools install an agent on every laptop, desktop and server, then use it to inventory hardware and software, deploy applications, push operating system and third-party patches, enforce settings and take remote control. Mobile device management is the same idea for phones and tablets, using the enrollment programs of Apple, Google and Microsoft. RMM tools are the version built for MSPs that manage many clients, with monitoring and alerting on top. IT service management (ITSM) is a different job: a service desk where employees raise tickets, and where IT runs incidents, problems, changes and assets according to ITIL. Secure access (VPN or zero trust) is a third, separate category.

Each category bills differently, which is where most comparisons go wrong. Endpoint tools bill per device (NinjaOne, Action1, Automox, ManageEngine) or per user (Intune). ITSM tools bill per agent, the technician who works tickets, and employees who raise requests are free. A technician seat can also be the admin who runs an endpoint console: each Endpoint Central edition includes a base number of technician seats, and extra ones are an add-on. So a 300-employee company with 400 devices and 6 IT agents compares 400 device licenses against 300 user licenses on the endpoint side, and 6 agent seats on the ITSM side.

Before comparing features, list what Ivanti actually does for you today: which modules are switched on, how many endpoints and agents are licensed, which integrations feed it (Active Directory, SCCM, a CMDB) and which reports your auditors ask for. Then ask every shortlisted vendor in writing for the price at your volume, what third-party patching costs, whether servers count as endpoints, how long data is kept and how to export it.

If you are replacing Ivanti Connect Secure, you need a different shortlist: secure access and zero trust network access tools, covered in our ranking of the best business VPNs and our guide to switching from Cloudflare Zero Trust. For the ITSM side, see our best ITSM software ranking and the best help desk software; for devices, our best MDM software, Mac MDM software and IT asset management software rankings.

The pricing traps we found in the grids

Read every grid to the bottom. Automox's $1 plan leaves third-party patching to a custom-priced tier. Freshservice costs $29 instead of $19 per agent on monthly billing (53% more). ManageEngine's free service desk needs a $35 per technician annual fee for support, and its change management is a $2,395 add-on below Enterprise. Jira Service Management charges from $0.02 per Assets object a month above the allowance of each plan. Intune's advanced modules are add-ons unless your E3 or E5 seats include them. And NinjaOne's published range applies to its commercial cloud, not to the FedRAMP instance.

If you are an MSP

NinjaOne or another RMM built for multi-tenant work, such as Atera or Kaseya VSA, fits better than any Ivanti product. Price per endpoint, not per technician, and check that client separation and billing integrations are included. NinjaOne also sells backup on the same console; our cloud backup for MSPs ranking compares it with dedicated tools.

If you live in Microsoft 365

Start with Intune, which E3 and E5 already include, and add Action1 or Intune's Enterprise Application Management for third-party patching.

If you are replacing Neurons for ITSM in a large enterprise

ServiceNow is the enterprise reference and BMC Helix the other heavyweight; for mid-size teams Freshservice or Jira Service Management cost far less. Export your Neurons for ITSM incident history and CMDB before the contract ends, and rebuild only the workflows you still use. If you need a partner, see our ServiceNow agencies and the ServiceNow alternatives if its cost is the problem.

If you want to keep everything on-premises

ManageEngine is the main option with both endpoint and service desk products you can host yourself. Quest KACE is another appliance-based choice for endpoint management, and SolarWinds Service Desk covers the ITSM side in the cloud.
  • Which Ivanti products and modules are you actually using?
  • How many endpoints, users and service desk agents do you license?
  • Do servers and mobile devices count as endpoints, and at what price?
  • Is third-party patching included in the plan you are quoted?
  • Can a vulnerability or failed patch found by the endpoint tool become a ticket in the service desk without an export?
  • How will you export tickets, assets and CMDB data from Ivanti before the contract ends?
  • What is the price at renewal, in writing?
  • Is the quoted price annual or monthly, and is it charged upfront?
FAQ · 9 questions

