From c836124d8c9cc24f113a290d2902e7144e9bd6e4 Mon Sep 17 00:00:00 2001 From: Dan Gordon Date: Mon, 13 Apr 2026 12:22:22 -0700 Subject: [PATCH] Update table and table data on jamf vs fleet page (#43438) Update data in table. Add color to cells. --- articles/compare-fleet-and-jamf.md | 559 ++++++++++++++++++++++++----- 1 file changed, 479 insertions(+), 80 deletions(-) diff --git a/articles/compare-fleet-and-jamf.md b/articles/compare-fleet-and-jamf.md index 9ff3c42be1..f35cedae3c 100644 --- a/articles/compare-fleet-and-jamf.md +++ b/articles/compare-fleet-and-jamf.md @@ -13,95 +13,494 @@ Jamf has evolved over two decades as a management solution focused on Apple devi Fleet and Jamf serve different strategic purposes based on fleet composition and workflow needs. + ### Platform support - -| | Fleet | Jamf Pro | -| --- | --- | --- | -| macOS management | Yes — Full MDM lifecycle | Yes — 20+ year track record | -| iOS / iPadOS management | Yes | Yes | -| Windows management | Yes | No | -| Linux management | Yes | No | -| Android management | Yes | Yes — Partner developed solution| -| Chromebook management | Yes | No | -| tvOS / visionOS management | No | Yes | - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
macOS managementYes — Full MDM lifecycleYes — 20+ year track record
iOS / iPadOS managementYesYes
Windows managementYesNo
Linux managementYes — Native osquery agentNo
Android managementYesYes — Partner developed solution
Chromebook managementYesNo
tvOS / visionOS managementNoYes
Device scoping & targetingYes — Dynamic labels, Manual labels, and Host vitals labelsYes — Smart Groups + Static Groups
+ ### Enrollment and provisioning - -| | Fleet | Jamf Pro | -| --- | --- | --- | -| Zero-touch deployment (ABM/ASM) | Yes — ABM/ASM + Autopilot | Yes — ABM/ASM; deep Apple integration | -| BYOD enrollment | Yes — Incl. Android work profiles | Yes — User-initiated enrollment | -| MDM migration from another vendor | Yes — Built-in migration workflow | Partial — Possible but no built-in migration tool | -| Identity provider integration at enrollment | Yes — Okta, Entra, Azure AD, etc. | Yes — Platform SSO; Simplified Setup | - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
Zero-touch deployment (ABM/ASM)Yes — ABM/ASM + AutopilotYes — ABM/ASM; deep Apple integration
End-user IdP auth at Setup AssistantYes — SAML SSO during OOBE; local account pre-filled from IdPPartial — Platform SSO available but less integrated
Bootstrap apps & scripts during Setup AssistantYes — Configure required apps and scripts before device releasePartial — PreStage enrollment triggers policies, less granular gating
BYOD enrollmentYes — Incl. Android work profilesYes — User-initiated enrollment
MDM migration from another vendorYes — Built-in migration workflowPartial — Possible but no built-in migration tool
Identity provider integration at enrollmentYes — Okta, Entra, Azure AD, etc.Yes — Platform SSO; Simplified Setup
+ +### Identity and access + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
SAML SSO for admin consoleYes — SP- and IdP-initiated flowsYes — SSO for Jamf Pro console
SCIM user provisioning & attribute syncYes — Provision/deprovision via SCIM with attribute syncPartial — Limited SCIM; primarily manual user management
IdP user-to-host mappingYes — Sync IdP user attributes to hosts via SCIMPartial — Manual or LDAP-based; no automatic mapping
Role-based access control (RBAC)YesYes
SCEP certificate deployment (e.g., Okta Verify + FastPass)Yes — Deploy SCEP cert profiles for device trustYes — SCEP via AD CS or third-party CA
Conditional access integration (IdP policy-based block)Yes — Policy failures trigger IdP conditional access blocksPartial — Requires Jamf Connect or third-party integration
+ ### Configuration management - -| | Fleet | Jamf Pro | -| --- | --- | --- | -| Configuration profile delivery with full confirmation | Yes — Upload custom profiles | No | -| Declarative Device Management (DDM) | Yes | Partial — Blueprints framework (Jamf Cloud) | -| Enforce disk encryption (FileVault/BitLocker) | Yes — Mac + Windows | Yes — Mac only (FileVault) | -| Enforce OS updates | Yes — Mac, iOS, Windows | Yes — Mac, iOS; managed software updates | -| Device scoping and targeting | Yes — Dynamic labels, Manual labels, and Host vitals labels | Yes — Smart Groups + Static Groups | - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
