Intuneomator
Intuneomator is a macOS enterprise tool that automates Microsoft Intune app lifecycle management, leveraging Installomator’s 900+ label database for multi-arch apps. It enables end-to-end workflows (download, package, upload, deploy), group targeting, metadata and script automation, plus Teams-based status and CVE alerts. Built with a secure XPC architecture, keychain-backed credentials, and dual authentication for enterprise-grade security.
Security Analysis
7 files scanned on Jul 12, 2026
The codebase contains eval-based dynamic loading of label data, and mechanisms capable of downloading/executing components from remote sources, which pose legitimate security risks if inputs are not strictly validated and signed. Additionally, programmatic modification of build phases could be abused in CI environments. Mitigations include avoiding eval on untrusted data, strict validation and signing of downloaded artifacts, whitelisting allowed URLs, and auditing build-phase injections.
You might also like
Device Offboarding Manager
A PowerShell-based GUI application for streamlined device lifecycle management across Microsoft cloud services. Enables bulk device offboarding from Intune, Autopilot, and Entra ID from a single interface. Features real-time dashboard analytics, stale device tracking, automatic BitLocker and FileVault key retrieval, CSV/TXT import for bulk operations, and pre-built playbooks for automated workflows.
Ugur KocIntuneManagement
A PowerShell application with WPF GUI for managing Microsoft Intune and Azure policies. Features export, import, copy, delete, document, and compare operations across 30+ object types with cross-tenant migration, ADMX import, bulk operations, and automated documentation.
Micke KarlssonIntuneComplianceMaintainer
IntuneComplianceMaintainer is a PowerShell automation script that keeps Microsoft Intune compliance and app-protection policies up to date with the latest supported OS minimums across iOS, iPadOS, macOS, Android, and Windows. It uses endoflife.date and the Graph Windows Update Catalog to drive cadence-based updates, with flexible authentication (Managed Identity, App Registration with certificate or secret, plus Key Vault integration) and safety features like dry-run and downgrade protection. It provides comprehensive logging and built-in retry logic for resilience.
James RobinsonIntune Toolkit
A PowerShell-based GUI solution for managing Microsoft Intune policies. Features Microsoft Graph authentication, multi-platform policy and app management, assignment operations, backup/restore in JSON format, CSV/Markdown export, and comprehensive activity logging.
Maxime Guillemin