Homebrew + Microsoft Intune
Intune manages your macOS devices. EnterpriseBrew manages the packages developers install on them with Homebrew — the largest unmanaged software channel on a developer Mac.
Roll out with an Intune script or package
Deploy the EnterpriseBrew agent to macOS devices with a standard Intune shell script or package assignment. From then on, brew installs on managed devices route through your policies — no per-machine setup.
Inventory synced from Intune
Devices and groups sync from Intune into EnterpriseBrew, so install policies can target the device groups you already manage. Fleet inventory shows every Homebrew package on every enrolled machine.
Fills the gap Intune leaves on macOS
Intune governs apps you package and push. It has no view of what developers pull in themselves with Homebrew — compilers, CLIs, databases, and their dependency trees. EnterpriseBrew puts that whole channel behind allowlists, blocklists, license rules, and version requirements, enforced server-side at install time.
Evidence for your security team
Every install is written to an audit log with the real user and hostname, streamable to your SIEM. Install requests are checked against the best available vulnerability data before they are approved, and known-exploited vulnerabilities are blocked outright.