Configuration profile delivery with full confirmationYes — Upload custom profilesNo
Declarative Device Management (DDM)YesPartial — Blueprints framework (Jamf Cloud)
Enforce disk encryption (FileVault/BitLocker)Yes — Mac + WindowsYes — Mac only (FileVault)
Disk encryption key escrow and recoveryYes — Keys escrowed in Fleet, retrievable via host detailsYes — FileVault key escrow in Jamf Pro, retrievable by admin
Enforce OS updatesYes — Mac, iOS, WindowsYes — Mac, iOS; managed software updates
OS update ring groups (canary/staged rollout)Yes — Fleets for Ring 0 and Ring 1 with DDM enforcementPartial — Smart Groups approximate rings, no built-in concept
Device scoping & targetingYes — Labels (dynamic via osquery) + fleetsYes — Smart Groups + Static Groups
Local admin account creation and password escrowYes — Script-based, credentials retrievablePartial — Requires Jamf Connect, not built into Pro
+ ### Software management - -| | Fleet | Jamf Pro | -| --- | --- | --- | -| App deployment | Yes — Fleet-maintained apps + custom packages | Yes — App Catalog + custom packages | -| Self-service app installation | Yes | Yes — Self Service+ (recently enhanced) | -| Volume Purchase Program (VPP / Apps & Books) | Yes | Yes | -| Patch management | Yes — Vulnerability-driven; any device, any platform | Yes — App Installers; macOS & iOS focused | -| Script execution | Yes — Mac, Windows, Linux | Yes — Mac scripts; Bash, Python, etc. | - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
App deploymentYes — Fleet-maintained apps + custom packagesYes — App Catalog + custom packages
Self-service app installationYesYes — Self Service+ (recently enhanced)
Volume Purchase Program (VPP / Apps & Books)YesYes
Patch managementYes — Vulnerability-driven; cross-platformYes — App Installers; macOS & iOS focused
Pre/post-install scripts for app deploymentYesYes
App install/uninstall/reinstall from admin UIYes — Per-host from host detailsYes — Via device management actions
Script executionYes — Cross-platform (Mac, Win, Linux)Yes — Mac scripts; Bash, Python, etc.
+ ### Security and compliance - -| | Fleet | Jamf Pro | -| --- | --- | --- | -| Vulnerability detection (CVEs) | Yes — Built-in; CISA KEV; any device, any platform | Partial — Basic in Pro; deep scanning requires Jamf Protect ($) | -| Compliance benchmarks (CIS / STIG) | Yes — CIS queries publicly available | Yes — Compliance Benchmarks (mSCP) in Pro | -| Endpoint detection / threat monitoring | Yes (built-in) | Partial — Requires Jamf Protect (separate purchase) | -| File integrity monitoring (FIM) | Yes - evented tables (built-in) | Partial — Requires Jamf Protect | -| SIEM integration | Yes — Custom log destinations; included | Yes — Pro event logs; richer with Protect ($) | -| Lock / wipe commands | Yes | Yes | - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
Vulnerability detection (CVEs)Yes — Built-in; CISA KEV; cross-platformPartial — Basic in Pro; deep scanning requires Jamf Protect ($)
Compliance benchmarks (CIS / STIG)Yes — CIS queries publicly availableYes — Compliance Benchmarks (mSCP) in Pro
Compliance policy dashboard (per-host pass/fail)Yes — Per-host pass/fail on Policies pagePartial — Smart Groups imply compliance, no unified dashboard
Endpoint detection / threat monitoringYes (built-in)Partial — Requires Jamf Protect (separate purchase)
File integrity monitoring (FIM)Yes - evented tables (built-in)Partial — Requires Jamf Protect
SIEM integrationYes — Custom log destinations; includedYes — Pro event logs; richer with Protect ($)
Lock / wipe commandsYesYes
+ ### Visibility and reporting - -| | Fleet | Jamf Pro | -| --- | --- | --- | -| Real-time device queries | Yes - Live queries | Partial — Inventory on check-in schedule | -| Hardware and software inventory | Yes — Extensive | Yes — Comprehensive Apple inventory | -| Custom data collection | Yes — Custom SQL queries across 300+ tables (built-in) | Partial — Extension attributes (scripts) | - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
Real-time device queriesYes - Live queriesPartial — Inventory on check-in schedule
Hardware & software inventoryYes — ExtensiveYes — Comprehensive Apple inventory
