Jamf Pro

Apple-only device management for Mac, iPhone, iPad and Apple TV, licensed per device by a public US vendor.

As of 13 November 2026, Jamf Pro's pricing is not published; the vendor quotes on request. The deepest implementation of Apple's device management surface, with same-day support for each September operating system release. Softwr lists it under Cybersecurity.

Visit siteVisit Jamf Pro

Overview

What Jamf Pro does

Jamf Pro is a device management platform for Apple hardware: Mac, iPhone, iPad, Apple TV and Vision Pro. It handles enrolment through Apple Business Manager and Automated Device Enrolment, configuration profiles, application deployment through Apps and Books, patch management, inventory with smart groups and custom extension attributes, and a Self Service portal that lets users install approved software without a ticket. On macOS it also installs a local agent that runs policies and shell scripts, which reaches management surfaces that MDM commands alone do not cover. It is available hosted in Jamf Cloud or self-hosted on your own infrastructure. Jamf is a public company listed on NASDAQ, headquartered in Minneapolis, previously known as JAMF Software and, before that, for the Casper Suite. The commercial reason organisations pay for Jamf rather than using the Apple support in a cross-platform endpoint manager is timing. Apple ships new macOS and iOS versions every September with new management capabilities and, more importantly, removes or changes existing ones. Jamf commits to same-day support for those releases, which means a new restriction or a changed enrolment behaviour is manageable on the day users start upgrading rather than in a quarter's time. In an estate where users update their own devices, the gap between Apple shipping something and your management platform supporting it is a period during which your compliance evidence is wrong, and that gap is the product. Buyers are Apple-heavy organisations: education, design and media, and technology companies where developers choose their own hardware. The trade-offs are structural. Jamf manages nothing but Apple, so a mixed estate means two consoles, two sets of compliance evidence, and periodic disagreements between them about what is enrolled. It also needs an administrator who can write shell scripts and read configuration profiles, because the difference between a basic Jamf deployment and a good one is entirely in the scripting and smart group logic. A generalist Windows team will use a fraction of the product and pay the same per-device rate as a team that uses all of it.

What people use it for

An Apple-heavy workforce where devices ship directly to users and must configure themselves on first boot with no IT touch
Education deployments managing shared iPads across classes with per-user app assignment
Developer organisations where engineers have administrator rights on their own Macs and management has to be achieved by policy and script rather than lockdown
Organisations needing compliance evidence for Apple devices that a general-purpose endpoint manager cannot produce at the required depth

The honest half

Where it falls short

Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about Jamf Pro.

It manages Apple hardware only, so any organisation with Windows or Android devices runs a second management platform and produces two sets of compliance evidence, and the two inventories disagree with each other more often than either vendor's documentation suggests.
Licensing is per device per year with different rates for computers and mobile devices, so spare and shared hardware sitting in a cupboard continues to consume licences until somebody actively removes it from inventory, which is nobody's job by default.
Apple's frameworks set the ceiling: if Apple does not expose a setting through MDM or declarative device management, Jamf cannot manage it either, so requests that are a single Group Policy object on Windows are answered with a scripted workaround or with nothing.
Zero-touch deployment depends on devices being registered in Apple Business Manager, which generally means buying through Apple or an authorised reseller, so machines bought retail or inherited through an acquisition cannot be supervised without wiping and re-enrolling them.
Getting value from it requires an Apple platform specialist who can write shell scripts, read configuration profiles and design smart group logic, and a generalist team without that skill uses a fraction of the product while paying the full per-device rate.

