Chalk

Comparison

Reftab vs SysAid

Two tools districts shortlist for device tracking and IT operations, compared the way a buying committee actually reads them: what each is, what each does well, and what to check before signing. We build Chalk, a third option in this space — that context is worth knowing as you read, and it is why every claim below carries its basis.

Reftab

A well-designed asset tracker with a real free-forever tier, self-serve signup, and no sales call — and, like the rest of its class, no help desk, no roster, and no student.

Pricing: Subscription metered per asset, with unlimited platform users on every tier and an annual-billing discount. There is a genuine free-forever tier capped at a small asset count that still includes unlimited custom fields and locations, reservations, mobile apps, barcodes, and check-in/check-out. Paid tiers add capability in layers: SSO and two-factor at the entry paid tier, signature capture and consumables above it, and the MDM, vendor, and identity-provisioning integrations only at the top tier. Software management is priced separately per tracked user. Signup is self-serve with no demo gate. The pricing FAQ raises the question of education and nonprofit discounts; we could not read the answer, so ask them directly.

Where Reftab is strong

  • The only genuinely free-forever tier in this comparison, and a generous one — unlimited custom fields and locations, reservations with calendars, advanced reports with export, mobile apps, and barcode check-in/check-out at no cost.
  • SSO and two-factor authentication at the lowest paid tier rather than gated to enterprise, which is unusual and district-friendly.
  • Unlimited platform users on every tier, so the bill never grows because you added staff.
  • Native iOS and Android apps with barcode scanning, plus a barcode designer and custom email templates.
  • Strong MDM breadth at the top tier — Intune, Jamf Pro and Jamf School, Kandji, Mosyle, NinjaOne, FleetDM, and Apple Business Manager — plus vendor warranty sync from Dell, CDW, Lenovo, and Apple.
  • A Google Workspace integration that imports Chromebooks and mobile devices daily, with configurable field mapping and optional auto-assignment to the Google-assigned user.

What to check before you buy

  • No native help desk or ticketing with SLAs. Jira Cloud and Zendesk connectors exist to surface assets on someone else's ticket, and they are top-tier features — so a district buys a service desk separately either way.

    Basis: Reftab's integration listing offers Jira and Zendesk plugins rather than native ticketing; no SLA capability appears in any tier.

  • No SIS or rostering integration — no OneRoster, Clever, ClassLink, or PowerSchool — and no student, guardian, or family concepts. Nothing reacts to a transfer, a withdrawal, or grade rollover.

    Basis: None appear in Reftab's integration catalog or documentation; the identity integrations are corporate directories.

  • Signature capture is staff-side custody acknowledgement, not a parent or guardian e-signature on a device agreement, and it sits behind a mid-tier upgrade.

    Basis: Reftab lists signature capture as a Pro-tier feature; no guardian entity or agreement workflow exists in the data model.

  • No student fee assessment and no family balances, so damage recovered at collection time is tracked outside the system.

    Basis: Absent from Reftab's documented feature set across all tiers.

  • No funding-source or grant tracking for ESSER, Title, or E-Rate attribution.

    Basis: No funding-source dimension appears in Reftab's documentation.

  • ChromeOS support is import only and syncs once daily. Nothing writes back, so OU moves and disabling a stolen Chromebook remain manual work in Google Admin.

    Basis: Reftab's Google Workspace integration guide documents a daily one-way import with field mapping; no write-back is described.

  • The MDM connectors that make the inventory self-maintaining — Intune, Jamf, Kandji, Mosyle, Apple Business Manager — are all top-tier features, which is a meaningful jump from the tier where SSO lives.

    Basis: Reftab's pricing page places all MDM, vendor, and IdP integrations at the Business tier.

  • It consumes SSO but is not an identity provider. Okta, Entra ID, SAML 2.0, SCIM, and LDAP are identity it reads, not identity it issues — and the IdP user-provisioning integrations are top-tier only.

    Basis: Reftab is configured as a service provider against an external IdP; provisioning integrations are listed at the Business tier.

How Chalk compares with Reftab →

SysAid

A capable ITSM suite with real asset discovery and a working Chromebook sync — priced at $89 per agent, positioned at universities rather than districts, and quietly steering its on-premises line toward the exit.

Pricing: SysAid publishes one price: Professional at $89 per agent per month, which includes 250 managed assets, the AI Copilot for agents and end users, 100,000 automation credits, and two-year retention. Enterprise is custom, starts at 20 agents, and adds sandbox, advanced BI, and longer retention. Patch management is an add-on. Everything else — assets beyond 250, on-premises deployment, education pricing — is quote-only; SysAid's own FAQ still says price depends on administrator count, assets, modules, edition, and deployment platform. For a district the per-agent axis is not the problem: SysAid states end users are unlimited, so six technicians is six seats. The asset axis is the problem, because 250 included assets is two carts. No education discount is published on any SysAid page; third-party sites assert one exists, which we cannot verify.

