Comparison
Lansweeper vs Reftab
Two tools districts shortlist for device tracking and IT operations, compared the way a buying committee actually reads them: what each is, what each does well, and what to check before signing. We build Chalk, a third option in this space — that context is worth knowing as you read, and it is why every claim below carries its basis.
Lansweeper
The strongest network discovery engine in this comparison — it will find every device on your wire, including the ones nobody told it about, and it will not know that any of them belongs to a seventh grader.
Where Lansweeper is strong
- Genuine network discovery, which almost nothing else in this category has: agentless scanning of Windows over WMI, Linux and macOS over SSH, and printers, switches, routers, firewalls and NAS over SNMP, so the inventory includes devices no one ever entered.
- A passive traffic sensor that discovers assets from network communications, catching devices that active scanning misses entirely — the closest thing to a real answer for shadow IT and unmanaged OT gear.
- An IT Agent for Windows, Linux and macOS endpoints that rarely touch the LAN, and Cloud Discovery across Azure, Intune, Microsoft 365 and Entra ID, AWS and GCP — with a reconciliation engine that merges the same device seen through several sources into one asset record instead of three.
- Vulnerability detection built on CPE correlation and VulnCheck, with CVSS severity and patch status against the software and OS actually in your inventory, alongside hardware and software lifecycle tracking for end-of-sale and end-of-support dates.
- Deployment packages in Lansweeper Classic — install software, run scripts and make remote changes on Windows machines from the same console that inventoried them.
- A full built-in help desk in Classic: tickets from the web console, email, API or import, dispatching rules, SLAs, teams, internal notes and a knowledge base.
What to check before you buy
-
Lansweeper is two products with a documented feature gap between them — Lansweeper Platform in the cloud and Lansweeper Classic on-premises — and which capabilities you get depends on which one you deploy.
Basis: Vendor's own 'Comparing Lansweeper Platform and Lansweeper Classic' documentation page, which lists discovery targets and features per product.
-
ChromeOS discovery is a Lansweeper Classic capability. In the newer Lansweeper Platform the vendor's comparison table marks Chrome OS as 'Planned (Cloud Discovery)'. For a district whose fleet is Chromebooks, that is the whole fleet sitting on the older product.
Basis: Vendor comparison table lists Chrome OS as supported in Classic scanning and Planned for Lansweeper Platform.
-
Even in Classic, ChromeOS scanning is work you do yourself: your license must support Chrome OS scanning, and you build a Google Cloud project, enable the Admin SDK, create a service account and grant it scopes before a single Chromebook appears.
Basis: Vendor's 'Chrome OS scanning requirements' documentation page.
-
The help desk is licensed per agent. Unlimited users can file tickets, but exactly one agent license is included, and every additional technician who answers tickets is a paid seat at $120 per year.
Basis: Vendor's 'Manage helpdesk agents' documentation plus the listed price in Lansweeper's own online store.
-
That help desk belongs to Classic. The cloud Platform documentation covers no ticketing module of its own — service management appears as connectors to Jira Service Management, ConnectWise, Zendesk and Freshservice, meaning a second vendor.
Basis: Lansweeper's documentation index places every help-desk article under Classic, and lists ITSM tools as integrations under Platform.
-
The asset meter has teeth: reaching your licensed asset limit can stop scanning of new and existing assets until you delete assets or upgrade.
Basis: Vendor's 'Manage your licensed asset limit' documentation page.
-
No student, guardian or enrollment concepts, and no SIS or rostering connectors — the identity sources documented are Active Directory, Entra ID, Intune and Microsoft 365. Students arrive by CSV, if at all.
Basis: Absent from Lansweeper's documentation index, which covers directory and cloud identity sources only.
-
Nothing models the 1:1 program itself: no device agreement, no parent signature, no fee for a cracked screen, no family balance, and no funding-source dimension for ESSER, Title or E-Rate reporting.
Basis: Absent from the vendor's documented feature set, which is discovery, inventory, risk and deployment.
Reftab
A well-designed asset tracker with a real free-forever tier, self-serve signup, and no sales call — and, like the rest of its class, no help desk, no roster, and no student.
