Enterprise Android device management

Control every device.
Secure every connection.

Kavach is Ontum's fleet platform for Android hardware - remote commands, policy enforcement, and live analytics for every device you manage, delivered in seconds over Cloud Messaging.

Talk to us See how it works

kavach.stage.ontum.co/admin

Kavach dashboard showing fleet health, active devices, and recent audit activity

Live dashboard - real fleet, not a mockup.

Core capabilities

Everything your fleet needs, from one console.

Six systems, one policy engine. Each ships to devices over Firebase Cloud Messaging - no polling, no on-site visits.

Remote commands

Lock, unlock, wipe, reboot, or factory-reset any device instantly - no user interaction required.

Policy enforcement

Granular rules for Wi-Fi, Bluetooth, camera, and screen behavior - applied per device or per group.

App management

Silently install or remove APKs across the fleet. Control which apps each device group is allowed to run.

Fleet analytics

Battery, RAM, storage, network, and CPU snapshots for every device - problems surface before users report them.

Location tracking

The whole fleet on one live map - filterable by group, policy, or status.

Security & compliance

Encryption status, patch level, and ownership health in one dashboard, backed by a full audit trail.

Product tour

This isn't a mockup.

Every screen below is Kavach's real admin console, on a live fleet, mid-August 2026.

kavach.stage.ontum.co/admin

/devices

Fleet at a glance

/devices/analytics

Kavach device analytics showing battery, memory, CPU, storage, SIM, and network detail

Live device analytics

/locations

Fleet on a map

/policies

Policy library

/policies/edit

Kavach policy editor showing password, network, restriction, and financing configuration

Granular policy editor

/logs/audit

Kavach audit log listing every system and device event with severity and timestamp

Full audit trail

Deployment

Up and running in three steps.

No on-premise servers, no agents to hand-install one by one.

Enroll

Scan a QR code or use zero-touch provisioning to install the Kavach agent as Device Owner - one unit or a batch of hundreds.

Define policy

Group devices, then set Wi-Fi, app allowlists, screen rules, and security requirements per group or fleet-wide.

Monitor & control

Watch fleet health on the dashboard, push commands over Cloud Messaging, and get alerted to battery, patch, or connectivity issues.

Built for

Every fleet has different rules. Kavach adapts.

The same policy engine, configured differently - one console still covers the whole organization.

Education

Schools, universities & libraries

Lock tablets to approved curriculum apps
Wipe and re-enroll between academic terms
Assign policies per class or department

Healthcare

Hospitals, clinics & field workers

Secure patient-data devices remotely
Enforce encryption on every clinical tablet
Audit logs ready for compliance review

Logistics

Delivery fleets & warehouses

Track driver handsets on a live map
Push route-app updates fleet-wide
Reset returned depot devices remotely

Retail & hospitality

POS devices, kiosks & hotel tablets

Kiosk mode locks devices to a single app
Instant remote reboot after a POS crash
Silent updates scheduled for off-peak hours

Corporate IT

Enterprise workforce & BYOD

One policy set across the whole workforce
Role-based admin access by department
Automated enrollment for new hires

Field services

Construction, maintenance & inspections

GPS tracking for field operatives
App restrictions on job-site devices
Command queue tolerates spotty signal

Under the hood

<3s

avg. command delivery over Cloud Messaging

role tiers, Super Admin down to Viewer

console for every organization - fully multi-tenant

100%

of the platform reachable over a REST API

Ready to take control of your fleet?

Kavach is built and maintained by Ontum. Get in touch for a walkthrough or a pilot deployment.

Get in touch

Control every device.Secure every connection.