EVASUITE
Apple fleet management, endpoint security and remote support

Manage the fleet.
Protect every endpoint.
Support in one click.

Eva runs the Macs, the mail, the backups and the support desk for Mac-first businesses and the IT teams that look after them, in one place, in plain English. Every number on this page is live from the fleets Eva looks after today.

Book a technical walkthroughSee the suite
32.6MDNS lookups analysed, last 30 days
691,700threats blocked since launch
896,122+malicious domains enforced
414,248emails watched since launch
EVA SUITE · ONE MAC, AT A GLANCE
One Mac in Eva: a plain-English summary, then health, Protect, detections, mail, backup and remote, each in words

One Mac in Eva. A sentence that says how it is doing, then health, Protect, detections, mail, backup, remote and software, each in words, each a link.

Companies running on Eva have passed the security assessments and supplier audits required to win and hold work with:

UK Defence
Global Consumer Tech
Hyperscale Cloud
Global Social Media
Global Banks & Airlines
IASMECyber Assurance
THE SUITE

Seven live products, one coming. One sign-in, one policy model.

Each product is a page in the same console, scoped to your company, with an engineering layer underneath that THAT MAC CHAP runs for you.

MDM

Every Mac set up, kept right, proven.

Zero-touch enrolment, profiles, apps, updates, compliance, in one place.

  • Profile Studio: every macOS and app setting, checked against your Macs before it ships
  • Declarative management on Eva's channel today; declarations built in the studio soon
  • History and one-click revert on every policy and profile
  • One health state per Mac, with the reasons listed, plus owner, location trail and browser extensions
PROTECT

Threats stopped before they load.

DNS filtering with Block, Warn and Watch, endpoint detection, browser extensions, mail watch.

  • Brand new websites get their own page that explains why most phishing starts there
  • SafeSearch and YouTube restrictions, with Private Relay and encrypted-DNS bypasses closed
  • USB control and tamper reporting, with a Needs-your-decision inbox for anything waiting on a person
  • Continue anyway on Warn sites, until midnight, recorded for the approver
REMOTE

Support that asks the user first.

One click from the ticket to the screen, with consent on the Mac.

  • Engineer connects in the browser, nothing to install
  • Browser screen share and phone camera "Show Me"
  • Last screen remembered, with the time it was seen
DESK

A service desk your people will use.

Tickets, approvals and the mail watch, under your own name.

  • Held mail released or blocked in one click
  • Observe or Act, chosen per company
  • Weekly report in plain words, not a log
LEARN

Short security training that sticks.

Questions written for your people, tracked per person.

  • Phishing, passwords, devices, data
  • Progress per person and per team
  • Evidence for audits, ready to export
VAULT

Passwords and secrets, shared safely.

Company credentials with access by role, not by Slack message.

  • Shared vaults per team
  • Single sign-on with your work account
  • Access reviewed with leavers
BAASNEW

Home folders backed up to your shed.

Hourly, hash-checked, never deleted by the backup.

  • Named people, not the whole fleet
  • Pause, resume and choose folders from the console
  • Restore any file from your own archive
ASSURESOON

Audit evidence, assembled for you.

Cyber Essentials, ISO 27001 and supplier questionnaires from live data.

  • Controls mapped to what Eva already enforces
  • Gaps listed with the fix
  • Export packs for assessors
SEE IT

See it

Every screen below is Eva as it runs today. Plain words, one place, nothing to decode.

MDM · PROFILE STUDIO

Any setting, any app, built in minutes.

Search every setting macOS and your apps support, or browse the library with the app's own logo. Pick as many as you like; they go out together as one profile, written in plain words, with a readable name and description.

  • Over a hundred Apple payloads and a hundred app manifests, refreshed every night from Apple's own schema
  • Switches and segmented controls instead of plist keys, with help text on every setting
  • Upload a .mobileconfig you already have and edit it the same way
Profile Studio Choose step with Apple payloads and app logos
MDM · PROFILE STUDIO · CHECKS

Checked against your Macs before anything is pushed.

Eva compares the profile with the company's real Macs and with what THAT MAC CHAP already manages: macOS versions, supervised-only settings, and settings our own profiles already set. A clash is left out, explained kindly, with a one-click ask to change our side.

  • "Works on all 38 Macs" or exactly which ones will ignore a setting
  • Try it on one Mac first, then roll out
  • Every version kept, with Restore
Profile Studio Check step showing compatibility and a clash with a THAT MAC CHAP profile
PROTECT · POLICY

Block, Warn or Watch, and you can read it.

Every category has four states. Block stops the site. Warn shows a notice and lets the person continue until midnight, with the approver told. Watch lets it load and counts it. Quiet keeps the Mac pop-up away. Presets, locks, a tester and a history card with who, when, why and Revert.

  • A default policy, inherited or overridden per company, with per-Mac exceptions
  • SafeSearch, YouTube levels and bypass closing as switches
  • Locked settings show as enforced to your admins
Protect policy page with Block, Warn, Watch and Off controls and a Quiet switch
PROTECT · WATCH AND WARN

See what is used before you decide to block it.

Watched visits by day and category, the sites behind the numbers, who continued past a warning and until when, and whether each Mac's protection is intact. Report only; Eva never locks people out.

