Dimitri Cabete Jorge, Co-Founder & CTO · Last updated: August 2026 · Facts verified: August 2026
TL;DR verdict: JumpCloud is a cloud directory that runs identity, access, and device management for Windows, macOS, and Linux from one console, with no on-premises Active Directory behind it. Its strength is that range at small-business prices. Its limitation is depth: macOS management trails Jamf, and Linux machines get shell scripts where Windows and macOS get policy controls. It fits a small IT team or a managed service provider running a mixed fleet outside a Microsoft-centric stack. It fits Apple-heavy fleets poorly, and Iru (formerly Kandji) is the better call there.
Ratings: G2: 4.5/5 (4,055 reviews) · Gartner Peer Insights: 4.5/5 (139 reviews), verified August 2026
What Is JumpCloud?
JumpCloud is an open directory platform that pulls identity, access, and device management into a single cloud console. It is sold as the cloud replacement for Microsoft Active Directory, for organizations that want to manage people and machines without running directory servers of their own.
Through 2026 the company has repositioned around identity for humans, devices, and autonomous agents. That is a broader promise than a cloud directory, and the product has not caught up to all of it yet.
The platform holds SOC 2 Type 2 and ISO 27001 certification, as published on JumpCloud's security page in August 2026. Both certifications are scoped to the open directory platform specifically rather than to everything JumpCloud sells, so check that scope against your own audit requirements before you rely on it. JumpCloud closed a $225 million Series F in 2021 at a $2.625 billion valuation. Five acquisitions have followed since 2024, and two of them changed what you can buy: VaultOne brought privileged access management, and Breez brought identity threat detection and response.
What Is JumpCloud Used For?
Customers use JumpCloud for one job: run users, devices, and access across more than one operating system from a single console. Its buyers are IT administrators, managed service providers (MSPs), and operations teams. Five use cases account for most deployments, and a small IT function will recognize all five.
- Retiring Active Directory: teams with a domain controller they no longer want to patch move logins, policy, and device enrollment into the cloud. The migration path converts domain-joined Windows profiles to locally managed ones without losing user details.
- Running a mixed fleet without a tool per operating system: shops with Windows laptops, Macs in design and engineering, and Linux servers avoid buying, learning, and renewing three separate consoles.
- Onboarding and offboarding without a checklist: accounts, group membership, and app access come from the HR record instead of a shared spreadsheet. Revoking app permissions on a leaver's last day stops being a manual sweep through admin panels.
- Replacing the VPN as a security gate: device health checks and a second authentication factor run at login. That replaces the older pattern of routing everyone through a network perimeter just to prove who they are.
- Managing multiple client tenants: MSPs run several client organizations from one dashboard, and open a full management session for any one of them without a separate login.
Each of these otherwise gets split across two or three products. That is the entire argument for buying JumpCloud instead of assembling the same coverage yourself.
Key Features of JumpCloud
Four parts of the platform carry the buying decision: the directory, endpoint management, network and app access, and the automation layer JumpCloud shipped through 2026. The first three are what you are paying for. The fourth is new enough to read with more care.
The directory
- Cloud Directory and user lifecycle: the directory holds both user and machine identities across cloud, on-premises, and hybrid setups in one console. Create or change a user once and the change propagates to every connected resource, including automatic provisioning into connected apps and automatic single sign-on setup.
- Directory sync from other identity providers: JumpCloud syncs users from Microsoft Entra ID, Active Directory, Google Workspace, and Okta at no extra charge, and pushes user records into Amazon's IAM Identity Center. That matters if you are consolidating in stages rather than cutting over in one weekend.
Endpoint management
- Unified endpoint management (UEM): JumpCloud MDM covers Windows, macOS, Linux, iOS, and Android from one platform. It handles enrollment with no manual setup, policy enforcement, full disk encryption, and patching. Remote Assist covers troubleshooting on macOS and Windows, including sessions with nobody sitting at the machine.
Network and app access
- Single sign-on and multi-factor authentication: users authenticate once for web apps, older on-premises apps, networks, VPNs, and servers, with a second factor enforced through JumpCloud Protect.
- Cloud LDAP and Cloud RADIUS: JumpCloud hosts both of these network authentication protocols itself, with multi-factor authentication built in. This is the quiet differentiator. If you need network access control without a Windows-centric stack, most cloud identity providers make you buy this from somebody else.
The 2026 automation and AI layer
- AI Assistant (generally available June 17, 2026): the assistant sits inside the Admin Portal and takes plain-language instructions to write scripts, run device actions, and build dynamic groups. It also suspends and reactivates users, configures passwords and authentication factors, and pulls event logs for audit work. A Memory Engine added June 30, 2026 carries context between sessions, and Global Rules let admins set standing instructions across the organization.