Application inventory and patch status viewYes — Per-host and fleet-wide; flags hosts below target versionYes — App inventory; patch status via App Installers
Custom data collectionYes — Custom SQL queries across 300+ tables (built-in)Partial — Extension attributes (scripts)
Offline device alerting (webhooks)Yes — Configurable offline threshold, alerts fire automaticallyPartial — Webhook notifications available, less granular thresholds
+ +### Remediation and automation + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
Policy-triggered auto-remediationYes — Attach remediation script to policy, auto-executes on failurePartial — Smart Groups trigger policies, no direct policy→script link
On-demand script execution from admin UIYes — Per-host from host details, real-time outputYes — Remote commands available for macOS
+ +### Offboarding and lifecycle + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
User deprovisioning via IdP (SCIM)Yes — SCIM removes host-user mapping and revokes accessPartial — Manual user deletion, limited IdP-driven deprovisioning
Device re-assignment between users/teamsYes — Transfer device to new fleet, profiles auto-appliedYes — Move between sites/groups, profiles re-applied
End-user transparencyYes — Scope transparency; open sourcePartial — Limited native transparency features
+ ### Architecture and operations - -| | Fleet | Jamf Pro | -| --- | --- | --- | -| GitOps / infrastructure as code | Yes — First-class; YAML/Git-based | Partial — IBM Terraform-based, not all functionality available | -| API-first architecture | Yes — Unified REST API; all features | Partial — Multiple APIs; GUI-first design | -| Self-hosted deployment | Yes — On-prem, cloud, air-gapped | Partial — Functionality not as complete as cloud | -| Managed cloud hosting (SaaS) | Yes | Yes — Jamf Cloud | -| Open-source / source-available code | Yes — 100% on GitHub | No — Proprietary | -| Role-based access control (RBAC) | Yes | Yes | -| Audit logging | Yes | Yes | - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
GitOps / infrastructure as codeYes — First-class; YAML/Git-basedPartial — IBM Terraform-based, not all functionality available
API-first architectureYes — Unified REST API; all featuresPartial — Multiple APIs; GUI-first design
Self-hosted deploymentYes — On-prem, cloud, air-gappedPartial — functionality not as complete as cloud
Managed cloud hosting (SaaS)YesYes — Jamf Cloud
Open-source / source-available codeYes — 100% on GitHubNo — Proprietary
Audit loggingYesYes
+ ### Pricing and licensing - -| | Fleet | Jamf Pro | -| --- | --- | --- | -| Free tier available | Yes — Core features; unlimited hosts | No — 14-day free trial only | -| Pricing model | $7/host/month (Premium); all features included | ~$3.67–$7.89/device/month; varies by device type | -| All-inclusive security (vuln, EDR, FIM) | Yes — Single license covers everything | No — Protect, Connect, ETP sold separately | - + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
Free tier availableYes — Core features; unlimited hostsNo — 14-day free trial only
Pricing model$7/host/month (Premium); all features included~$3.67–$7.89/device/month; varies by device type
All-inclusive security (vuln, EDR, FIM)Yes — Single license covers everythingNo — Protect, Connect, ETP sold separately
+ ### Support and ecosystem - -| | Fleet | Jamf Pro | -| --- | --- | --- | -| Vendor support channels | Email, phone, video (Premium); community Slack | Chat, email, phone; premium services available | -| Community and ecosystem maturity | Growing — Active open-source communities & ecosystems | Mature — Large user base; Jamf Nation; 20+ years | -| Apple relationship and day-zero OS support | Yes — Apple-oriented; tracks releases | Yes — Close Apple partnership; historically day-zero | -| End-user transparency | Yes — Scope transparency; open source | Partial — Limited native transparency features | - + + + + + + + + + + + + + + + + + + + + + + + + + + +
FleetJamf Pro
Vendor support channelsEmail, phone, video (Premium); community SlackChat, email, phone; premium services available
Community & ecosystem maturityGrowing — Active open-source communities & ecosystemsMature — Large user base; Jamf Nation; 20+ years
Apple relationship & day-zero OS supportYes — Apple-oriented; tracks releasesYes — Close Apple partnership; historically day-zero
## Device management workflow comparisons