JumpServer PAM

Privileged access without password disclosure

JumpServer PAM is a central access point for servers, databases, network equipment and internal web systems. Each administrator or contractor receives personal, policy-controlled access while passwords remain protected. Security teams can approve temporary privileges, observe active sessions and reconstruct actions during an audit or incident investigation.

Core capabilities

• SSH, RDP, VNC, SFTP, SQL and browser-based access;
• role-based policies, approval workflows, JIT access and rapid revocation;
• recording of sessions, commands, file transfers and clipboard activity;
• dangerous-command filtering and SQL query history;
• AD/LDAP and multi-factor authentication integrations;
• asset and account discovery, clustering and geo-replication.

Editions

Community Edition is free for up to 5,000 managed assets and is suitable for an initial PAM environment. Enterprise Edition adds advanced policies, clients, integrations and support for large-scale operation. Annual subscription and perpetual licensing options are available.

How JumpServer PAM works

Users authenticate to JumpServer rather than directly to a target system. The platform evaluates the user, asset, protocol, time window and approval state, then establishes a controlled connection without revealing the target credential. Audit records and session recordings can be stored externally and replicated between sites.

Deployment by scale

Small business or first PAM environment

Start with one instance, the most critical servers and named administrator accounts. Community Edition lets the team establish personal access and audit evidence before a wider rollout.

Medium-sized organisation

Integrate AD/LDAP and MFA, add approvals for contractors, automate asset inventory and store session recordings in dedicated storage.

Large and geographically distributed enterprise

Use a high-availability cluster, distributed access nodes, geo-replication and external object storage. Separate policies can serve business units, locations and contractor groups without losing central oversight.

Practical use cases

• temporary vendor access for maintenance;
• controlled DBA access with SQL audit;
• recording of privileged actions for investigations and compliance;
• elimination of shared administrator passwords;
• rapid access revocation when a role or contract ends.

Demo and PoC

We can first demonstrate a privileged-access workflow relevant to your environment, then support a PoC against agreed success criteria. A small set of test assets, user roles, protocols and audit requirements is enough to begin. AFI engineers will help define the topology, test plan and appropriate product edition.

Arrange a JumpServer demonstration or request licence and support pricing.