Enforcing security policies in minutes across a regulated healthcare environment

A healthcare technology organization operating in a highly regulated environment that requires SOC 2, HIPAA, and HITRUST compliance needed a centralized management solution for a globally distributed fleet that could enforce policies faster than the industry standard.

At a glance

• Endpoints: ~300 hosts initially, scaling to 500 (Mac, Windows, Linux).
• Primary requirement: rapid policy enforcement and multi-OS support.
• Key integrations: centralized multi-OS management, policy enforcement capabilities, and support for self-hosting.Self-hosting for HITRUST compliance.
• Previous solution: Intune.

The challenge

Under Intune, the team faced policy deployment times that could take up to a month. This was ineffective for a team managing multiple OS platforms across a global workforce. They also lacked the visibility needed to ensure remote devices remained compliant with strict security frameworks.

The solution

The team chose Fleet to achieve centralized management and rapid policy enforcement. By running a self-hosted instance, they maintained the data control necessary to meet HITRUST requirements. Fleet’s transparency feature was also critical, as it informed end-users exactly why a device was non-compliant and how to fix it.

The results

• Migration speed: migration time was reduced from 2 hours per device to just 10 minutes.
• Automated remediation: automated software installs and self-service scripts replaced manual interventions, saving significant man-hours.
• Agile response: frequent host check-ins allowed for more agile threat responses and faster detection of vulnerabilities.

About Fleet

Fleet is the open-source endpoint management platform that gives you total control, unlike the proprietary 'black boxes' of legacy vendors. Our open device management provides full visibility into our code and roadmap, plus a true choice of deployment—on-prem or cloud—with 100% feature parity. Our API-first approach empowers technical teams to automate with GitOps, scale confidently, and get the real-time data needed to secure their entire macOS, iOS, Windows, and Linux fleets.