Capsule ● the .EIPX Format

Package Any Windows App Once

Deliver Based on Desktop Needs

Capsule captures an application into one sealed, signed .EIPX master. From that one master you deliver it natively through Microsoft Intune, run it isolated with nothing installed into Windows, attach it on a virtual disk at sign-in, or stream it on demand. Capsule Studio and the .EIPX format are free. Capsule Deploy and Capsule Store are licensed.

Book a Demo
The .EIPX Format
See Pricing
Capsule Logo
Access Capsule dashboard - Access IT Automation

Free

Studio + the .EIPX format

4

delivery rails, one master

100%

runs on Azure

Entra

gated, keyless, signed

You are here:
  1. Home
  2. Capsule

The Capsule Family

Three Products, One Sealed Master

Package once in Studio, then choose how you deliver.

Capsule Studio Icon

Capsule

Studio

Free

The packaging workbench. Capture, edit, validate, test and publish from one .EIPX master, in a browser, on Azure.

  • Capture EXE, MSI, App-V and MSIX sources
  • Test in a disposable Azure clean room, with a recorded result
  • Edit files, folders, registry, shortcuts and file types
  • Publish natively to Microsoft Intune
Capsule Deploy Icon

Capsule

Deploy

Licensed

The delivery console for IT. Assign apps to people, move them between versions, and see what is really installed.

  • Assign to Microsoft Entra group: apps foll the person
  • Give any version to any group, including rolling back
  • Access changes reach people within minutes, no sign-out
  • Streamed, isolated and layered delivery
    Fleet health: what each endpoint holds
Capsule Store Icon

Capsule

Store

Licensed

The self-service storefront for your people. They find the apps they are entitled to and request them.

  • A personal, entitlement-aware shelf
  • Request, approve and deliver, in one flow
  • Rich app details, versions and categories

Start Free, Grow When Ready

Studio and .EIPX Cost Nothing

Give every packager the free Studio and get .EIPX everywhere in your estate. When you want to deliver at scale, or hand people a storefront, add Capsule Deploy and Capsule Store as licensed products, priced as an affordable add-on to the Microsoft investment you already have.

See the pricing
Inside the .EIPX format

Inside the .EIPX Format

One File that Holds the Whole Application

An .EIPX master is a single package that carries everything an application puts on a machine, and a signed record of exactly what that is. It is the one thing you package, test and keep. Everything else is produced from it.

Sealed and Verifiable

Every master is signed with a key held in your Azure Key Vault. A cryptographic integrity map covers every byte, so an endpoint can prove a package is unaltered before it runs anything.

Efficient by Design

Content is stored once, by what it is, not by where it sits. New versions share everything that did not change, so an update moves only what is new.

Everything the App Needs

Files, registry, shortcuts and icons, file types, shell and COM registrations, services, drivers and virtual printers, and the settings a person keeps between sessions.

One Master, Every Format

From the same master, produce MSI, MSIX, an Intune package, a WinGet manifest, or a mountable VHDX or CimFS layer. Bring existing MSI, App-V and MSIX packages in the same way.

Delivery

Four Ways to Put an App in Front of People

The same master, delivered the way each desktop needs. Mix them across your estate.

Native

A normal installation, through Microsoft Intune or the Capsule agent. With the agent it repairs itself: a deleted or damaged file is restored the next time the app opens, even for a standard user.

Isolated

Runs in its own bubble with nothing installed into Windows, no administrator rights, and clean removal.

Layered

Attaches on a VHDX or CimFS virtual disk at sign-in, for pooled and multi-session hosts, so the golden image stays golden.

Streamed

Starts before it has fully arrived, fetching only what it reads, and keeps what it fetched for next time.

Streamed and isolated apps are offered by Windows for the documents they open, in Open with and the default-app chooser, and are never forced on anyone as the default.

Day Two

Built for the Life of the Application, Not Just its First Install

Available Now

Upgrade and Roll Back

Move a group to a newer or an earlier version. Changed files are replaced, what the new version no longer needs is removed, and a failed upgrade leaves the previous version working.

Available Now

Respects Changes on the Endpoint

A file a person or an admin changed since install is kept when the new version no longer needs it, and it is named in the application’s log.

Available Now

Apps Follow the Person

Entitlement is resolved for the person signing in, so their apps are there on whichever desktop they use.

Available Now

Removal Only When You Decide

Software is removed by an explicit uninstall, never because nobody happens to be signed in. Shared and persistent desktops keep their apps ready.

Better Together With Microsoft

Capsule makes your Microsoft investment do more

Capsule is built on Microsoft and Azure first-party technology, and it works through the products you already pay for.

Microsoft Intune

Native publish, upgrade by supersedence, and agentless uninstall through Microsoft Graph

MSIX

An on-ramp for the legacy apps that usually block an MSIX move

Azure Virtual Desktop

Layers that attach at sign-in on pooled and multi-session hosts

Windows 365

The same apps, from the same master, on every Cloud PC

Microsoft Entra

Sign-in, and group-based entitlement for every app

Azure Storage & SQL

The content library and catalogue live in your Azure, with no keys or connection strings

Azure Key Vault

Signing keys and secrets stay in your vault, never in a file

Azure Marketplace

 Bought and billed through your Azure agreement

Coming

Secure By Design

Sealed, Signed, and Isolated

Security is built into the format and the platform, not bolted on. Every .EIPX master is content-addressed, integrity-checked and signed. Apps can run fully isolated with nothing written into Windows, and the whole platform is keyless and Entra-gated.

Signed Master

Key Vault signing and tamper-evident integrity on every package.

Run Isolated

Its own bubble, no administrator rights, and clean removal with nothing left behind.

Nothing of Ours in the Kernel

Isolation and streaming use Windows’ own built-in components. Capsule adds two small user-mode services.

Keyless

Managed identity throughout. No keys or connection strings to leak.

Checked at Launch

Isolated, streamed, and layered apps check  entitlement every time they start, so removing someone from a group takes effect within minutes.

Protected Windows folders

A running app cannot cover a Windows or Program Files folder.

Pricing at a Glance

Free to Start, Simple to Grow

Studio

Free

Community edition

Package, test and publish to Intune.

Deploy

$2.50

/user/month
or ~ $25 /device/year

Delivery in every style, incl. streaming, with version control and fleet health.

Store

$1

/user/month
or ~ $10 /device/year

Self-service storefront for your people, including streamed delivery.

Suite

$3

/user/month

Deploy and Store together, saving about 14%.

Premium Runtime

Talk to Us

Isolation and self-healing delivery.

See it Working

Book a Demo

We will package an application in Capsule Studio, publish it to Microsoft Intune, stream it on demand and attach it as a layer, live, across the whole product. Prefer to start on your own? Ask for early access to Capsule Studio.

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

Latest Articles