Devices, defined.
Cybex deploys, configures, updates, and monitors NixOS desktops and laptops from one control plane — for the schools, companies, and governments standardizing on Linux.
// MDM for Linux desktops, built declarative-first.
Three kinds of fleet, one control plane.
Schools, companies, and governments run the exact same Cybex — the management interface just speaks their language. Choose a profile to see the jobs it does.
Standardize every classroom and lab on one exam-ready image — then reset an entire campus in an afternoon, not over a summer.
The whole fleet, on one screen.
Health, enrollments, rollouts, and activity in a single dense operations view — updating live as agents check in. No tab-hopping, no guesswork.
Configure once. Snapshot. Roll out.
Set up one reference device exactly how you want it. The Cybex agent snapshots it into a reusable, versioned blueprint you publish to the whole fleet.
Install a reference device. Set desktop, apps, users, and security posture.
The agent captures the full declarative state — nothing hand-typed.
Cybex generates a versioned blueprint in the control plane.
Assign the blueprint to a device group and publish the revision.
Ship in stages with guardrails. Pause, resume, advance, or cancel.
Ship to the fleet, one stage at a time.
Publish to a pilot group, watch fleet health, then advance. Scroll to roll lab-workstation@r12 across all 223 devices.
From installer ISO to audit log.
One control plane covers every stage of a device's life — no glue scripts between tools.
Priced per device, per year.
Schools, companies, and the public sector get the same Cybex control plane — only the price and the management-interface terminology differ. Self-host when sovereignty matters, with no proprietary-OS lock-in.
The same control plane as Companies & Government — the management interface just speaks education: students, staff, classrooms and labs.
The same control plane as Education — the management interface speaks the workplace: employees, workstations, sites and departments.
Questions, answered.
Still curious? Reach the team through the open agent repository.
Cybex is NixOS-first because a declarative base lets a blueprint be the exact source of truth rather than an approximation. Support for additional platforms — including Google Chromebooks — is planned.
Yes. The device agent is open source: read it, build it, and verify exactly what runs on your fleet. Communication with the control plane is signed and tied to a persistent device identity.
Every change ships as a staged rollout. Publish to one stage, watch fleet health, then pause, resume, advance, or cancel. A bad revision reverts to the last good generation cleanly.
Traditional MDM bolts policy onto an opaque OS. Cybex starts from declarative Linux: the whole device is configuration, so blueprints are reproducible and every setting traces to the layer it came from.
Boot the branded Cybex installer. For a single device, it can register itself, show a pairing code, and wait for an admin to adopt it. For a whole classroom or lab, automated enrollment is supported too: use an enrollment profile with the ISO installer and devices can auto-enroll straight into the right group and blueprint — no one-by-one imaging station.