
Trusted by







Run the entire MDM on your own network, with no outbound connection required.
Deploy in closed, classified, or regulated networks where cloud MDM is not allowed.
Keep all device, policy, and audit data on your own infrastructure.
Control devices in facilities where cloud-first MDM tools simply do not work.
Run Bento entirely inside your isolated network, with devices, policies, and apps managed on-premise.

Bento runs entirely on your own server inside the isolated network.
Devices and server communicate over the local network, with no internet path.
Apps are hosted and pushed from the on-premise server, not an app store.
Devices enroll and receive policy without any connection to the public internet.
Run Bento entirely on your own infrastructure, inside the isolated network.
Enroll, configure, and manage devices with no connection to the public internet.
Host and distribute apps from the on-premise server, without app store access.
Apply and update policies over the local network, with devices never reaching out.
Enroll devices inside the network, without cloud enrollment services.
Keep all audit and compliance logs on your own infrastructure for review.
Restrict console access by role for separation of duties in secure environments.
Manage rugged Android and supported devices common in field and industrial isolation.

"With Bento MDM and FSM, we efficiently manage over 700 devices, automate workflows, and improve communication between field teams."
Cristian Bordescu
Operations Director


“Our collaboration with Bento on migrating over 2,000 DPD devices was exceptional. Their openness, flexibility, and constant support stood out throughout the project. Their quick adaptation to challenges and solution-oriented approach made all the difference, a truly reliable and professional partner.”
Valentina Ionescu
CIO, DPD
https://www.linkedin.com/in/valentina-ionescu-45a117bb
https://www.facebook.com/DPDRomania/
https://www.linkedin.com/company/dpd-romania/
https://www.dpd.com/
https://ro.wikipedia.org/wiki/DPD_Romania


"Bento Field Service Management and Mobile Device Management helped us streamline field interventions, secure mobile devices, and increase operational transparency."
Simona Gigiu
Business Line Director



Manage devices on classified and mission networks with no connection to the outside.


Control devices inside secure sites where no external network access is permitted.


Keep public-sector device data on national infrastructure, fully under your control.


Manage devices in power, water, and utility networks isolated from the public internet.


Control devices on factory and operational-technology networks separated for safety.


Manage devices at sites with no reliable connectivity, running entirely on local infrastructure.
%201.avif)
GDPR
Compliant

99.9%
Uptime


ISO 27001
Compliant

HIPAA
Compliant
What is air-gapped MDM?
Air-gapped MDM is device management that runs entirely inside an isolated network, with no connection to the public internet. The MDM server is hosted on-premise, devices enroll and receive policy over the local network, and apps are distributed from a local repository. It suits defense, government, and critical-infrastructure environments where devices must stay disconnected from outside networks.
How is air-gapped deployment different from On-Prem MDM?
On-Prem MDM means Bento runs on your own server, which may still have internet access for updates or licensing. Air-gapped deployment is the fully isolated case: the server and devices run with no connection to the public internet at all. Air-gapped builds on the same On-Prem MDM foundation, with complete network isolation.
How is this different from Offline Configuration?
Offline Configuration is the ability to configure and enforce device policy without a live connection. Air-gapped deployment is the whole deployment model for isolated networks: the on-premise server, local enrollment, local app distribution, and offline policy together. Offline Configuration is one part of how an air-gapped deployment works.
Can Bento manage devices with no internet connection at all?
Yes. In an air-gapped deployment, the Bento server and the managed devices operate entirely over the local network. Enrollment, policy, app distribution, and audit logging all happen on-premise, with no outbound connection to the public internet.
Does air-gapped MDM support iPhones and iPads?
In a fully air-gapped network, Android is the primary supported platform, because Apple's enrollment and app services require a connection to Apple. Organizations that need to manage Apple devices in isolated environments should talk to our team about the specific network and enrollment constraints involved.
How are apps distributed in an air-gapped network?
Apps are hosted in a local repository on the on-premise Bento server and pushed to devices over the local network, with no app store access required. IT loads approved apps into the repository, and devices receive them without reaching the public internet.
Where is device and audit data stored?
All device, policy, and audit data stays on your own infrastructure inside the isolated network. Nothing is sent to a public or external cloud, which is what makes the deployment suitable for sovereignty-sensitive and classified environments.
Is Bento suitable for classified or government networks?
Bento runs entirely on-premise inside your isolated network, with all data on your own infrastructure, which suits closed, classified, and regulated environments. Specific accreditation and framework requirements vary by organization. [Marketing: confirm which certifications and accreditations Bento holds for government and defense use, and state them here.]
How much does air-gapped deployment cost?
Bento's per-device pricing starts at €1 per device per month. Air-gapped and on-premise deployments are configured to each organization's environment, so pricing depends on scale and setup. Contact our team for a deployment quote.
Run Bento fully offline inside your isolated network, on-premise and under your control. Talk to our team.
