Skip to content
IntuneGet
Open source · AGPL-3.0

Roadmap

Where IntuneGet is heading: what has shipped, what is being built right now, and what comes next. Community priorities shape the order.

Last reviewed

Request a feature on GitHub
ShippedLive today11In ProgressOngoing2Next UpPlanned9ExploringUnder consideration4

Shipped

Live today/11 items

Winget app catalog

Catalog

10,000+ apps synced hourly from winget-pkgs, with locale variants, Microsoft Store apps, and custom apps by URL.

PSADT v4 packaging

Package quality

Automated intunewin builds with generated detection rules, install commands, and a full dialog and branding surface.

Auto-updates with policies

Rollout control

Per-app auto update, notify, ignore, and pin policies with failure thresholds, cooldowns, and update history.

Supersedence and carry-over

Rollout control

New versions supersede the old app and inherit its assignments, categories, and relationships.

Unmanaged app discovery

Fleet visibility

Scan Intune discovered apps, match them to winget packages, and take over management with one click.

MSP multi-tenant

MSP

Customer tenants with consent tracking, roles, batch cross-tenant deployments, audit logs, and webhooks.

SCCM migration

Integrations

Import, match, preview, and convert ConfigMgr apps into the packaging pipeline.

ESP deployment integration

Integrations

Add newly deployed apps to Enrollment Status Page profiles during deployment.

Self-hosting

Trust

AGPL source, Docker, SQLite mode, and a local Windows packager CLI. Run everything on your own terms.

Package verification pipeline

Package quality

The hosted pipeline tests WinGet installer versions in isolated Windows VMs and publishes installation, detection, removal, and removal-detection results.

Installer malware scanning

Trust

VirusTotal checks report reputation for the tested installer hash; known malicious results block hosted packaging. A missing report is not a clean verdict.

In Progress

Ongoing/2 items

IntuneGet Curated Catalog

Catalog

Start with ten selected apps using reviewed vendor sources, security checks, and tested deployment configurations. Releases require signed approval before deployment. Pilot verification is in progress.

Catalog QA coverage

Package quality

Expand verified coverage as new apps and installer versions pass through the live QA queue. Results remain specific to the tested version, architecture, and installer hash.

Next Up

Planned/9 items

Deployment waves

Rollout control

Pilot group first, then the fleet, with configurable delays, success thresholds, and an optional approval gate.

Version retention policy

Rollout control

Keep a set number of previous versions per app and clean up superseded apps in Intune automatically.

CVE visibility

Fleet visibility

See exactly which tenants and apps are running versions with known vulnerabilities.

Rollback

Rollout control

One action to redeploy the previous version and supersede a bad update.

PSADT script signing

Trust

Sign generated scripts with your own certificate or a managed per-organization certificate.

ESP auto version update

Integrations

Enrollment Status Page references update automatically when a new version supersedes.

Public REST API

Integrations

API keys and documented endpoints for catalog search, packaging jobs, update policies, and batch deployments.

Scheduled deployments

Rollout control

Queue a deployment or update for a specific date, time, and timezone, per tenant.

XLSX report export

Fleet visibility

Extend the existing CSV report exports with JSON and XLSX formats for deployment and update reporting.

Exploring

Under consideration/4 items

Tenant-private catalog

Catalog

Keep an organization-owned collection of apps separate from the public catalog, with access limited to its tenant.

Custom app binary upload

Catalog

Upload licensed or private installers directly instead of pointing at a public URL.

Maintenance windows

Rollout control

Tenant-level windows that control when auto-updates are allowed to run.

Endpoint agent

Integrations

A lightweight agent for self-service installs and faster update enforcement on managed devices.

Hosted QA coverage depends on the app, version, architecture, and installer hash. Custom apps, self-hosted packaging, and temporary QA pauses can follow different paths.

Next Up lists planned work; Exploring lists ideas under consideration. Delivery dates are not set. Sequencing follows community demand.