Automated third party app management for Windows and macOS in Microsoft Intune
Patch less. Sleep more.
Vendors ship new versions day and night. We catch every one, build it for your own Intune tenant, and hold it until you say yes. Then it rolls out ring by ring, and you can take it back in one click.
- 25,000+ apps
- ready to package
- Windows and macOS
- one place for both
- Built in your own tenant
- never on our shelves
- You decide what ships
- every single version
See it before you sign up.
Real screens from Reploya, filled with demo data.
Slide 1 of 9: Dashboard. Apps, waiting versions and recent builds at a glance.
Everything Reploya does today.
From the vendor's installer to the last device, and everything you need to keep an eye on it.
Library and packaging
Built for your tenant, never pulled from a shared shelf.
Pick from thousands of apps. We fetch each installer from its vendor, check its hash and build the package for your tenant alone.
Approvals
Nothing reaches a device until you say so.
Every new version waits for an approver who sees exactly what goes where. Trusted apps can pass on a rule after the days you choose.
macOS too
PKG and DMG, side by side with Win32.
Signatures checked and the bundle confirmed before anything goes near your Macs.
Rollouts
Pilot first, then the fleet.
Update rings on your schedule. Halt, advance early, or roll back to the last version in one action.
Security
Know which installed apps are vulnerable.
Known CVEs on your devices, checked against the public list every hour. A mail when attackers start using one.
Visibility
Know where every app stands.
Patch coverage, devices, failed installs and trends, with CSV export.
Policy Manager
Your Intune policies, versioned.
Backed up every hour. Compare versions, restore the last good one, edit settings.
Integrations
Webhooks, API and MCP.
Events to Teams or Slack, a REST API for scripts, and your AI assistant, read only.
Your install settings
Your commands, return codes and detection rules, carried over from Intune. Override anything, per app.
Company Portal ready
Icon, categories, links and description travel with every new version. Updates never wipe them.
Duplicate an Intune app
Fork an app into a second one with its own groups and settings. The original stays untouched.
Company Portal offers
Offer an app in the Company Portal, and update only the devices that already chose it.
Check now
A vendor just shipped? Check now instead of waiting for the next scheduled run.
Tenant scan
Scan your tenant for the Windows apps you already run and bring them all in at once.
Email digests
One calm mail when versions wait or something fails. Never one per event.
Teams and roles
Owner, admin, approver or viewer. Every role holds on every screen.
Activity log
Who approved, built, deployed and changed what. The whole story, for the whole organization.
All of it. For Windows and macOS.
Join the betaFrom the vendor's release to your last device. You only decide.
- Step 1
A new version drops
We watch every vendor of every app you manage, and notice when a new version appears.
- Step 2
Built and verified for you
The installer comes straight from the vendor. We check its hash or signature, then build the package for your tenant alone.
- Step 3
You say yes
It waits for your approver, showing exactly which groups it will reach. Or a rule you trust approves it after the days you set.
- Step 4
It rolls out, ring by ring
Pilot devices first, then wider groups after the delay you chose. Halt it, or roll it back, at any moment.
We built Reploya because nobody should wrap installers at midnight.
Every month, Intune admins lose hours to the same ritual: download the installer, wrap the package, write the detection rule, assign it again. For every new version of every third party app. Miss one, and a known vulnerability sits quietly on your devices.
We take that ritual off your desk. We build every package for your tenant from the vendor's own installer and publish it into your Intune. What is left for you is the part that matters: the decision.
Your tenant
Every package is built for your tenant and published into your own Intune. We hold no credential of yours.
Your call
Nothing reaches a device because we decided it should. Every version waits for you, or for a rule you set.
Straight from the vendor
Installers come from their vendors at build time. We never host a vendor's software for download.
One price per device. Packaging, approvals and rollouts in every plan.
Packaging for Windows and macOS, approvals, rings, rollback, reports, Policy Manager and Security in every plan. Webhooks, the REST API and MCP depend on the plan; see the cards.
