JUMPSERVER · Privileged access management (PAM) · Bastion host
With JumpServer, Kinetik Bilişim channels privileged server access through a single gateway where every session is recorded and every permission can be revoked.
JumpServer is an open-source privileged access management (PAM) and bastion host platform developed by FIT2CLOUD. It routes SSH, RDP, VNC and database sessions through a single web gateway and records who connected to which server, when, and which commands they ran.
| At a glance | JumpServer |
|---|---|
| Developer | FIT2CLOUD |
| Origin | China |
| Licence | Open source (GPLv3); enterprise edition available |
| Protocols | SSH, RDP, VNC, Telnet and databases such as MySQL, PostgreSQL, SQL Server and Oracle |
| Installation | Docker-based, single-command install |
| Identity integration | LDAP / Active Directory · MFA · SSO (OIDC, SAML) |
| With Kinetik | Deployment, hardening, AD/MFA integration, forwarding logs to SIEM |
Kinetik Bilişim and JumpServer
A shared 'administrator' password, a departed employee's VPN account still active, a vendor's permanent RDP access… Privileged access is one of the areas that produces the most audit findings. JumpServer gathers that access into a single gateway: users never see the server password, every session is recorded, and access can be revoked in one click.
By forwarding session and command logs to Wazuh, we make privileged access traceable on the same timeline as other security events.
Product family
- JumpServer Community Edition — open-source PAM: asset management, authorisation, session recording and auditing.
- JumpServer Enterprise Edition — the enterprise edition for environments that need high availability and advanced account management.
Which problems do we solve?
- Shared administrator passwords. Sign-in with personal identity; the server password is never shown to the user.
- Vendor and third-party access. Time-limited, approved and recorded authorisation.
- ISO 27001 privileged access and logging controls. Session recordings and audit evidence for Annex A 8.2 and 8.15.
The first yardstick of a PAM project is closing direct access to the most critical server from anywhere but JumpServer. A bastion deployed without that step is just a second door.
— Field note, Kinetik Bilişim
How we work
- Discovery. Inventory of privileged accounts, servers and access paths.
- Design and PoC. Pilot with critical servers; AD and MFA integration.
- Deployment and migration. Closing direct access at the firewall and phased expansion.
- Operations. Access reviews and recording audits — Managed Services.
Related pages and reading
- Cyber security solutions
- Open-source solutions
- ISO Certification: privileged access controls
- KVKK & GDPR Compliance: access logs
- Penetration Testing: verify direct access paths are closed
Frequently asked questions
Is JumpServer free?
The Community Edition is open source with no licence fee. If high availability and advanced features are needed, we evaluate the Enterprise Edition.
Do servers need an agent?
No. JumpServer is agentless; sessions pass through it over standard protocols.
How do we give vendors temporary access?
Access is granted to specific servers for a set period; it closes automatically when time is up, and the whole session stays on record.
Has JumpServer had security vulnerabilities?
Yes. Like any internet-facing access gateway, JumpServer has had critical vulnerabilities published and patched. In our deployments we keep it on the current version, never expose the admin interface to the internet and enforce MFA on every login.
How does JumpServer compare with Teleport and Apache Guacamole?
Guacamole provides browser-based RDP and SSH access but limited authorisation and command auditing. Teleport is a strong alternative with advanced features in its commercial edition. JumpServer combines assets, permissions, session recording and database access in its open-source edition, which is why we recommend it for mid-sized organisations.
Who connects to your servers, and from where?
Let's plan a JumpServer pilot that starts with a privileged access inventory. Book an introductory meeting →
Last updated: October 2026
