For IT teams evaluating kiosk software in 2025, the sticker price is the least reliable number in a vendor’s marketing materials. A widely circulated iLounge shortlist of six leading solutions—AirDroid Business, Miradore, SiteKiosk, KioWare, Microsoft Intune, and AirDroid’s Windows edition—looks like a handy starting point, but the real costs, deployment complexities, and security risks only surface when you dig past the “starting at $1 per device” headlines. This evidence-backed, vendor-neutral analysis cross-references those claims against official documentation, independent reviews, and hard-won community experience to give Windows and Android kiosk buyers the practical roadmap they need.

What Kiosk Software Actually Does—and Why It Matters

Kiosk software transforms tablets, all-in-ones, and handhelds into single- or limited-purpose devices. At minimum it delivers:

  • App and browser lockdown – restricts the device to approved apps or URL allowlists
  • Remote management – deploys updates, pushes configurations, and troubleshoots at scale
  • Branding and UI customization – controls home screens, attract loops, and user flows
  • Security controls – prevents access to OS settings, blocks sideloading, and enforces session resets and data wiping

These capabilities matter because public-facing devices are exposed to tampering, accidental misconfigurations, and data leakage. Windows kiosk solutions typically plug into corporate identity and compliance tooling, while Android kiosk apps emphasize mobility, lower per-unit cost, and lighter deployment models. Microsoft’s own documentation for Assigned Access and Intune kiosk profiles remains the definitive technical reference, but even that power requires careful configuration to avoid lockout traps.

The Six Vendors at a Glance

The iLounge roundup segments into three Android-first and three Windows-first options, though several now straddle platforms:

  • Android-first: AirDroid Business, Miradore, SiteKiosk
  • Windows-first / cross-platform: KioWare, AirDroid Business (Windows edition), Microsoft Intune / Assigned Access

Below, each product is examined with verified feature sets, real-world pricing, best-fit scenarios, and the caveats that vendors don’t always volunteer.

Android Kiosk Picks—Deep Dive

AirDroid Business (Android-first, cross-platform MDM)

What it is: A full mobile device management suite with single-app and multi-app kiosk modes, remote control, content distribution, and device location. Admin consoles cover both Android and Windows endpoints, though the Android experience is more mature.

Verified key features: Single- and multi-app kiosk modes with customizable home screens and browser allowlists; remote monitoring, screen viewing, and remote control (Android); Knox/AFW integration for Samsung devices; geo-fencing; and optional policy modules for disabling factory reset and blocking unknown app installs.

Pricing reality check: AirDroid publishes a Basic tier at $1.00/device/month (billed annually). But that tier omits kiosk lockdown, advanced policy enforcement, and Windows patch orchestration—those live in Standard and Enterprise plans or as paid add-ons. Realistic deployments for retail or logistics typically land between $3 and $8 per device per month once required modules are factored in.

Best fit: Retail countertop kiosks, delivery handhelds, education tablet fleets, and any mixed Android/Windows fleet where a single admin console is a priority.

Strengths: Low entry price for pure Android play, deep remote troubleshooting, and granular geo-fencing.

Risks: Advanced kiosk features are gated behind higher-priced plans. Remote-control behavior varies across Android OEMs and Knox implementations—test on your exact builds before committing.

Miradore (Lightweight cloud MDM with free tier)

What it is: A cloud-based MDM that offers a genuinely functional free tier for small fleets. Kiosk functionality is locked to Premium ($2.75/device/month) and Premium+ ($3.95/device/month) plans.

Verified key features: Single- and multi-app kiosk enforcement, remote configuration, device encryption enforcement, and compliance reporting. The free tier covers basic inventory and security monitoring.

Best fit: SMBs wanting to trial kiosk mode without upfront license costs, or small deployments where advanced remote support isn’t critical.

Strengths: Low total cost of ownership for under-50-device fleets; intuitive enrollment.

Risks: Remote support and automated patching are Premium+ only. Scaling beyond 100 devices often forces a jump to a more enterprise-grade platform.

SiteKiosk (Specialist kiosk platform; Android and Windows)

What it is: A purpose-built kiosk and digital signage tool with deep UI customization, attract screens, session isolation, and one-time or subscription licensing.

Verified key features: Full-screen browser logging with strict allowlists, attract screens, automatic cache clearing, digital signage workflows, content scheduling, and strong peripheral handling for payments.

