Case Study | JumpServer Secures Kingsoft Office's Information Security

Kingsoft Office (KINGSOFT OFFICE) is a leader in Chinese office software. Built around its flagship WPS Office and complemented by Kingsoft Docs, Kingsoft Collaboration, and Kingsoft Dictionary, it has formed a comprehensive, high-performance office ecosystem with a large user base in China and worldwide.

As an office software and services provider, Kingsoft Office strictly controls data security and privacy protection. While improving productivity, it actively builds data security barriers. Its cloud collaboration platform and KSOP (Kingsoft Operations) teams adopted JumpServer Community Edition early as a leading operations security audit solution and a cornerstone of the company's security architecture, establishing multi-layered protection. This greatly improved internal office security and earned broad recognition for protecting customer data.

New Goals: A Secure R&D and Operations Environment

In building its R&D security control system, Kingsoft Office sought the right balance between stronger protection and higher efficiency to keep operations flowing smoothly. The IT operations team followed the principle of "R&D data security as the foundation, efficiency improvement in parallel," and adopted an advanced strategy of scenario customization, data-driven management, and process standardization.

As the R&D security architecture matured, the operations team placed higher demands on bastion host performance, execution efficiency, and practical usability, aiming to build an efficient and secure R&D security management framework on JumpServer.

1. Better Windows cloud desktop experience via RDP client

JumpServer Community Edition's browser-based Web Terminal greatly simplifies asset connections, making operations more convenient and reducing maintenance costs. However, for scenarios such as R&D teams using remote Windows cloud desktops for collaboration and development, higher visual clarity and operating experience are required.

While Web Terminal can connect to Windows R&D cloud desktops, it does not fully meet these advanced needs and struggles to support remote development work adequately.

2. CMDB integration for asset management efficiency

Kingsoft Office's hybrid cloud architecture spans Kingsoft Cloud, Alibaba Cloud, and Huawei Cloud with a large asset footprint. This flexibility and scalability also means frequent asset onboarding and retirement.

To keep asset data accurate and synchronized, staff currently log into the internal CMDB system periodically, manually tally new and retired machines, and update JumpServer Community Edition asset lists one by one. This manual model is time-consuming, error-prone, and inefficient—driving the need for a more automated approach.

3. Internal ticketing integration for collaboration

Kingsoft Office has a mature internal ticketing system for server resource requests. Today, when users submit requests through internal tickets, bastion administrators must manually grant authorization. While rigorous, this creates delays, human error, and high labor cost as asset demand grows.

Implementation: JumpServer Enterprise Edition

Facing these needs, Kingsoft Office upgraded from Community Edition to Enterprise Edition and deeply integrated JumpServer Enterprise capabilities to build its R&D security management system.

The X-Pack enhancement package provides strong access control, fine-grained permission management, detailed audit tracking, intelligent operations tools, and automated workflows—giving the IT team greater flexibility, security, and standardization. Key improvements include:

Unified operations and development portal

Enterprise Edition supports calling the local RDP client (MSTSC) for efficient Windows asset management. R&D staff connecting to Windows cloud desktops benefit from near-local visual quality and avoid Web Terminal shortcut conflicts.

Kingsoft Office brought essential R&D cloud desktops into JumpServer's unified management. R&D staff access cloud desktops through familiar R&D interfaces with clearer, smoother experiences than Web Terminal, while all remote operations remain strictly audited and monitored.

Multi-cloud asset auto-sync

Enterprise Edition's comprehensive API enables seamless CMDB integration. JumpServer automatically discovers and ingests new or changed assets from CMDB, improving timeliness and accuracy. Operations staff then configure authorization rules so each user accesses only approved assets.

Unified ticketing for standardized asset requests

Given the maturity of internal ticketing, Kingsoft Office disabled JumpServer's built-in ticketing module and integrated its internal workflow system via API. This automates the full chain from request to approval to authorization, preserves employee habits, and reduces cross-department friction.

When users lack asset permissions, they submit requests through the internal system. Administrators review and adjust details on a unified interface. Upon approval, permissions are granted immediately with automatic expiry and reclamation—eliminating manual cleanup.

Business Value

Higher operations efficiency and better user experience. JumpServer centrally manages Windows assets, Linux servers, and network security devices while syncing with CMDB automatically. RDP client connections deliver low-latency, high-quality sessions for both operations troubleshooting and R&D work.

Optimized collaboration and ticket workflows. API integration links asset requests and authorization to internal ticketing, automating the full workflow from submission to grant while allowing custom authorization policies for different scenarios.

Support for future growth. JumpServer continues to evolve with Kingsoft Office's digital transformation—from Community to Enterprise and ongoing releases—enriching capabilities and strengthening security and stability for worry-free asset management.