Open-Source PAM — Free to Start,
Scale When Ready
Community Edition is permanently free for up to 5,000 assets. Enterprise Edition adds multi-tenancy, enterprise SSO, and SLA support with a scale-based subscription.
Community Edition
Free Forever
Up to 5,000 assets · Self-hosted · GPL-3.0
- SSH / RDP / VNC / DB / K8s access
- Session recording & audit
- LDAP / AD authentication
- TOTP / MFA multi-factor auth
- ACL access control policies
- Command filtering & blocking
- File transfer logging
- Docker / Linux deployment
- Email notifications
- Community support (GitHub / Forum)
Enterprise Edition
Commercial subscription, scale-based pricing
Ultimate — Unlimited assets
Annual subscription · Available on AWS Marketplace
Everything in Community, plus:
- Custom RBAC roles
- Multi-tenant organization
- Cloud asset sync (AWS/GCP/Azure)
- SSO (OIDC/SAML2/OAuth2)
- LDAP HA & RADIUS
- Oracle & SQL Server
- JIT access approval
- Custom UI & branding
- SMS notifications
- Email + ticket support with SLA
Detailed Feature Comparison
| Feature | Community | Enterprise |
|---|---|---|
| Scale & Deployment | ||
| Max IT assets | Up to 5,000 | 50 / 500 / 5,000 / Unlimited |
| Standalone deployment | ✓ | ✓ |
| Active-Standby HA | — | ✓ (Standard+) |
| Full HA cluster | — | ✓ (Ultimate) |
| Access & Protocols | ||
| SSH / RDP / VNC / DB / K8s | ✓ | ✓ |
| Oracle & SQL Server | — | ✓ |
| Web terminal RemoteApp | ✓ | ✓ |
| Authentication | ||
| LDAP / AD / MFA | ✓ | ✓ |
| SSO (OIDC/SAML2/OAuth2) | — | ✓ |
| RADIUS / LDAP HA | — | ✓ |
| Authorization & Control | ||
| RBAC with custom roles | — | ✓ |
| JIT instant access | — | ✓ |
| Ticket approval workflow | — | ✓ |
| Multi-tenant isolation | — | ✓ |
| Account Management | ||
| Account auto-discovery | ✓ | ✓ |
| Password rotation | — | ✓ |
| Cloud asset sync (AWS/GCP/Azure) | — | ✓ |
| Support | ||
| Community (GitHub / Forum) | ✓ | ✓ |
| Email + ticket with SLA | — | ✓ |
| Dedicated account manager | — | ✓ |
Frequently Asked Questions
Is Community Edition really free forever?
Yes. JumpServer Community Edition is licensed under GPL-3.0 and can be used permanently in production for up to 5,000 assets. Enterprise Edition is a separate commercial product — you will never be forced to upgrade.
What's the difference between the four Enterprise tiers?
All four tiers have identical features. The only differences are the maximum number of IT assets (50 / 500 / 5,000 / unlimited) and supported deployment topology (Basic: standalone only; Standard+: active-standby HA; Ultimate: full HA cluster).
How do I migrate from Community to Enterprise?
Enterprise and Community are fully compatible. After activating your license, all assets, users, permissions, and session recordings are preserved. Most migrations complete in under 30 minutes with zero downtime.
How does JumpServer compare to CyberArk in pricing?
CyberArk annual fees typically start at $30,000 with implementation services costing an additional $50,000–200,000. JumpServer Community Edition is free; Enterprise Edition is a scale-based subscription significantly lower than CyberArk. See our full comparison.
Does JumpServer access my data?
Absolutely not. JumpServer is 100% self-hosted. All session recordings, credentials, and audit logs are stored on your own infrastructure. This is the core reason regulated industries choose JumpServer over SaaS PAM solutions.
Is there a free trial for Enterprise?
Yes. Request a 14-day full-feature Enterprise trial — no credit card required. Apply now.
Start Protecting Your Infrastructure Today
14-day Enterprise trial, or deploy Community Edition with Docker in 30 minutes.