Where Reftab is strong
- The only genuinely free-forever tier in this comparison, and a generous one — unlimited custom fields and locations, reservations with calendars, advanced reports with export, mobile apps, and barcode check-in/check-out at no cost.
- SSO and two-factor authentication at the lowest paid tier rather than gated to enterprise, which is unusual and district-friendly.
- Unlimited platform users on every tier, so the bill never grows because you added staff.
- Native iOS and Android apps with barcode scanning, plus a barcode designer and custom email templates.
- Strong MDM breadth at the top tier — Intune, Jamf Pro and Jamf School, Kandji, Mosyle, NinjaOne, FleetDM, and Apple Business Manager — plus vendor warranty sync from Dell, CDW, Lenovo, and Apple.
- A Google Workspace integration that imports Chromebooks and mobile devices daily, with configurable field mapping and optional auto-assignment to the Google-assigned user.
What to check before you buy
-
No native help desk or ticketing with SLAs. Jira Cloud and Zendesk connectors exist to surface assets on someone else's ticket, and they are top-tier features — so a district buys a service desk separately either way.
Basis: Reftab's integration listing offers Jira and Zendesk plugins rather than native ticketing; no SLA capability appears in any tier.
-
No SIS or rostering integration — no OneRoster, Clever, ClassLink, or PowerSchool — and no student, guardian, or family concepts. Nothing reacts to a transfer, a withdrawal, or grade rollover.
Basis: None appear in Reftab's integration catalog or documentation; the identity integrations are corporate directories.
-
Signature capture is staff-side custody acknowledgement, not a parent or guardian e-signature on a device agreement, and it sits behind a mid-tier upgrade.
Basis: Reftab lists signature capture as a Pro-tier feature; no guardian entity or agreement workflow exists in the data model.
-
No student fee assessment and no family balances, so damage recovered at collection time is tracked outside the system.
Basis: Absent from Reftab's documented feature set across all tiers.
-
No funding-source or grant tracking for ESSER, Title, or E-Rate attribution.
Basis: No funding-source dimension appears in Reftab's documentation.
-
ChromeOS support is import only and syncs once daily. Nothing writes back, so OU moves and disabling a stolen Chromebook remain manual work in Google Admin.
Basis: Reftab's Google Workspace integration guide documents a daily one-way import with field mapping; no write-back is described.
-
The MDM connectors that make the inventory self-maintaining — Intune, Jamf, Kandji, Mosyle, Apple Business Manager — are all top-tier features, which is a meaningful jump from the tier where SSO lives.
Basis: Reftab's pricing page places all MDM, vendor, and IdP integrations at the Business tier.
-
It consumes SSO but is not an identity provider. Okta, Entra ID, SAML 2.0, SCIM, and LDAP are identity it reads, not identity it issues — and the IdP user-provisioning integrations are top-tier only.
Basis: Reftab is configured as a service provider against an external IdP; provisioning integrations are listed at the Business tier.
The third option: Chalk
If you are weighing Lansweeper against Reftab, Chalk belongs on the same shortlist. It is the open-source K-12 IT stack: device inventory that fills itself in from Google Admin, Intune, and Jamf against a roster synced from your SIS, a 1:1 circulation desk with agreements and fees, repairs with parts and costs, a help desk that already knows who is asking, and a built-in SAML/OIDC identity provider.
- Self-host it free forever under AGPL-3.0 — the entire feature set, one binary, your infrastructure — or use the hosted version, priced by fleet size with no per-seat or per-student fees and the price ladder published.
- Built only for K-12: students, buildings, custody, funding sources, and ChromeOS auto-update expiration are native concepts, not custom fields.
- Writes back to Google Admin as a reviewed diff — every OU move, disable, and deprovision previewed before it executes — and serves a OneRoster 1.1 API so other district systems can pull the roster from Chalk.
- Fees are assessed and tracked without touching payment cards, keeping the asset system out of your PCI scope.
See all three on your own roster.
Chalk installs to a populated inventory in about 30 minutes. Self-host free under AGPL-3.0, or let us run it — priced by fleet size, never per seat.