- BFSIBanking, Financial Services & Insurance
- IT & ITESIT services, BPM, GCCs & SaaS
- Retail & e-commerceStore chains, D2C brands & marketplaces
- HealthcareComing soon
- ManufacturingComing soon
JumpCloud Patch Management
Patch Tuesday came and went. Nobody can say which laptops took the critical KB — JumpCloud Patch Management schedules OS updates for Windows, macOS and Ubuntu, keeps Chrome and Windows apps current, and drives iPhone and iPad updates through Apple DDM, from the console that already runs your devices and directory — $3 per user a month, or inside the $9 device package.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The JumpCloud platform family
This page covers JumpCloud Patch Management — with Application Patch Management for Windows and the App Catalog folded in. The rest:
Quick facts
30-second orientation- Product
- Scheduled OS, browser and application patching inside JumpCloud’s device and identity platform
- Maker
- JumpCloud Inc., Louisville, Colorado; patching launched in Q1 2022 with macOS and Windows
- Windows
- OS updates plus a KB dashboard (March 2026): approve, deploy and retry KBs, each with CVE and severity
- Apple
- Native OS updates on macOS, iOS and iPadOS through Apple’s Declarative Device Management (DDM)
- Linux
- Ubuntu only; other distributions the agent manages, such as RHEL or Debian, are not patched
- Apps
- Application Patch Management for Windows, plus the App Catalog (Slack, Chrome, Zoom) on Windows and macOS
- Price
- $3 per user a month billed annually, $4 billed monthly; included in all five device-bearing packages
- Not included
- No PSA or ticketing, and no vulnerability scanner; the unified Windows and Apple dashboard is in Preview
- India
- Mumbai tenant region since April 2026 for new accounts; stored data stays in India, telemetry may not
- In India via
- TechBag — package choice, Ubuntu and app coverage checks, and a quote in INR with GST
Understand patch management before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
Patching inside the device platform
JumpCloud patches Windows, macOS, Ubuntu and Chrome, and updates iPhones and iPads through Apple DDM.
Patching by hand vs JumpCloud Patch Management — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Patching by hand | JumpCloud Patch Management |
|---|---|---|
| Windows updates | Whole update classes, no detail | KB by KB, each with CVE and severity |
| Apple updates | Users told to click Update | DDM deadlines on macOS, iOS and iPadOS |
| Failed installs | Found at the next audit | Retried from the KB dashboard |
| Third-party apps | Updated when someone remembers | Windows apps patched; App Catalog on Mac |
| Patch tool | A second vendor and agent | Inside the device package you already run |
| What it is NOT | — | A vulnerability scanner, a PSA, or RHEL patching |
The cheapest test is a 30-day trial on a pilot group with one Windows laptop, one Mac, one Ubuntu machine and one iPad, approving the first KBs by severity.
The four pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Policies
Patch policies are built per OS and per device group in the JumpCloud console, which also holds the users, devices and other policies they apply to.
Agent
The agent on each Windows, macOS and Ubuntu machine applies the schedule, installs OS updates and approved third-party apps, and reports results back to the console.
DDM
Macs, iPhones and iPads take native OS updates through DDM declarations, so the device enforces the update deadline itself rather than waiting on a command.
Dashboards
The Windows KB dashboard lists each KB with its CVE data and severity; a unified Windows and Apple dashboard entered Preview in September 2026.
Policies set in the console, the agent patching Windows, Mac and Ubuntu, Apple DDM updating phones and tablets, and a KB dashboard reading back the result.
Nine capabilities. Approve, deploy, track.
JumpCloud Patch Management keeps Windows, Apple and Ubuntu devices current from one console — the patching layer of the JumpCloud platform.
Windows KBs one by one
The Windows KB dashboard, released in March 2026, lets admins approve and deploy individual KBs rather than whole update classes.
CVE and severity on each KB
Every Windows KB is enriched with its CVE data and a severity rating, so the urgent fixes stand out without a separate lookup.
Patching on a schedule
Scheduled, automated policies decide what installs on which device group and when, so updates land at a time you set.
Windows OS and app patches
Windows OS updates, plus third-party apps through Application Patch Management and the App Catalog: Slack, Chrome, Zoom and more.
macOS, iOS and iPadOS via DDM
Apple’s Declarative Device Management drives native OS updates on Macs, iPhones and iPads, with deadlines the device keeps.
Ubuntu and Chrome too
Ubuntu is the one Linux distribution patched, and Chrome browser versions are controlled beside the OS updates on managed devices.
Chase what failed
Failed Windows KB installs can be retried from the same dashboard, so stragglers are followed up from one screen, not by hand.
Windows and Apple together
A Unified Patch Dashboard for Windows and Apple went into Preview in September 2026; treat it as a preview, not a finished tool.
