jumpserver/jumpserver

Health v2 · maintenance only

Adoption not part of the score

31455 stars · 5772 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

JumpServer is an open-source Privileged Access Management (PAM) platform and bastion host that provides secure, audited access to SSH, RDP, Kubernetes, database, and RemoteApp endpoints through a web browser. It consolidates authentication (MFA, LDAP/AD, SSO), RBAC, credential rotation, session recording, and command filtering into a self-hosted platform deployable via Docker Compose or Helm.

Use cases

• manage privileged access to servers and databases
• set up a bastion host / jump server for SSH and RDP
• record and audit terminal sessions of DevOps teams
• rotate and vault privileged account credentials automatically
• enforce RBAC and just-in-time access approvals
• replace CyberArk or Teleport with an open-source PAM
• give contractors browser-based access without VPN

When to choose

• you need self-hosted, open-source PAM with session recording and auditing
• you want a bastion host supporting SSH, RDP, VNC, databases, and Kubernetes in one platform
• you need MFA, LDAP/AD integration, and command-level access control
• you want to eliminate shared accounts with automated password rotation

When to avoid

• you only need simple SSH key management without access governance
• you require enterprise SSO (SAML/OIDC), multi-tenancy, or HA clustering on a free license
• you need a lightweight proxy rather than a full PAM platform with a 4c8g+ server footprint

Facets

application · maturity stable

auth authorization security ssh self-hosted monitoring http-server security self-hosted backend infrastructure-as-code self-hosted python pam bastion-host privileged-access-management session-recording rbac jump-host audit mfa credential-management devops linux docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="jumpserver/jumpserver")