Jamf Protect

My main use case for Jamf Protect  is to protect our fleet.

I mainly use Jamf Protect  to protect against malware, viruses, and hacks to the devices, and it also applies compliance to the device. If a user is using any breach password, we will be alerted and take action immediately.

Our main concern is to protect the applications users are using as well with Jamf Protect. Because we are giving them power privileges to install apps, this is quite a concern for us if they install inappropriate apps or apps that are not safe enough for them. I will immediately get alerts from Jamf Protect if any applications are not safe to have on the devices.

In my opinion, the best features Jamf Protect offers are security and compliance.

What stands out about the security and compliance features for me in Jamf Protect is the immediate alerting of the system while users have their freedom of using the devices.

Using AI tools recently, Jamf Protect has positively impacted our organization because many AI tools have some security holes, so it is helping us to be safe while users are exploring AI tools.

We did have an instance recently where ChatGPT blocked some versions because of security concerns, so once this happened from the vendor, Jamf Protect took the actions and blocked these app versions and enforced the users to update to the newer version.

The dashboard of Jamf Protect is quite challenging to understand, so it would be great if it were more user-friendly.

When it comes to Jamf Protect's AI capabilities, its accuracy and reliability of output are more accurate and reliable to use. However, they need to add more layers to the other applications available since it is working only on the app level. I would love to see it working on the web level as well.

I have been using Jamf Protect for four years now.

Jamf Protect is stable.

Jamf Protect is scalable as well.

The customer support for Jamf Protect is pretty good. As I mentioned before, we are relying on the reseller, and they are great, but my only concern with the direct support is that it is only by email or support tickets, and it might take some time to be resolved. In emergencies, it is hard to wait for this time.

I previously used to have some level of limited platforms such as McAfee antivirus before Jamf Protect, but it was mainly for viruses, not compliance and security, so this is a huge change when using Jamf Protect to protect our device fleet.

The pricing, setup cost, and licensing for Jamf Protect are included in one bundle for Jamf Pro , Jamf Protect, and Jamf Safe Internet, so it is mainly a bundle price.

Before choosing Jamf Protect, we evaluated other options within the market, and Jamf Pro  was the best for managing Apple devices.

I think it would be great if we get the alert to the user as well. I think it is added recently to the self-service so that users can get notification that there was malware active on their device and Jamf Protect took the necessary actions to block this malware.

From the client side, if they got alerted as well about the specific cause of the malware or viruses with Jamf Protect, that would be great so users are educated about how to use the tools and make sure that they are safe while they are using their devices.

If your fleet consists completely of Apple devices, Jamf Protect is the best solution for you.

Applying this security, privacy, and compliance on the devices with Jamf Protect is very crucial for us because we do not want any security holes, which is very important for our organization.

We are using Jamf Cloud services for Jamf Protect, but I am not sure which one they are relying on.

I would rate this product an 8 out of 10.

My primary use case for Jamf Protect  is endpoint detection and response and threat monitoring for macOS devices. I use it to gain visibility into endpoint activity, detect malicious behavior, monitor security events, and investigate potential threats. It also helps me to enforce security policy, identify risky applications or processes, and support incident response activity. Additionally, I use Jamf Protect  alongside my broader security stack to improve overall security posture and maintain compliance requirements across my macOS fleet.

A recent example of how I use Jamf Protect in my day-to-day work was during the investigation of a suspicious process execution on several managed MacBooks. Jamf Protect generated an alert for an unsigned application attempting to execute and establish outbound network connections. Using the telemetry and process visibility provided by Jamf Protect, I quickly identified the affected devices, reviewed the process tree, and determined the activity originated from unauthorized software installed by the user. I used the alert data to validate the threat, isolate the impacted endpoints through my security workflow, remove the application, and update my security policy to prevent similar installation in the future. Jamf Protect played a key role by providing real-time visibility into endpoint activity and reducing the time required to investigate and respond to the incident. On a day-to-day basis, I also use Jamf Protect to monitor security alerts, review endpoint behavior, validate compliance with security policy, and investigate any anomalous activity detected on macOS devices.

In addition to threat detection and incident investigation, I use Jamf Protect for security posture monitoring and compliance support across the macOS environment. It helps me identify potential risky behavior, monitor application activity, detect outdated software, and ensure endpoints comply with internal security standards.