  • Fourteen days of watched visits, by category
  • Continue-anyway decisions listed with the Mac and the time
  • Protection integrity per Mac, reported by the Mac itself
Watch and Warn page with a daily chart and the most watched sites
PROTECT · MAIL WATCH

Suspicious mail, scored and held, or just listed if you prefer.

Every mailbox is watched. In Act mode suspicious mail is held in the person's Eva Protect folder the moment it lands. In Observe mode it is only listed. Switching is one click and a typed reason.

  • Release, block the sender, or remove a message from every mailbox
  • Search any message the watch has seen and see where it sits now
  • Works with Microsoft 365 and Google Workspace
Mail watch page with Act state, held count and charts
PROTECT · NEEDS YOUR DECISION

Everything waiting on a person, in one place.

Site requests from the block page, USB drives waiting for approval, and security alerts nobody has looked at yet. Each one opens where it is decided, and the count sits on the menu so nothing waits unseen.

  • Approve a site for one Mac or the whole company, with an expiry
  • One click on a drive, one click on an alert
  • The person who asked gets one email, only when it is approved
Needs your decision page listing site requests, USB drives and alerts
PROTECT · DETECTIONS

Endpoint detections handled as cases.

An Endpoint Security agent on every Mac reports persistence, login items, Gatekeeper overrides, privilege grants and mass file changes. Each one becomes a case with an owner, a status and notes, so nothing is acknowledged into the void.

  • New, looking, resolved, false positive
  • "Mark all from this Mac" with a reason
  • Unwanted software flagged across every company
Detections page with charts by day, severity and kind
PROTECT · BLOCK PAGE

A block page that says what happened and what to do.

Stopped before it loaded, which rule it matched, and a short form: name, work email and why. The request goes to the right approver for that company, and when allowed the site just starts working, no restart.

  • Dark for a threat, amber for a company rule, mint for a brand new website
  • Warn pages let the person continue, and tell the approver
  • Names the Mac so the approver knows who asked
Eva Protect block page for a company rule
MDM · OVERVIEW

History on everything, not just today's count.

A fleet briefing in a sentence, then Macs, compliance, threats and disk, where everyone is signing in from, and trends on every product page, so a trend is a glance, not a report.

  • Fleet, company and single-Mac views, switched from the top bar
  • Read-only view for your admins, engineering view underneath
  • Honest empty states when there is nothing yet
Overview page with the fleet briefing, tiles and a map
BAAS

Backups you can see, to a shed you own.

Home folders of the people who matter go hourly into your company's shed, hash-checked, never deleted by the backup. Bytes, files, run times and state, charted.

  • Pause, resume, pick folders, run now
  • Clean, behind, errors, paused: one pill per Mac
  • Restore from the shed, with versions
Eva BaaS page with tiles and charts
REMOTE

Support that asks the user first.

One click from the ticket to the screen. The person sees who is asking and why, and nothing happens until they say yes. Readiness is shown before you connect, and the last screen is remembered with the time it was seen.

  • Engineer connects in the browser, nothing to install
  • Browser screen share and phone camera "Show Me"
  • Every session consented and on record
Eva Remote card with Connect, readiness pills, last screen and the consent prompt the person sees
LEARN

Short security training that sticks.

Courses of six to nine questions, written for the people who run your business, tracked per person and per team, with the evidence an assessor asks for ready to export.

  • Phishing, passwords, devices away from the office, client data
  • Completion per course and per person, with reminders
  • Phishing simulation results alongside
Eva Learn course list with completion
VAULT

Passwords and secrets, shared safely.

Company credentials in vaults by team and client, opened with the work account people already have, with every use on record and access reviewed when someone leaves.

  • Shared vaults per team and per client
  • Passkeys where the service supports them
  • Single sign-on, no master password to lose
Eva Vault entry list
FOR IN-HOUSE IT TEAMS

You keep the console and the decisions. We run the engineering underneath.

Eva was built for companies without an IT team. It works just as well for the ones that have one.

Your team decides

  • Admin and approver roles for your own people, each scoped to your company
  • Your own profiles and Protect policies, within guard rails that keep the fleet safe
  • Site requests, USB drives and alerts land with your approvers, not ours
  • An audit log of every change, yours and ours

THAT MAC CHAP runs the rest

  • Threat feeds, the block lists and the never-block safelist, updated daily
  • macOS updates, enrolment, the agents and the Endpoint Security extension
  • Detections triage, the mail watch tuning, backups and the remote relay
  • A weekly report in plain words, and an engineer when you want one
HOW IT STARTS

Live in a week, without touching a Mac.

01

Walkthrough

An hour with THAT MAC CHAP on your fleet, your mail and what you need to prove. You leave with a plan and a price.

02

Enrol

Apple Business Manager and your identity provider connect; Macs enrol themselves. Mail watch starts in Observe so you see before anything is held.

03

Run

You get the console and a weekly report in plain words. The engineering layer is run for you: updates, detections, requests, backups.

See your own fleet in Eva.

A technical walkthrough on your estate, with the people who built it. No slide deck.

Book a technical walkthroughRead the security overview