JumpCloud announced new features that build security compliance into daily IT work, enforcing policies in real time across users, devices, and AI agents. JumpCloud manages humans, devices, and agents in one platform, keeping organizations audit-ready without adding headcount.
As AI agents join human workers, organizations need to extend security controls beyond human users. Yet JumpCloud’s Q3 2026 IT Trends Report found that only 21% of organizations have implemented governance controls for non-human identities. JumpCloud brings users, devices, and AI agents under one set of policies and provides ongoing proof of compliance.
“An AI agent is only as compliant as the person behind it and the device it runs on,” said Rahul Kamdar, senior vice president of product, JumpCloud. “So we’re building JumpCloud to govern all three together. When someone changes roles or leaves, their agents’ access should update automatically, with a record to prove it. Not everyone doing the work shows up on the org chart anymore, but they all need to show up in your audit.”
JumpCloud helps busy IT teams stay compliant in three simple ways:
- See access gaps: Identify shadow IT, AI agents, and unmanaged devices.
- Keep access secure: Manage identities and devices under one set of policies.
- Simplify audits: Automate access changes and evidence collection to save IT and security teams time.
“JumpCloud’s centralized identity and MDM solution helps us meet our SOC 2 requirements by providing identity management on our devices and enabling us to enforce security policies remotely.” said Matt Lemon, system administrator, Datafy.
Organizations often use separate tools for identity, device management, and compliance. This can leave gaps between systems and require IT teams to collect evidence manually. JumpCloud brings these functions together to reduce complexity and help teams demonstrate that security controls are working.
New capabilities powering continuous compliance across JumpCloud:
- Workflows automation: Automate lifecycle processes, offboarding, and policy remediation across all identities and devices.
- Automated compliance reporting: Generate real-time audit reports and continuous logs mapped to regulatory frameworks across users, devices, and agents.
- Agentic IAM: Get full visibility and lifecycle tracking across agents and non-human identities.
- Risk detection: Flag risky sign-ins, non-human behavior, and unapproved access changes in real time.
- Continuous audit trails: Link every human and non-human action to a verified identity to support SOC 2, ISO 27001, HIPAA, and NIS2 audits.
- Device trust: Block unmanaged or unhealthy devices from accessing company data using supported Conditional Access Policies (CAP).
- Privileged access management (PAM): Deploy isolated identities and time-boxed credentials for admins and agents. (Coming: December 2026)
