Open-source PAM.
Free to start. Built to scale.
Start with the Community Edition at no cost. Upgrade to Enterprise when your team needs multi-tenancy, enterprise SSO, Oracle/SQL Server, and dedicated support.
Open Source
Download on GitHub →
Quickstart Guide
Community Edition
Full-featured PAM platform, free forever. Covers the core access, audit, and authentication needs of most teams with no asset limits.
Free
No asset limit · Self-hosted · GPL-3.0
Asset Types
- ✓Unix / Linux / Windows / Network Devices
- ✓MySQL, MariaDB, MongoDB, PostgreSQL, Redis
- ✓Kubernetes Clusters & Websites
- ✓Basic RemoteApp (Windows)
Connection Methods
- ✓Web browser: SSH, RDP, VNC, Database, K8s, SFTP, RemoteApp
- ✓Desktop clients: SSH, SFTP, RDP, VNC, Database
Authentication
- ✓LDAP / Active Directory
- ✓CAS & Passkey
- ✓TOTP / MFA
Access Control & Audit
- ✓Authorization management
- ✓Login / command / connection ACLs
- ✓Full session recording & playback
- ✓Command audit, file transfer tracking, operation logs
- ✓Email notifications
Deployment
- ✓Standalone (Docker / Linux)
- –Active-Standby & HA not included
Support
- ✓Community support via GitHub & forum
Enterprise
Enterprise Edition
Everything in Community, plus multi-tenancy, enterprise SSO, advanced databases, VirtualApp, and SLA-backed support.
Select your scale
Deployment options
Annual subscription · Available on AWS Marketplace
Contact Sales Start 14-Day Free TrialResource & Access
- ✓Role Management (custom roles)
- ✓Organizational Management (multi-tenant)
- ✓Cloud Asset Sync — AWS, GCP, and more
- ✓VirtualApp Management (Linux)
- ✓Advanced Remote Applications
Authentication
- ✓SSO — OIDC, SAML2, OAuth2
- ✓LDAP HA & RADIUS
- ✓Collaboration: WeCom, DingTalk, Slack, Lark, FeiShu
Additional Databases
- ✓Oracle & SQL Server
- ✓ClickHouse & Dameng
Additional Connections
- ✓Web-based & Desktop VirtualApp access
- ✓Desktop RemoteApp access
Productivity & Compliance
- ✓Ticketing System (JIT access approvals)
- ✓SMS Notifications
- ✓Customizable UI & Branding
Support
- ✓Email & ticket support with SLA
- ✓Dedicated account manager
All plans on AWS Marketplace →
Community vs Enterprise
All plans are fully self-hosted. No data leaves your environment.
| Community | Enterprise | |
|---|---|---|
| Scale & Deployment | ||
| Maximum IT assets | Unlimited | 50 / 500 / 5,000 / Unlimited |
| Standalone | ✓ | ✓ |
| Active-Standby | — | ✓ Standard and above |
| High Availability cluster | — | ✓ Ultimate only |
| Resource & Access Management | ||
| User / Group / Asset Management | ✓ | ✓ |
| Tag & Zone Management | ✓ | ✓ |
| Authorization Management | ✓ | ✓ |
| Role Management | — | ✓ |
| Organizational Management (multi-tenant) | — | ✓ |
| Cloud Asset Synchronization (AWS, GCP…) | — | ✓ |
| VirtualApp Management (Linux) | — | ✓ |
| RemoteApp Management (Windows) — Basic | ✓ | ✓ |
| Advanced Remote Applications | — | ✓ |
| Authentication | ||
| LDAP / Active Directory | ✓ | ✓ |
| CAS | ✓ | ✓ |
| Passkey & TOTP / MFA | ✓ | ✓ |
| LDAP HA (High-Availability) | — | ✓ |
| SSO — OIDC / SAML2 / OAuth2 | — | ✓ |
| RADIUS | — | ✓ |
| WeCom / DingTalk / FeiShu / Lark / Slack | — | ✓ |
| Supported Asset Types | ||
| Unix / Linux / Windows / Network Devices | ✓ | ✓ |
| MySQL / MariaDB / MongoDB / PostgreSQL / Redis | ✓ | ✓ |
| Kubernetes Clusters & Websites | ✓ | ✓ |
| Oracle & SQL Server | — | ✓ |
| ClickHouse & Dameng | — | ✓ |
| Connection Methods | ||
| Web browser — SSH / RDP / VNC / Database / K8s / SFTP | ✓ | ✓ |
| Web browser — RemoteApp | ✓ | ✓ |
| Web browser — VirtualApp | — | ✓ |
| Desktop client — SSH / SFTP / RDP / VNC / Database | ✓ | ✓ |
| Desktop client — RemoteApp & VirtualApp | — | ✓ |
| Access Control Policies (ACLs) | ||
| User Login Control | ✓ | ✓ |
| Command Filtering | ✓ | ✓ |
| Asset Connection Control | ✓ | ✓ |
| Asset Connection Methods Control | ✓ | ✓ |
| Audit & Monitoring | ||
| Session recording & playback | ✓ | ✓ |
| Real-time session monitoring | ✓ | ✓ |
| Session command auditing | ✓ | ✓ |
| File transfer tracking | ✓ | ✓ |
| User online device monitoring | ✓ | ✓ |
| Login / password change / operation logs | ✓ | ✓ |
| Additional Features | ||
| Email Notifications | ✓ | ✓ |
| SMS Notifications | — | ✓ |
| Ticketing System (JIT access approvals) | — | ✓ |
| Customizable UI & Branding | — | ✓ |
| Support | ||
| Community (GitHub / Forum) | ✓ | ✓ |
| Email & ticket support + SLA | — | ✓ |
| Dedicated account manager | — | ✓ |
Frequently Asked Questions
Is the Community Edition really free forever?+
Yes. JumpServer Community Edition is open-source (GPL-3.0) and free to use indefinitely with no asset limits. Enterprise Edition is a separate commercial offering — you are never forced to upgrade.
What is the difference between the four Enterprise tiers?+
All four tiers include identical Enterprise features. The only differences are the maximum number of IT assets (50 / 500 / 5,000 / Unlimited) and deployment topology: Basic supports Standalone only; Standard and above add Active-Standby; Ultimate adds full High Availability cluster mode.
How is an "IT asset" counted?+
An IT asset is any endpoint registered in JumpServer — a server, VM, database instance, Kubernetes cluster, or network device. Each endpoint counts as one asset regardless of how many users access it.
Can I migrate from Community to Enterprise without data loss?+
Yes. Enterprise Edition is fully compatible with Community Edition. All existing assets, users, permissions, and session recordings are preserved after the license is applied. Most migrations complete in under 30 minutes with no downtime.
Is there a free trial of Enterprise Edition?+
Yes. You can start a 14-day free trial with full access to all Enterprise features. No credit card required.
Does JumpServer have access to my data?+
No. JumpServer is entirely self-hosted — all session recordings, credentials, and audit logs are stored on your own infrastructure. This is why security-sensitive enterprises and regulated industries choose JumpServer over cloud-managed PAM alternatives.
How does JumpServer compare to CyberArk on price?+
CyberArk typically starts at $50,000–$100,000+ per year. JumpServer Community Edition is free, and Enterprise Edition is priced significantly lower while delivering comparable core PAM capabilities. See our JumpServer vs CyberArk comparison for a full breakdown.
Start securing your infrastructure today
Try Enterprise free for 14 days, or deploy Community Edition in minutes with Docker.