The best features that Jamf Protect offers are basically real-time visibility. It gives insights into suspicious activity, attacker techniques, and helps to detect emerging threats and unusual behavior. It has behavior-based threat detection that is really helpful. Another valuable offering from Jamf Protect is integration with SIEM  tools and SOAR  workflows.

The behavior-based detection is particularly valuable because it focuses on suspicious activities rather than relying solely on malware signatures. In my environment, this helps me identify emerging threats, unauthorized tools, and potentially malicious behavior that traditional signature-based solutions might miss. For example, Jamf Protect can alert on unusual process execution, privilege escalation attempts, persistent mechanisms, or suspicious network connections. This gives my security team early visibility into potential threats and reduces the risk of undetected compromise.

Regarding SIEM  and SOAR  integration, I forward Jamf Protect telemetry and alerts into my centralized SIEM platform, which is QRadar, where they correlate the logs from EDR, identity, cloud, and network security tools. This provides a complete view of security events across the organization and helps analysts investigate incidents more efficiently. On the SOAR side, I have automated workflows to enrich alerts, assign incidents to appropriate teams, and trigger predefined responding actions.

Jamf Protect has had a very positive impact on my organization. It has improved my visibility into endpoint activity across my macOS fleet, strengthened my security detection capabilities, and reduced the time required to investigate and respond to security incidents. The centralized monitoring and integration with my security operation tools have increased operational efficiency as well. Overall, it has enhanced my security posture while allowing me to manage and secure macOS devices more effectively at scale.

Overall, Jamf Protect is a strong product, but there are a few areas where it could be improved. First, I would like to see more advanced reporting and dashboard customization options. While existing reporting is useful, having greater flexibility to build executive-level and operational dashboards would make it easier to track trends and communicate security metrics. Second, the alerting experience could be enhanced by providing more contextual information and investigative guidance directly within the alerts. Third, although the integrations are solid, out-of-the-box integration with security and IT operational platforms could be simplified to reduce the customization efforts on my end.

I have been using Jamf Protect for four to five years.

In my experience, Jamf Protect has been very stable. Over the four to five years I have been using it, I have had few issues related to platform availability, agent reliability, or data collection. The endpoint agent has generally performed well without causing noticeable impact on system performance, which is important from both a security and end-user perspective.

Since I am using a SaaS-based model, Jamf Protect's scalability has been very good in my experience. The platform is designed to support organizations ranging from small businesses to large enterprises, and I have found it capable of handling a growing number of macOS endpoints without significant operational challenges.

In my experience, Jamf Protect's customer support has been very positive overall. The support team is knowledgeable, responsive, and generally able to resolve issues in a timely manner. When I have opened support cases, I have typically received clear guidance and useful troubleshooting steps. I also appreciate that support engineers have strong knowledge of both macOS and the Jamf ecosystem, which helps me deal with more complex deployment and security-related questions.

Before Jamf Protect, I relied primarily on a combination of traditional endpoint security tools and native macOS security controls. While those solutions provided baseline protection, they did not offer the same level of macOS-specific visibility, behavior analytics, and threat detection capabilities. I evaluated Jamf Protect because my Mac footprint is growing, and I needed a solution that was purpose-built for Apple devices and integrated well with my existing management and security ecosystem. The main reasons I switched were improved visibility into endpoint activity, stronger macOS-focused threat detection, better integration with my security operations workflow, and the ability to gain deeper telemetry for investigation and threat hunting.

I have seen a positive return on investment from Jamf Protect, although the biggest benefits have been risk reduction and operational efficiency rather than direct headcount reduction. From a time-saving perspective, I have reduced the time required to investigate macOS security alerts by roughly 30 to 40%. Analysts can quickly access the endpoint telemetry and contextual information without manually gathering data from multiple sources.

I evaluated several endpoint security options before choosing Jamf Protect. The products I looked at included CrowdStrike Falcon , Microsoft Defender for Endpoint , SentinelOne, and VMware Carbon Black.

Based on my experience, the accuracy and reliability of Jamf Protect detection are very good. The platform produces actionable alerts with sufficient context, and I have found that the majority of high-severity detections are relevant and worthy of investigation.