Many clients, one portal
MSPs run patching across client organisations from JumpCloud’s Multi-Tenant Portal, with each client kept as its own tenant.
Watch JumpCloud patch Macs, browsers and client fleets
Three videos from JumpCloud’s official channel, all from 2023, so the screens predate the 2026 KB dashboard: patching for MSPs, macOS updates at scale, and a live show on Chrome and macOS patching.
MSP Patch Management With JumpCloud
A short 2023 demo of patch policies run for client organisations, recorded before the 2026 Windows KB dashboard.
How to Install macOS Software Updates Remotely & At Scale
A two-minute how-to from 2023 on pushing macOS updates to many Macs at once from the JumpCloud console.
The IT Hour | Chrome Browser and macOS Patch Management 2.24.23
An hour-long 2023 live show on Chrome browser and macOS patching; the interface has changed since it aired.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Patching usually means another tool. JumpCloud runs it in the console you already have.
Here’s what genuinely sets it apart — and exactly where it stops.
Patching where your devices and users already live
Patch Management runs in the same JumpCloud console as device management and the directory, so the machine that needs a fix, the person using it and the policy that applies are one record. It is already inside the $9 Device Management package, so many JumpCloud tenants own it without a second contract.
Windows patching at KB level, with CVEs attached
Since March 2026 the Windows dashboard works KB by KB: approve one, deploy it, retry the machines where it failed. Each KB arrives tagged with CVE data and severity, which turns a monthly update chore into a list of named risks, and third-party Windows apps are patched from the same place.
iPhones and iPads in the same patch view
Most patch tools stop at computers. JumpCloud uses Apple’s Declarative Device Management to drive native OS updates on macOS, iOS and iPadOS, so company iPhones and iPads get update deadlines from the same console as the Windows laptops. Action1 and Heimdal leave mobile to a separate MDM.
Where it stops
Linux patching is Ubuntu only. CVE data is attached to Windows KBs, not Apple or Ubuntu patches, and there is no vulnerability scanner. No PSA or ticketing. The unified dashboard is still Preview, and third-party patching on macOS beyond the App Catalog is not documented. JumpCloud names no analyst placement for it.
The numbers behind the platform
What your JumpCloud Patch Management rollout looks like
Map OSes and apps
List every OS in use, Linux distributions included, and your top 20 third-party apps, then mark which ones JumpCloud covers.
Package and region
Decide between $3 à la carte and the $9 device package, and pick the Mumbai region at sign-up if you are a new tenant.
Pilot by device group
Put a pilot group of Windows, Mac, Ubuntu and iPad devices on a schedule, and approve the first Windows KBs by severity.
Measure the misses
Retry failed KBs, check which apps and Linux servers fell outside coverage, and decide what still needs a second tool.
Roll out and sign
Extend the policies to every group, write the failed-patch hand-off to your service desk, then sign the INR quote with GST.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“The KB dashboard with CVE severity changed our patch review. We approve the critical KBs first and retry the misses the same day.”
“Patching came inside the device package we already paid for, so we retired a separate patch tool at renewal.”
“Company iPads take their OS updates from the same console as our laptops now. That alone closed an audit finding.”
“Our app servers run RHEL and only Ubuntu is patched by JumpCloud, so those servers still sit with a second tool.”
“Windows apps like Chrome and Zoom stay current without packaging work. We would like the same depth for Mac apps.”
“There is no ticketing, so failed patches go to our service desk by email. Fine for a small team, but plan the hand-off.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the Patch management market — tap any vendor to see why it sits where it does.
TechBag Patch Grid
Execution strength vs product vision — the classic market map, minus the paywall.
$3 per user list price; no analyst placement.
Rollout Control × Device Coverage
The grid nobody publishes — how much control you get over how patches roll out (rings, approval, rollback, catalogue) vs how many device types the same tool patches.
Win, Mac, iOS, iPadOS, Ubuntu; Windows app catalog; no rings.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
JumpCloud Patch Management vs the patching field
Against Action1, NinjaOne, ManageEngine Endpoint Central, SuperOps and Heimdal — on Windows, Apple, Linux, third-party apps, rollout control, CVEs, price and India data.