Where SysAid is strong

  • A full ITSM process set for the price: incident, request, problem, and change management, SLAs, a self-service portal, knowledge base, workflow automation, dashboards, and a developer API.
  • Genuine IT asset management, not a bolt-on — automatic network discovery, hardware and software inventory, a CMDB with configuration-item relationship mapping, software license management with renewal reminders, patch deployment, and remote control through Splashtop.
  • A real Chromebook integration that pulls from Google Workspace: model, serial, Chrome version, enrollment time, warranty expiry, asset ID, organizational unit, policy sync status, and CPU, memory, and disk. Most general-purpose help desks have nothing like it.
  • SysAid Copilot is included in the published tier rather than sold as a per-agent add-on, covering both agent assistance and an end-user chatbot grounded on your tickets, knowledge base, and documents.
  • Strong independent review standing — 4.5 out of 5 across 522 Capterra reviews, with automation, integrated asset management, and responsive support named repeatedly as strengths.
  • SysAid handled its 2023 zero-day well: it learned of the issue on 2 November, published an advisory with indicators of compromise on 8 November, and shipped a fixed release. That is the behavior you want from a vendor.

What to check before you buy

  • 250 managed assets are included at $89 per agent. A 1:1 district counts devices in the thousands, so the fleet becomes a negotiated line item immediately — the one axis a district has most of.

    Basis: SysAid's pricing page lists 'Managed assets (250 included)' under the Professional plan, with no published rate for additional assets.

  • The education positioning is higher education, not K-12. The customer logos on both education pages are universities, and the claims are framed around students, faculty, and campus asset variety.

    Basis: SysAid's higher-education and service-desk-for-education pages name University of Michigan, University of Toronto, Queen's University, and University of West London. Neither page mentions school districts.

  • No SIS or rostering integration — no OneRoster, Clever, ClassLink, PowerSchool, Infinite Campus, or Skyward — and no student or guardian data model. Identity sync is enterprise-shaped: Entra, Google Workspace, Okta, ADFS, CAS, Shibboleth, OneLogin.

    Basis: None appear on either education page or in SysAid's integration catalog; the user repositories SysAid documents are corporate directories.

  • The Chromebook integration reads, it does not write, and its user handling is shallow — it maps the most recent recent-user into an Owner field. There is no OU move, no disable, no deprovision, and no annotated-field write-back.

    Basis: SysAid's own Chromebook documentation describes a one-way pull from Google Workspace inventory and the recent-user-to-Owner mapping; the catalog entry is titled Chromebook (Beta).

  • No device check-out to a person as a transaction. Ownership is a synced field, not a custody event, so there are no due dates, no overdue list, no parent-signed agreement, no loaner pool, no lost or stolen lifecycle, and no damage fees.

    Basis: None of those concepts appear anywhere in SysAid's asset management documentation or marketing.

  • On-premises is no longer marketed, and its feature set is visibly thinner. SysAid's own cloud-versus-on-premises comparison documents no Teams integration, no Power BI extract, no Zapier, no SSO connector, no sandbox, and mobile at extra cost — with releases two to three times a year against fortnightly on cloud.

    Basis: SysAid's published cloud-vs-on-prem comparison PDF; its on-premises plan URL now redirects to cloud pricing. We could not verify whether a new on-premises license can still be purchased — treat it as unmarketed rather than proven discontinued.

  • That matters because the security history sits on the self-hosted line, where SysAid's own document says security updates are manual and performed by the customer. CVE-2023-47246 was a critical remote-code-execution flaw in SysAid On-Premise, exploited in the wild and added to CISA's Known Exploited Vulnerabilities catalog; three XXE flaws in 2025 followed, two of which also reached that catalog.

    Basis: NVD entries for CVE-2023-47246 and CVE-2025-2775, CISA KEV listings, SysAid's own advisory, and Rapid7's analysis. Fair reading: SysAid patched each promptly, and security press reports no public exploitation of the 2025 XXE issues — the durable point is patch cadence and who is responsible for applying it, not that the product is insecure.

  • Recurring review themes are consistent: an interface described as dated and not very intuitive, configuration of advanced automation that is time-consuming for new administrators, and built-in reporting that most reviewers end up customizing.

    Basis: Capterra's aggregated review themes across 522 SysAid reviews. G2, TrustRadius, and Gartner Peer Insights block automated reading, so no rating from those sites is cited here.

How Chalk compares with SysAid →

The third option: Chalk

If you are weighing Reftab against SysAid, Chalk belongs on the same shortlist. It is the open-source K-12 IT stack: device inventory that fills itself in from Google Admin, Intune, and Jamf against a roster synced from your SIS, a 1:1 circulation desk with agreements and fees, repairs with parts and costs, a help desk that already knows who is asking, and a built-in SAML/OIDC identity provider.

  • Self-host it free forever under AGPL-3.0 — the entire feature set, one binary, your infrastructure — or use the hosted version, priced by fleet size with no per-seat or per-student fees and the price ladder published.
  • Built only for K-12: students, buildings, custody, funding sources, and ChromeOS auto-update expiration are native concepts, not custom fields.
  • Writes back to Google Admin as a reviewed diff — every OU move, disable, and deprovision previewed before it executes — and serves a OneRoster 1.1 API so other district systems can pull the roster from Chalk.
  • Fees are assessed and tracked without touching payment cards, keeping the asset system out of your PCI scope.
Chalk vs Reftab → Chalk vs SysAid →

See all three on your own roster.

Chalk installs to a populated inventory in about 30 minutes. Self-host free under AGPL-3.0, or let us run it — priced by fleet size, never per seat.

See pricing Self-host on GitHub