- Workflows (shipped June 22, 2026, announced July 15): a no-code automation builder with a drag-and-drop canvas. Templates cover onboarding, offboarding, inactive user cleanup, and device compliance, with run history in the Admin Portal.
- AI and SaaS discovery: the JumpCloud agent inventories the AI tools, agents, browser extensions, and SaaS apps in use across the organization, and attributes app activity to named users. Windows and Mac installer files were added to the Private Repository on June 8, 2026.
- MCP Server (generally available October 1, 2025): the MCP Server opens organization data and admin functions to AI tools and code editors that speak the Model Context Protocol.
- Agentic IAM (announced April 27, 2026): Agentic IAM applies the same identity rules to AI agents that JumpCloud applies to employees. It registers every agent, including MCP servers running locally, into one governed inventory, and routes agent traffic through a gateway that logs it. Its firmest commitment is a checkpoint that requires a named human to approve an agent's high-impact actions before they run.
- What has not shipped yet: managed AI connectors, audit reporting, and agent-to-agent trust are on the 2026 roadmap. AI Device Trust, which checks hardware health in real time, appears on both the delivered and the roadmap side of JumpCloud's own announcement, so treat the sharper availability claims with care. A June 11, 2026 announcement put Agentic IAM on Google Cloud, tuned for Gemini Enterprise, phasing in through 2026.
If you are weighing JumpCloud against a directory you already run, the directory, endpoint, and network items above are the purchase. The 2026 automation work has genuinely shipped, and the dates are verifiable, but it reads as a reason to stay with JumpCloud rather than a reason to move to it.
JumpCloud Pros & Cons
The trade-off is breadth against depth. JumpCloud covers more of the stack than anything else at this price, and it covers the Apple and Linux ends of that stack less thoroughly than the specialists do.
What Users Say
What users consistently praise:
- One portal for every operating system: admins single out running Windows, macOS, and Linux alongside single sign-on, LDAP, RADIUS, and directory services without switching tools.
- Setup speed: reviewers describe getting an administrator fully onboarded inside a day.
- One-click offboarding: cutting access and removing a user comes up repeatedly as a standout, particularly for smaller teams with no dedicated identity specialist.
- Free identity sync with Microsoft 365 and Google Workspace: practitioners running mixed productivity stacks rate this well, and several competing platforms charge for it.
What users consistently complain about:
- macOS depth: administrators with Macs in the fleet describe the device management as noticeably thinner than Jamf. Three gaps get named: automatic FileVault key rotation, patching for custom applications, and the missing hook into Microsoft compliance that would let them block Microsoft 365 access from unmanaged machines. One shop running both platforms sums it up as fine on Windows and lacking on Mac.
- Service reliability: login outages recur. On November 4, 2025, intermittent login failures hit single sign-on, second-factor authentication, and both the admin and user portals. They were fixed in under three hours, and LDAP and RADIUS were affected only for logins that required a second factor (status history).
- Pricing that moves: complaints center on roughly 10% increases at renewal, and on features that were once bundled and now cost extra, asset management among them. MSPs also flag paying the full per-user rate for light users who only need a mailbox.
- The password manager: JumpCloud built its password manager from an acquisition, and practitioners still rate the result below Keeper and 1Password. It is a billed add-on, which sharpens the complaint considerably.
- Reporting for audits: built-in reporting is consistently called insufficient for compliance work, and data has to be exported elsewhere to build a custom report.
Where reviewers diverge:
- Support quality: review-site scores and hands-on administrator accounts point in opposite directions, and part of that is how each group gets recruited. Vendors gather solicited reviews through customer success programs at renewal, which reaches the customers who already chose to renew. Administrator forums attract people with a problem bad enough to ask strangers for help. Those are two different populations, so neither number is the whole picture. The most useful account came from one administrator who reported both patterns at once: first response fast, everything after it slow. Plan around that version.
- Linux: admins who need directory services and single sign-on across operating systems call Linux support solid. Admins who need policy-driven management of Linux machines end up writing shell scripts, and disk encryption there does not reach what Windows and macOS get. Both groups are describing the same product accurately.
- Setup difficulty: teams starting fresh describe onboarding as a day's work. Teams migrating off Active Directory describe a real learning curve, often enough that it is a pattern rather than a one-off. The split tracks how complicated the migration is, not how good the product is.
- Value as you scale: small teams and early-stage MSPs consistently report strong value for money. MSPs with larger client portfolios describe cost as a growing problem once modules stack up and annual increases compound.
Read together, the scores and the forums agree more than they look like they do. JumpCloud is sold in modules, so two reviewers can own quite different products and both describe them accurately. Most of the disagreement is about which modules the reviewer bought.
