#18 in Identity & Access ManagementUpdated 2026-08

JumpServer

by JumpServer · Open-source privileged access management for SSH, RDP, databases and Kubernetes

45 — BenchRank score out of 100

Homepage
Pricing page

Visit website See full Identity & Access Management ranking

Overview

JumpServer is an open-source, self-hosted privileged access management platform released under GPL-3.0. It brokers SSH, RDP, VNC, database, Kubernetes, web app and RemoteApp connections, with LDAP/AD and MFA authentication, ACL policies, command filtering, session recording and file transfer logging. It is deployed with Docker Compose or Kubernetes Helm charts.

Best for: DevOps and IT teams wanting self-hosted privileged access control for SSH, RDP, database and K8s assets
Pricing: Community Edition is free forever for up to 5,000 assets; Enterprise Edition is a scale-based annual subscription quoted by sales, with a 14-day trial and no prices published.
Runs on: Self-hostedCLI

Strengths and trade-offs

Strengths

GPL-3.0 open source, self-hosted, full source code on GitHub
Community Edition free forever for up to 5,000 assets
Installs via one Docker Compose command or Kubernetes Helm charts
Session recording, command filtering and audit in both editions

Trade-offs

Enterprise pricing is quote-only; no figures are published
Community Edition is capped at 5,000 assets
SSO, RBAC, multi-tenancy, Oracle and SQL Server are Enterprise-only
Self-hosted only — the pages show no managed or SaaS option

Pricing

Published plans from JumpServer’s own pricing page, in USD. Usage charges and add-ons may apply on top.

JumpServer pricing tiers, monthly rates in USD
Plan	Monthly	Includes
Community Edition	—	Free forever, up to 5,000 assets, self-hosted GPL-3.0 SSH / RDP / VNC / DB / K8s access with session recording and audit LDAP / AD authentication, TOTP MFA, ACL policies, command filtering Community support via GitHub and forum
Enterprise Edition	Contact sales	Scale tiers: Basic 50, Standard 500, Pro 5,000, Ultimate unlimited assets Active-Standby HA from Standard; full HA cluster on Ultimate Custom RBAC, multi-tenant orgs, SSO (OIDC/SAML2/OAuth2), RADIUS, LDAP HA Cloud asset sync, Oracle & SQL Server, JIT approval, SLA-backed support

How this score is made up

Each dimension is scored out of 100 and combined into the headline score using fixed weights.

MCP support: 0 out of 100
API quality: 10 out of 100
Documentation: 80 out of 100
Agent friendliness: 85 out of 100
Pricing transparency: 30 out of 100
Changelog: 100 out of 100
Marketing site structure: 75 out of 100
Operational trust: 20 out of 100

Measured, but not part of the score

Useful to know, but not a mark for or against the product — so these do not affect the ranking.

Openness: 40 out of 100
Maintenance: 100 out of 100

This doesn’t look right — report a problem with JumpServer’s score

Alternatives in Identity & Access Management

Ranked 1
75.9 — BenchRank score out of 100
Ory
Ory · API-first identity and access management, self-hosted or managed
Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Ranked 2
73.8 — BenchRank score out of 100
Logto
Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy
Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Ranked 3
73.1 — BenchRank score out of 100
Hexclave
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.