Capabilities

Features

Automated Device Enrolment
Zero-touch enrolment for devices registered in Apple Business Manager, configured before the user opens the box
Configuration profiles
Declarative settings for restrictions, Wi-Fi, certificates, VPN and security policy pushed via Apple's MDM framework
Policies and scripts
Local agent on macOS that runs shell scripts and scheduled policies beyond what MDM commands alone can do
Smart groups
Dynamic device grouping on inventory criteria so scope updates itself as devices change state
Self Service
Branded portal where users install approved applications and run approved workflows without raising a ticket
Patch management
Tracks third-party application versions across the fleet and deploys updates through defined patch policies
Extension attributes
Custom inventory fields populated by scripts, so anything readable on the device becomes reportable and scopeable
Same-day OS support
Commits to supporting each new macOS and iOS release on the day Apple ships it
Deployment choice
Available as Jamf Cloud or self-hosted on your own servers for organisations that require it
API and webhooks
Classic and modern REST APIs plus webhooks for integrating enrolment and inventory with other systems

Answered, with sources

Questions people ask

Each answer names the page it came from, so you can check it rather than take our word for it.

Does Jamf Pro include endpoint security?

No. Threat prevention, endpoint telemetry and compliance monitoring are Jamf Protect, a separate product and a separate licence. Jamf Connect for identity and password sync is also separate.

Can it manage Windows or Android?

No. Jamf manages Apple platforms only. A mixed estate needs a second management platform, and that is a deliberate product decision rather than a gap they intend to close.

Do I need Apple Business Manager?

For zero-touch enrolment and volume app licensing, yes. You can enrol devices manually through a user-initiated flow without it, but you lose supervision, automatic enrolment and the ability to prevent a user removing management.

Can I host it myself?

Yes, Jamf Pro can be self-hosted, though Jamf Cloud is the default and receives new capabilities first. Self-hosting means you own the upgrade cadence, which matters because Apple's September releases set the timetable.

How does it compare to Microsoft Intune?

Intune manages Apple devices adequately and is often already paid for in an existing Microsoft agreement, which is the argument against Jamf. Jamf is deeper, supports new Apple releases faster, and has the local agent for scripting. Organisations with a few hundred Macs and a strong Apple culture generally choose Jamf; those with a handful of Macs in a Windows estate generally do not.

Keep looking

Where to go from Jamf Pro

Best Cybersecurity software for

Compare Jamf Pro with

Other Cybersecurity software

Bitdefender VPN
Consumer VPN sold by Bitdefender that runs on network infrastructure licensed from a third party rather than its own.
12 researched notes
Milestone XProtect
Open platform video management software with perpetual per-device licences
Free, then $109/one-time12 researched notes
WireGuard
Modern, minimal-complexity VPN protocol with state-of-the-art cryptography
Free plan8 researched notes
VIVOTEK VAST Security Station
Camera-vendor video management software with a free 32-channel tier for VIVOTEK devices
12 researched notes
Fenergo
Client lifecycle management and KYC onboarding for regulated financial institutions
Pricing on request10 researched notes
Saviynt
Cloud identity governance with privileged access in the same platform
Pricing on request11 researched notes
Entrust Identity as a Service
Workforce and customer authentication from a certificate authority
From $2/mo11 researched notes
IBM QRadar
Enterprise SIEM licensed by events per second, whose cloud business IBM sold to Palo Alto Networks in 2024.
10 researched notes
Cisco Duo
Trusted access for all users, all devices
Free plan7 researched notes
JumpCloud
Unified identity and device management for hybrid workforce.
From $9/user/month8 researched notes
W
Windscribe
VPN and firewall service with a generous free data tier and a customizable Build-A-Plan option
Free, then $3/mo6 researched notes
Authelia
Open-source authentication and two-factor portal for reverse proxies
Open source9 researched notes
Authy
Twilio's free authenticator app with encrypted cloud backup, mobile only since the desktop clients were withdrawn in 2024.
Free plan12 researched notes
Baffle
Transparent proxy that encrypts, tokenises and masks database fields without application code changes
Pricing on request13 researched notes
Beyond Identity
Phishing-resistant passwordless authentication with device trust enforced at every login
Pricing on request11 researched notes
BeyondTrust
Privileged access management, endpoint privilege management and secure remote access
Pricing on request11 researched notes
Burp Suite
Toolkit for web security testing
Free, then $449/yr7 researched notes
Bitdefender Total Security
From $19.99/yr10 researched notes

Softwr does not host reviews and shows no star rating for Jamf Pro, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.

Best Cybersecurity software alternatives

View all Cybersecurity software