Starter
Up to 1,000 devices
€1.50per device / month
billed yearly, excl. VAT
- Full app library (25,000 apps)
- Windows and macOS packaging
- Approvals and auto approve rules
- Update rings and rollback
- Reports with CSV export
- Policy Manager
- Email digests
- Teams and roles
- Activity log
- Tenant scan
- Vulnerability checks
- Not included: Webhooks
- Not included: REST API
- Not included: MCP connector
- Not included: Single sign-on (coming soon)
Business
RecommendedUp to 2,500 devices
€2.00per device / month
billed yearly, excl. VAT
- Full app library (25,000 apps)
- Windows and macOS packaging
- Approvals and auto approve rules
- Update rings and rollback
- Reports with CSV export
- Policy Manager
- Email digests
- Teams and roles
- Activity log
- Tenant scan
- Vulnerability checks
- Webhooks
- REST API
- MCP connector
- Single sign-on (coming soon)
Enterprise
More than 2,500 devices
Contact us
A plan sized for your fleet
- Full app library (25,000 apps)
- Windows and macOS packaging
- Approvals and auto approve rules
- Update rings and rollback
- Reports with CSV export
- Policy Manager
- Email digests
- Teams and roles
- Activity log
- Tenant scan
- Vulnerability checks
- Webhooks
- REST API
- MCP connector
- Single sign-on (coming soon)
Prices per managed device and month, billed yearly, excluding VAT. Device limits are guidance until self service billing arrives.
The questions every admin asks first.
What does Reploya need in my Intune tenant?
One consent, given by an admin of your tenant, to Reploya's Microsoft app, with three application permissions: manage Intune apps (to publish and assign packages), read managed devices (for install reports) and read groups (for your rollout targets). We store no credential of yours, and you can revoke the consent at any time in Microsoft Entra ID.
Do you redistribute vendor installers?
Never. Each installer comes from its vendor at the moment your package is built, is checked against its hash or signature, and is packaged for your tenant alone. We never offer vendor software for download.
Which platforms are supported?
Both. Windows (Win32 apps) and macOS (PKG and DMG apps), in every plan.
How do I get access during the beta?
Join the waitlist with your work email and confirm the address. When the beta opens, we email you. Then you sign in with your Microsoft work account and connect your tenant. Nothing to install.
How do updates reach our devices?
Only through you. Every new version waits for your approval, or for an auto approve rule you set per app. Approved versions are assigned in Intune to your groups, ring by ring if you use update rings, and Intune installs them on its own schedule. You can halt a rollout or roll back to the previous version at any time.
How does Reploya show security problems?
The Security pages list the app versions installed on your devices that have known vulnerabilities (CVEs). They use the public CVE list and the CISA list of vulnerabilities attackers already use. Both are refreshed every hour and need no extra permission in your tenant. Security covers the apps in our library. An app we cannot match yet says "Not checked yet", so it never looks clean. When attackers start using a vulnerability that hits a version you run, every member gets an email right away. Security is in every plan.
Where is our data stored?
In Germany. Reploya runs on servers there, and keeps what it needs to manage your apps: your organization, members, app settings, deployments and the install reports read from Intune.
Your next update is already on its way. Be the one who approves it.
We are in private beta. Leave your work email, and we will tell you the moment you can connect your Intune tenant.
- Your tenant, your packages
- You approve every update
- Windows and macOS, side by side
Double opt in: nothing happens until you confirm. We delete your address after the beta invitation, at the latest 12 months after you confirm.
Talk to the people who build it.
A question about your tenant, a larger fleet, or how we fit your rollout process? Write to us.
Help shape the beta
Reploya is in beta, and what Intune admins tell us decides what we build next. You shape what Reploya becomes.
- Features you miss in your rollouts
- Apps you want in the catalog
- Rough edges, and questions about pricing
Prefer your own mail client? Email reaches the same people.
support@reploya.comSend a message
Tell us what you need, and we reply to your work email.