JumpCloud Pricing
JumpCloud charges per user, per month. You can buy a packaged tier or pick individual features a la carte.
A la carte add-ons (annual / monthly per user):
Rates come from jumpcloud.com/pricing. All pricing information verified August 2026.
Gotchas:
- Annual billing saves up to 18% against monthly.
- JumpCloud bills on the 1st of each month for the month just finished, and service runs for the number of days in your contract.
- Suspended users bill at the full per-user rate. Deactivating someone does not stop the charge. Only deleting the account does.
- Prices exclude VAT, and JumpCloud is not registered for VAT.
- Payment is by credit card (Amex, Discover, Mastercard, Visa) or bank transfer. Invoicing is available only for accounts billing above $2,000 a month.
- The 30-day free trial gives full platform access with no feature restrictions, and includes 24/7 Premium Support.
- The legacy free tier of 10 users and 10 devices applied only to accounts created before February 1, 2024. New accounts get no permanent free tier.
- Not everything can be bought a la carte. Agentic IAM lifecycle management, SaaS Discovery, SaaS Access Control, and SaaS Insights carry no individual price and come only inside a package.
- Education, nonprofit, MSP and partner, and privileged access management pricing all run through sales. No rates are published for any of them.
- Platform Essentials caps at 300 users. Past that you are quoted for Platform or Platform Prime, and neither publishes a price.
- MSP customers report renewal increases of around 10%, described to at least one of them by an account manager as an annual expectation. JumpCloud does not publish this, so treat it as a negotiating point rather than a fixed term.
- MSPs also report paying the full per-user rate for light users who only need a mailbox, which changes the arithmetic on client accounts with a long tail of occasional users.
- Cancelling takes 30 days' written notice plus manual deletion of every user and every computer. The admin dashboard also locks while invoices are overdue. So if you are leaving over a billing dispute, the lock can block the deletions you must finish before you can leave.
Is JumpCloud Worth It?
Yes, if you run a lean IT team or an MSP with a mixed fleet of Windows, macOS, and Linux machines. One console for the directory, single sign-on, multi-factor authentication, device management, LDAP, and RADIUS, with no on-premises servers to keep alive, is the whole pitch, and it holds up.
Run the arithmetic on your own headcount first. At 200 people, Device Identity Management costs $13 per user per month billed annually, so roughly $31,200 a year. That single line item covers the directory, multi-factor authentication, and device management. Buying an identity provider and a device management tool separately means two contracts, two renewal cycles, and two vendors to call when logins break at 8am on a Monday.
One caveat sits inside that yes. If your Linux machines need policy-driven configuration rather than just logins, budget for a separate configuration management tool alongside JumpCloud. Directory coverage will not close that gap.
Look elsewhere if:
- Your fleet is mostly Apple and you need real macOS depth. JumpCloud is behind on automatic FileVault key rotation, policy coverage, and compliance templates. Iru, the Apple-first device management specialist, is the better call where those matter more than the width of your Windows and Linux coverage.
- You need identity governance across several clouds. That means advanced user lifecycle management, thousands of ready-made app connections, and analyst-validated depth. Okta, the largest standalone identity vendor, is the specialist, and it does not try to manage your endpoints.
JumpCloud vs Okta
JumpCloud and Okta solve overlapping problems from opposite ends. JumpCloud started as a cloud directory and added device management, so identity and endpoints live in one product. Okta built the market's largest independent identity platform and deliberately left device management to partners.
For buyers the split is clean. JumpCloud is better value when you need identity and devices together, and it is the only one of the two that manages Linux machines itself. Okta is the better choice when you already run a device management tool and need app breadth, enterprise lifecycle automation, and governance depth.
Where JumpCloud wins:
- Device management is built in: JumpCloud manages Windows, macOS, Linux, iOS, and Android in the same product as the directory. Okta positions Device Access as a companion to a device management tool, not a replacement for one.
- It can lock the whole machine: a JumpCloud admin locks the device, which stops browsers and installed apps alike. Okta's Universal Logout ends app sessions on the server side, and only for apps that have implemented it.
- Economics for smaller teams: JumpCloud's bundle costs less than an identity provider plus a separate device management tool. Okta carries a $1,500 annual contract minimum on Workforce Identity, which is the floor small teams hit first.
- The directory is included: JumpCloud provides the directory itself, which matters if you have no Active Directory or Entra ID to build on.
- Linux: JumpCloud authenticates and enrolls Linux machines itself, where Okta reaches devices through partners. Keep the earlier caveat in view: logins are solid, policy management means scripting.