Pricing: The cloud-managed SiteKiosk Online is typically $239/year per device. One-time licenses exist but lack ongoing updates and cloud management.

Best fit: Public libraries, hotel lobbies, museum information kiosks, and transactional kiosks where browser control and attract mode matter.

Strengths: Unmatched public browsing controls; multiple licensing models allow CAPEX vs. OPEX choice.

Risks: UI layout configuration can be fiddly for non-technical content editors. One-time licenses can become an expensive trap if you later need cloud management; budget for support contracts.

Windows Kiosk Picks—Deep Dive

KioWare (Windows-native kiosk with extensive peripheral support)

What it is: A mature Windows kiosk platform in Lite, Basic, and Full editions, with options for one-time licenses or cloud-managed subscriptions via KioCloud.

Verified key features: Browser and OS lockdown, session resets, peripheral support for card readers, magstripe, EMV, virtual keyboards, accessibility tools, and usage analytics.

Pricing: One-time licenses for small deployments start around a few hundred dollars per device; cloud-managed options carry annual fees. KioCloud adds per-device monthly charges for remote management.

Best fit: Enterprise-grade Windows kiosks requiring integration with payment hardware, barcode scanners, or legacy Windows applications.

Strengths: Broad hardware compatibility, long track record in regulated sectors, flexible licensing.

Risks: The management UI feels conservative; expect a learning curve. Centralized management for distributed fleets demands KioCloud or a hosted server, raising ongoing costs.

AirDroid Business (Windows edition)

What it is: AirDroid’s expanding Windows endpoint management, including kiosk locking for Edge/Chrome, patch reporting, and policy controls, all from the same dashboard used for Android devices.

Why it matters: Organizations with mixed Android/Windows fleets can unify administration, reducing tool sprawl and training overhead.

Strengths: Consistent policy model across operating systems, useful for Android-first shops adding Windows kiosks.

Risks: The Windows feature set is still evolving. Deep Assigned Access automation, Azure AD conditional access integration, and fine-grained Windows-only controls are less mature. Test every scenario exhaustively.

Microsoft Intune / Assigned Access (Enterprise-grade Windows kiosk)

What it is: Part of Microsoft Endpoint Manager, Intune supports single-app and multi-app kiosk configurations for Windows devices, deeply integrated with Azure AD, Conditional Access, and Microsoft 365.

Verified key features: Single-app full-screen and multi-app kiosk profiles, Start menu customization, AUMID and Win32 app support, device compliance, and identity-aware policy deployment.

Pricing: Intune is licensed per user or per device, typically $8–$10/month for the standalone license, or bundled in Microsoft 365 E3/E5. For a dedicated kiosk fleet, per-device licensing can add up.

Best fit: Large enterprises and public-sector organizations already invested in Microsoft 365/Azure AD that need centralized, identity-aware kiosk management.

Strengths: Unmatched integration with enterprise identity, compliance reporting, and conditional access policies. Single console for all endpoints.

Risks: Complexity is high—deployment timelines can stretch weeks, and misconfigured Assigned Access can lock out admin accounts. Community forums are littered with recovery horror stories. Overkill for small kiosks-only deployments.

Cross-Vendor Comparison and Practical Procurement Checklist

When vendors compete on features and headline pricing, the right decision hinges on five operational axes:

  1. Device OS and hardware: Android handhelds vs. Windows all-in-ones vs. mixed fleets
  2. Peripheral support: Payment terminals, card readers, printers, cameras—validate driver compatibility
  3. Central management: Cloud dashboard necessity vs. local as-needed updates
  4. Security and compliance: Encryption, remote wipe, session resets, and identity integration
  5. Total cost of ownership (TCO): License fees + add-ons (kiosk/browser modules, geo-fencing, remote support) + support contracts + training

Procurement checklist (practical steps):

  • Inventory current and target hardware, noting Android build versions and Windows 10/11 builds (e.g., Windows 10 22H2, Windows 11 23H2).
  • Identify required peripherals and verify vendor-supported drivers.
  • Define kiosk user flow and session handling (timeout, guest vs. authenticated use).
  • Pilot 3–5 devices for 30 days, including remote support exercises and OS updates.
  • Calculate 3-year TCO: subscriptions + support + hardware replacement + training.