| Dimension | JumpCloud Patch Management | Action1 | NinjaOne Patch Management | ManageEngine Endpoint Central | SuperOps Patch Management | Heimdal Patch & Asset Management |
|---|---|---|---|---|---|---|
| What it is | Patching in a directory | Patch-first cloud tool | Patching in an RMM | Patch inside a full UEM | Patching with a PSA | Patch plus inventory |
| Deployment | SaaS + agent | Cloud-native | Cloud platform | On-prem or cloud | Cloud only | Cloud dashboard |
| Windows and macOS | Win KBs + Apple DDM | Windows-strongest | Windows and macOS | Windows and Mac | One policy, both OSes | Both, CVE-listed |
| Linux patching | Ubuntu only | Debian and Ubuntu | Linux included | Linux patched | Linux in policy | Ubuntu |
| Third-party apps | Windows-led catalog | Wide on Windows | Broadest catalogue | Cross-OS catalogue | Thinner catalogue | 350+ apps |
| Rollout control | Schedules, KB approval | Update rings | Rings and rollback | Scheduled tasks | Maintenance windows | Rings, newly |
| Vulnerability context | CVE on Windows KBs | Find and fix | Ask about CVE view | Ask the Security tier | Not documented | CVE and severity |
| Phones and tablets | iOS via DDM | No mobile | MDM add-on | Mobile in console | Higher tier only | Computers only |
| Wider toolset | Directory, no PSA | No PSA | Full RMM around it | UEM suite | PSA built in | Security modules |
| Pricing model | Per user | Free, then per endpoint | Per device, banded | Per 50 endpoints | Per endpoint, 100 floor | Per device, quoted |
| Published entry price | $3 /user/month | Free to 200 | $1.50–3.75 /device | ≈$1.33 /endpoint | $1.50 /endpoint | Quote only |
| India data region | Mumbai, new sign-ups | Pledged, not confirmed | No India region | Indian cloud or on-prem | US or EU only | EU, US or UK |
| Lock-in and exit | Platform pull | Light to leave | Whole-RMM decision | Your server | PSA and RMM bundled | Agent shared |
| Best fit | JumpCloud device estates | Patch-first, free start | RMM-led IT and MSPs | On-prem, India-hosted IT | MSPs past 100 endpoints | Security-suite estates |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose JumpCloud Patch Management if…
- ✓You already run JumpCloud for devices or identity and want patching in the same console
- ✓Windows KB-level approval with CVE severity, plus iPhone and iPad updates, matters to you
- ✓Your Linux machines are Ubuntu, or you patch other distributions elsewhere
Compare alternatives if…
- ✓You want patching free up to 200 endpoints — Action1
- ✓You need rings, rollback and the broadest app catalogue — NinjaOne
- ✓Patch data must sit on your own server or in India — ManageEngine Endpoint Central
Do not expect…
- ✓RHEL, Rocky or Debian patching — Linux means Ubuntu here
- ✓A vulnerability scanner or a PSA
- ✓A finished unified Windows and Apple dashboard — it is in Preview
JumpCloud Patch Management is one of 25 rmm & patch products TechBag carries. The RMM & Patch guide narrows them to a shortlist and shows the reasoning. →
What does patching by hand cost you?
Drag the sliders (devices you patch; IT-hour cost). Estimates model the IT time spent checking which updates are missing, pushing them by hand, chasing failed installs and assembling patch evidence for audits, at an assumed 0.4 hours per device a month, with 60% of it removed by scheduled policies and a KB dashboard. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Published list prices, in USD per user per month (read 12 October 2026): Patch Management à la carte is $3 billed annually or $4 billed monthly. It is also included in every package that carries device management — Device Management ($9 annually / $11 monthly, with MDM, System Insights, Software Management and Remote Access), Device Identity Management ($13 / $15), and the quoted Platform Essentials, Platform and Platform Prime tiers. JumpCloud bills per user rather than per endpoint, so agree how servers and shared machines are counted. New accounts get a 30-day trial, not a free tier. TechBag quotes in INR with GST.
JumpCloud Patch Management
Best as an add-on to an existing JumpCloud tenant
- $3 per user a month, annual ($4 monthly)
- Windows, macOS, Ubuntu, iOS and iPadOS
- Windows KBs with CVE and severity
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
Device Management package
Best when you also need MDM
- $9 per user a month, annual ($11 monthly)
- Patching plus MDM, App Catalog and Remote Access
- No PSA or vulnerability scanner in either
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Which Linux distributions do you run? JumpCloud patches Ubuntu only; RHEL, Rocky or Debian need another tool.
Are your top 20 apps covered? Windows app patching is documented; Mac coverage beyond the App Catalog is not.
Is $3 à la carte enough, or does the $9 Device Management package, with MDM and Remote Access, cost less overall?
Pricing is per user. How will servers and shared machines with no named user be counted on your invoice?
Do you need ring-based rollouts? JumpCloud documents schedules and KB approval; confirm how a pilot ring is built.
There is no PSA. How will failed patches reach your service desk, and who owns the follow-up on each one?
Is this a new tenant? The Mumbai region is picked at sign-up; telemetry and logs may still be processed abroad.
What patch report will your auditor or CERT-In review accept, and can JumpCloud export it in that shape today?
Questions buyers ask
Ready to evaluate JumpCloud Patch Management?
List your operating systems, Linux distributions and top 20 apps, or let a TechBag advisor check them against JumpCloud’s documented coverage, choose à la carte or the device package, and quote in INR.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.