JumpCloud Expands Directory Platform with Patch Management

Feb 3, 2022 | News

JumpCloud Patch Management Makes it Easier for IT Admins to Minimize Vulnerabilities by Having Increased Visibility and Control Over Their Remote Device Fleet

LOUISVILLE, Colo. – Feb. 3, 2022 – JumpCloud today announced the addition of Patch Management to its cloud directory platform, coming in Q1 2022. The new offering extends the JumpCloud Directory Platform to help small to midsize enterprise (SME) IT admins have greater insight into system vulnerabilities, allows them to deploy automated patch updates, and strengthens their overall device security posture. JumpCloud Patch Management gives IT admins the power to create schedules, report on operating system patches and versions, see patch versions across their remote fleet, managing both Mac and Windows updates and patches from the JumpCloud console — easily, quickly, and with the latest security.

“We all know that users don’t update their devices with bug fixes or security patches with any regularity or discipline,” said Greg Armanini, senior director of product management, JumpCloud. “This creates huge security gaps for every organization, especially those that are distributed, which is almost every organization today. JumpCloud Patch Management solves this problem quickly and easily, and delivers robust updates that improve security, enhance organization protection, and provide tremendous peace of mind as a result. Offering this functionality as part of the directory platform further centralizes user identity and device management, saving SME IT admins time and money, while eliminating the stress and potential vulnerabilities of having to work with multiple vendors.”

Patch Management is a critical pillar of cyber defense, yet many organizations still struggle with patching in a remote or hybrid work environment. This is due to the lack of visibility into user devices, the frequency of new patches introduced by software vendors, and the need to leverage multiple solutions and complicated workflows to manage patching across multiple operating systems (OS). NTT Application Security researchers recently found the average time to fix critical vulnerabilities is 205 days, and 60% of breached organizations reported breaches were due to a vulnerability for which a patch was already available, but not deployed throughout the organization’s systems and devices.

JumpCloud gives admins a single cloud directory platform to secure users in heterogeneous device environments, wherever work happens. The first release of JumpCloud Patch Management focuses on OS level patching for Mac and Windows, with Linux, browser, and application patching coming soon. This release includes:

– Patch Visibility Dashboard with fleet OS distribution and current OS release trains

– Centralized view of policy configuration and recommended settings

– Automatic macOS Updates policy to set and enforce automatic updates with end-user notifications

– Advanced Windows Updates policy with new controls for automatically installing and enforcing Windows updates with end-user notifications

“JumpCloud has been essential in consolidating our cloud directory, single-sign on (SSO), multi-factor authentication (MFA), mobile device management (MDM), and more,” said Ricky Jordan, senior computer systems admin at Primitive Skate. “Patch Management removes a huge IT burden and lets us fortify our cyber defenses with greater control over, and insight into, system vulnerabilities. Having to juggle mixed OS environments and make time to manage the continual rollout of patches was a headache for our team. I can’t imagine trying to manage a modern workplace without JumpCloud.”

Patch Management will be available a la carte to all JumpCloud users in Q1, and will be located in the Policy Management section in the JumpCloud console.

Additional resources for IT admins:

  • IT Necessities for a Distributed World: An O’Reilly Report, a free resource to help IT admins build a lasting hybrid-remote workplace.
  • IT Admin’s Toolkit for 2022, kick-start 2022 planning and ensure your IT strategy is secure and ready for the long haul.
  • JumpCloud Lounge, a Slack channel where IT admins gather, ask questions, and share experiences and expertise.
  • JumpCloud blog, which includes technical articles, how-tos, and tips for IT admins.
  • JumpCloud University, which offers free courses from beginner to pro and official JumpCloud certification.
  • The IT Houris a community program focused on the life of the IT admin, and is open to anyone, every Friday morning.
  • Sign up for a full-featured JumpCloud account — free for up to 10 users.

Additional Customer Quote

“In today’s landscape of ever evolving security threats, where the battle between good and evil wages on across the digital battlefields of tomorrow, admins now more than ever need to play defense across the spectrum,” said Reilly Scull, chief technology officer at Macktez. “At our clients, JumpCloud has helped us fight back by making it easy to enforce Encryption, ZeroTrust, and Conditional Access Policies to help safeguard assets and infrastructure. But, even the best policies can be foiled if the foundation they’re built on has a critical vulnerability, which is why it’s so important to have a fast and effective patching solution. With JumpCloud’s new Patch Management features, we’ll now be able to keep our clients safer, at a faster pace, and with less cost and management overhead than ever before. These new features will allow us to reclaim critical time and resources, allowing us to focus on helping our clients drive their businesses forward, without being bogged down in the trenches of mundane patch management. We’re super excited for these new features, and expect other JumpCloud customers will be too!”

About JumpCloud

The JumpCloud Directory Platform helps IT teams Make (Remote) Work Happen® by centralizing management of user identities and devices, enabling small and medium-sized enterprises to adopt Zero Trust security models. JumpCloud® has a global user base of more than 150,000 organizations, with more than 5,000 paying customers including Cars.com, GoFundMe, Grab, ClassPass, Uplight, Beyond Finance, and Foursquare. JumpCloud has raised over $400M from world-class investors including Sapphire Ventures, General Atlantic, Sands Capital, Atlassian, and CrowdStrike.

 

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more
Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

September 18, 2026 | ITBriefcase.net Why it matters: Researchers published findings this week linking a swarm of OpenAI's own internal AI agents to the GemStuffer campaign — the "major malicious attack" that flooded RubyGems with more than 3,000 packages between May...

read more
Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

September 11, 2026 | ITBriefcase.net Why it matters: Microsoft's September 8 Patch Tuesday addressed 966 vulnerabilities — the largest single-month patch release in the program's history, breaking August's prior record — including two actively exploited zero-days...

read more