Ivanti alternatives: FAQ

  • What is Ivanti used for?
    Ivanti is used mainly for managing and patching company devices, running an IT service desk and giving remote employees secure network access. Its main lines are Endpoint Manager (the former LANDESK), Neurons for UEM (with MobileIron), Neurons for ITSM (Cherwell and Heat) and Connect Secure (the former Pulse Secure VPN). On Endpoint Manager, patching and mobile device management are sold as add-ons, which is worth knowing when you compare it with tools that include them.
  • Is Ivanti Connect Secure still safe to use?
    Only with strict patching. CISA ordered federal agencies to disconnect all instances of Connect Secure and Policy Secure in early 2024, and added CVE-2025-0282 to its Known Exploited Vulnerabilities catalog in 2025. Ivanti has since rebuilt Connect Secure 25.x on Oracle Linux 9 with SELinux in enforcement mode, secure boot and a web application firewall. If you keep it, run that release, apply advisories within days and run the External Integrity Checker Tool after each one.
  • What did CISA require agencies to do about Ivanti?
    Emergency Directive 24-01 first required agencies to import Ivanti's mitigation file and run its External Integrity Checker Tool, then to report compromises. A supplemental direction went further and required agencies to disconnect all Connect Secure and Policy Secure instances, and to reset certificates, admin passwords and API keys before bringing them back.
  • Is Ivanti DSM end of life?
    Yes. Ivanti has an end-of-life plan in place for Desktop and Server Management (DSM), with a transition window it describes as running to the end of 2026. It points DSM customers to Neurons for UEM, Neurons for Patch Management or Neurons for Digital Employee Experience, and lets DSM and Neurons run side by side during the move. Since agents, packages and policies get rebuilt either way, it is the right moment to compare Neurons with the tools on this page.
  • What is the difference between Ivanti Endpoint Manager and Ivanti Neurons?
    Endpoint Manager is the on-premises client management suite inherited from LANDESK, run from a core server you host. Neurons is Ivanti's cloud platform, with Neurons for UEM, Neurons for Patch Management and Neurons for ITSM. Ivanti presents Neurons as the path for customers starting a cloud migration, so an EPM renewal is a natural point to compare.
  • Is there an open-source alternative to Ivanti?
    Not a complete one. For the service desk, GLPI (GPLv3) and Zammad (AGPLv3) are open-source ticketing tools, and OCS Inventory (GPLv2) covers self-hosted endpoint inventory. Each covers one job, so you would assemble several to match Ivanti's patching, imaging and mobile management, and run the servers yourself; most teams pick a free tier instead, such as Action1 up to 200 endpoints.
  • Can Microsoft Intune replace Ivanti Endpoint Manager?
    For laptops and phones, often yes. Intune Plan 1 covers cross-platform device management and app protection. One point Ivanti shops miss: most licenses that include Intune also grant the right to use Configuration Manager, Microsoft's on-premises client management tool, so you can keep an on-premises console for servers and imaging while devices move to the cloud.
  • How long does it take to migrate away from Ivanti?
    Plan on several weeks for endpoints and a few months for a service desk. Endpoint moves go fast because a new agent is pushed in waves, often through the old Ivanti console itself, before uninstalling the Ivanti agent. Run the pilot on a trial you can keep: Endpoint Central carries over configurations and agents from its 30-day trial if you buy before it ends. ITSM migrations take longer because tickets, assets and workflows must be exported, cleaned and rebuilt, so start three to six months before renewal.
  • Do servers count as endpoints in these tools?
    Usually yes, but not always at the same price. Endpoint Central prices endpoints and servers separately, in tiered brackets. NinjaOne bills per device its agent is deployed to, and Automox prices per endpoint for computers and servers alike. Ask for the server line in writing before you compare quotes.
Hack'celeration Lab

Get the next breakdown in your inbox

No spam. Unsubscribe anytime.