Security, Compliance, and Operational Risks

  • Lockdown gaps: Kiosk software can only block what the OS allows. Windows Assigned Access plus Intune policies are powerful, but misconfiguration can leave escape vectors (USB debugging enabled, unattended setup apps). Follow Microsoft’s kiosk configuration docs explicitly.
  • Update and patch management: Automatic reboots during business hours can cripple a kiosk. Use staged rollouts, maintenance windows, and vendor features that defer patching—these are often premium modules.
  • Physical tampering: Public-facing kiosks need tamper-detection hardware, secure enclosures, and physical mounting.
  • Data residency and logging: Regulated industries must ensure cloud-hosted management meets geographic data retention requirements. Logs and audit trails may need to stay on-premises.

Small retail chain (20–100 units, tablet-based POS)
Recommended: AirDroid Business (Android) for unified remote control, or Miradore if budget-sensitive. Verify payment peripheral support and EMV compliance.
Rationale: Low entry cost, easy remote troubleshooting, geo-fencing for store-level policies.

Public library or museum (public browsing, mixed hardware)
Recommended: SiteKiosk or KioWare for Windows kiosks; SiteKiosk excels at attract-mode signage and browser session control.
Rationale: Mature public-browsing features, scheduled attract screens, detailed session reset controls.

Large enterprise (500+ devices, identity integration required)
Recommended: Microsoft Intune (Assigned Access) for Windows kiosks; AirDroid Business for mixed fleets when a single console matters.
Rationale: Intune provides identity, conditional access, and compliance reporting demanded by enterprise security teams.

Healthcare or regulated transaction kiosks
Recommended: KioWare Full or SiteKiosk with enterprise support contracts. Validate PHI/PCI handling and include secure remote logging.
Rationale: Peripheral support (card readers), session VPNs, and long-term support options are critical.

Hidden Costs and Negotiation Points

  • Add-ons: Kiosk mode, advanced policy enforcements, geo-fencing, and private app markets are often sold separately.
  • Support SLAs: Vendor support tiers vary; critical deployments need guaranteed response times.
  • Management console scale limits: Confirm device groups, push concurrency, and data retention limits—many dashboards degrade with over 1,000 devices.
  • Long-term licensing model: One-time licenses can look cheaper at purchase but increase maintenance costs over time; subscription SaaS typically includes ongoing management and security updates.

AirDroid and Miradore publish clear tier tables that reveal base prices and separate add-on fees; use their published plans as negotiation anchors but assume real-world costs will be 20–40% higher after required modules and onboarding.

Migration and Pilot Blueprint—8 Practical Steps

  1. Define the kiosk persona and failure conditions (credit card data leak, device bricking).
  2. Select representative hardware and procure one spare for recovery testing.
  3. Install vendor software and lock one device to single-app kiosk mode.
  4. Test the session life cycle: logon, idle timeout, session reset, forced reboot.
  5. Validate peripheral interactions under kiosk lockdown.
  6. Execute remote troubleshooting—confirm vendor remote-control works under kiosk constraints.
  7. Run staged update tests to ensure OS/app updates don’t break the kiosk image.
  8. Rollout progressively by geography or device group, maintaining detailed rollback plans.

The iLounge shortlist reflects real market leaders in 2025, but “best” is a function of context. AirDroid Business is compelling for mixed fleets and small per-device pricing; Miradore is a great low-cost starter; SiteKiosk and KioWare remain specialists for public-facing Windows kiosks; and Intune is the natural choice where Azure AD and compliance are mandatory. Hidden costs—add-ons, support SLAs, and management console scale limits—will make or break your budget. Validate peripheral compatibility, pilot exhaustively, and negotiate with total 3-year TCO in hand. The correct selection aligns your devices, compliance needs, and support expectations—not a vendor’s marketing headline.

Key takeaways:

  • Always verify that the features you need aren’t locked behind plan upgrades or add-ons.
  • Run a 30-day pilot that includes remote troubleshooting, OS updates, and peripheral tests.
  • Plan recovery paths for misconfigured lockdowns—especially with Assigned Access and Intune.
  • For identity-aware, centrally managed, highly auditable kiosks, Microsoft Intune plus Assigned Access is the safe enterprise-grade bet. For mobility-first, lower-cost Android fleets, AirDroid Business or Miradore offer the fastest time-to-value. For classic public kiosks with heavy browse and attract-screen demands, SiteKiosk and KioWare remain the trusted specialists.