Where Okta wins:
- App catalog: the Okta Integration Network lists more than 8,000 ready-made connections. JumpCloud's verified catalog is in the low hundreds, which is a different order of magnitude for anyone with a long list of SaaS tools. JumpCloud reviewers name the smaller catalog often enough that it appears in G2's aggregated dislikes.
- Enterprise identity depth: Okta was named a Leader in the Forrester Wave for Workforce Identity Security Platforms, Q2 2026, with the highest possible score in nine criteria, user lifecycle management and identity security posture among them.
- Scale: Okta is built for large enterprises with identity spread across several clouds. JumpCloud's product decisions consistently favor smaller organizations and MSPs.
- Ratings tie, analyst gap: both tools hold a 4.5 rating on G2, across 4,055 reviews for JumpCloud and 1,335 for Okta. Okta's analyst validation is the one advantage JumpCloud has not matched in publicly verifiable sources.
See the full side-by-side comparison.
JumpCloud Alternatives
Two products cover the cases where JumpCloud is the wrong buy: Apple-first fleets that need deeper macOS management, and organizations that have outgrown its identity governance.
Iru: Pick this if your fleet is mostly Apple. You get compliance templates, declared device state instead of pushed commands, and automatic operating system patching. JumpCloud's macOS management reaches none of the three.
Iru rebranded in October 2025 and is no longer Apple-only. It now manages Windows and Android as well, and sells workforce identity, threat detection and response, vulnerability management, and compliance automation alongside the device management. Two things still separate it from JumpCloud:
- Its non-Apple coverage is narrow. Windows management covers Windows 11 24H2 or 25H2 only, on Pro, Pro Education, Enterprise, or Education editions. Android starts at version 13. JumpCloud reaches a considerably wider Windows and Linux estate.
- Its identity product is not a directory. Iru offers passwordless login that checks the device's security state at sign-in. That is useful, but it does not replace an Active Directory the way JumpCloud's directory does.
One thing to check before committing: since January 21, 2026, Iru refuses new enrollments from devices running macOS 13 Ventura, macOS 12 Monterey, iOS 16, iPadOS 16, or tvOS 16. Iru treats End of Support and End of Life as separate tiers, with macOS 11 and earlier and iOS 15 and earlier in the second.
Okta: Pick this if you have outgrown JumpCloud's identity capabilities and need thousands of ready-made app connections, validated enterprise lifecycle management, and identity that spans several clouds. The $1,500 annual minimum rules it out for very small teams, which is exactly the segment JumpCloud is built for, and it assumes you already run a device management tool of your own.
How JumpCloud Works With Siit
JumpCloud is a native Siit integration, and it is one of only two where Siit can reset both a password and a second authentication factor. It is also the only one of those two that covers devices as well as people. That combination means an agent can finish more of a request without leaving the chat.
Siit connects JumpCloud twice, once as an identity provider and once as a device management tool. Which actions you get depends on which of those roles you use it for.
What syncs into Siit:
- People: profile fields (job title, department, manager, location, employee type), group memberships, and whether the account is active or suspended. Work email is the matching key, and the data refreshes every few hours.
- Devices: every JumpCloud-managed Mac, Windows, and Linux machine, with its hardware details, operating system version, and last check-in. The JumpCloud user attached to each machine becomes the equipment owner in Siit.
What an agent can do from a request:
- On the person: add or remove them from a group, reset their password, reset their second authentication factor, suspend the account, or reactivate it. These run immediately, from the request side panel, inside automated identity tasks, or in an IT Agent playbook, with the sensitive ones held behind an approval.
- On the device: lock it, wipe it, or open its record in JumpCloud. One caveat before you rely on wipe: coverage depends on the operating system, and Linux machines have no managed wipe at all.
Every action taken from Siit is written to the request timeline, which is what makes this auditable rather than just convenient.
Two customers have run this exact pairing. Mirakl's provisioning story is the sharper one. A seven-person IT team supporting around 800 employees went from more than 120 manual IT actions a month to zero, was live one week after deciding, and now runs 16 automated workflows. Mirakl's IT team put the reason plainly: "The JumpCloud integration was the deciding factor. Siit is the best solution on the market with a native JumpCloud integration."
Unit's lean IT story shows the same pairing under audit pressure. Two IT people support more than 200 employees across three countries under SOC 2. JumpCloud provisioning is fully automated, with three approval tiers behind it: automatic for basic apps, manager plus app owner for standard ones, and the COO added for sensitive ones. Helpdesk labor fell 60%, and one to two hires were avoided. Adi Avraham, Head of IT, put it this way: "I know that if we didn't have Siit with this capability, I would have needed to hire at least one or two additional people."
Siit connects with 500+ connectable apps across identity, device management, HR systems, knowledge bases, and ticketing. That is what lets a request touching several departments get resolved in one thread instead of four browser tabs.