Jamf Protect's AI-related governance and security capabilities are solid, particularly how the platform approaches threat detection and behavior analytics. I appreciate that the platform provides transparency into the events and indicators that trigger alerts, which helps my security team validate findings and maintain confidence in the detection process. From a governance perspective, the centralized visibility, auditability, and reporting capabilities support security oversight and compliance requirements. The platform allows organizations to monitor endpoint activity consistently and maintain accountability for security events.

My advice would be to clearly define your security objectives and understand how Jamf Protect fits into your broader security strategy before deployment. The platform provides a lot of valuable telemetry and detection capabilities, so it is important to spend time tuning policies, alerts, and integration to align with your organization's risk profile. I would also recommend integrating Jamf Protect with your SIEM and incident response workflows from the beginning. Doing so allows you maximum visibility, correlates endpoint data with other security sources, and gets more value from the platform. I would rate this product an 8 out of 10.

I installed Jamf Protect  on my Mac devices and set it up to protect them from malware and other issues. I use Jamf Protect  in Jamf Pro  as part of our antivirus solution. Jamf Protect is deployed in my organization on public cloud. We were using MS Defender before Jamf Protect. I decided to switch from MS Defender to Jamf Protect because of the Jamf Pro  integration and Jamf Protect being specifically for macOS. As it is already integrated with Jamf Pro, Jamf Protect is always good for me, so I do not have any kind of recommendations for improvement.

Jamf Protect offers next-generation antivirus and Apple specific defense features. The next-generation antivirus and specific defense features of Jamf Protect get updated in real time with new issues, and then they block or look for any malicious software on the device, Trojans, or other crypto miners and protect my devices from those. We use Jamf Protect as an antivirus, so people feel secure, and we feel secure as an administrator that things are working fine on the end users and they are protected from ransomware and other kinds of malicious software.

I do not have much information about Jamf Protect's AI capabilities regarding its governance and security. I have no information about Jamf Protect's AI capabilities, including its accuracy and reliability of output.

I have been using Jamf Protect for the last three to five years.

Jamf Protect is working fine with no downtime so far. Everything is working as intended and no issues have been found. Jamf Protect is stable.

I have no information about Jamf Protect's scalability, but I am satisfied with it.

The customer support for Jamf Protect is good. I rate the customer support for Jamf Protect a 10 because it is really good and very efficient.

We were using MS Defender before Jamf Protect.

With Jamf Protect it is easy to manage, so fewer employees are needed, with just one administrator managing the whole product, and it is easy to deploy and manage.

We are an MSP, so we got Jamf Protect from a vendor.

My experience with pricing, setup cost, and licensing for Jamf Protect was fine, but I am not aware of the pricing since we have a resource who manages that, while customers are happy with it.

I decided to switch from MS Defender to Jamf Protect because of the Jamf Pro integration and Jamf Protect being specifically for macOS.

My advice to others looking into using Jamf Protect is that it is an easy application to deploy and easy to manage. We are all satisfied with Jamf Protect. I would rate this review a 10.

My main use case for Jamf Protect  is endpoint security and threat detection for Apple devices: iPad, iPhone, and Macs. We use it to monitor, detect, and respond to Mac threats.

Jamf Protect  offers protection for Mac devices among its best features.

I find especially valuable aspects in threat protection, deep scans, and deep native macOS integration with Apple's own security firmware.

Jamf Protect has positively impacted my organization by reducing malware, spam, and these kinds of threats from our company. It saves time for our IT team when we deploy this, as it reduces the noise and we do not have to worry about those threats.

Jamf Protect can be improved because iOS and iPad protection is still limited compared to macOS coverage. Reporting  dashboards need more customization, and third-party SIEM  integration can be complex to configure. There is no Windows or Android support, so expanding to Windows on that side would be beneficial.

Regarding needed improvements, support should be enhanced, as well as integration with iPad and iOS. Additionally, if Jamf Protect could support Android, that would be beneficial.

I have been using Jamf Protect for five to six years.

Jamf Protect is stable.

The scalability of Jamf Protect is good.

Customer support from Jamf Protect is good.

We did not use a previous solution; we still use different solutions such as CrowdStrike, Defender, and SentinelOne.

Jamf Protect is deployed in my organization as a SaaS-based portal.

I would describe the ease of integration of Jamf Protect with our existing IT infrastructure as very easy, since Jamf Protect integration with Jamf is very natively supported.

I have not seen a return on investment because I do not have metrics.

My experience with pricing, setup cost, and licensing is positive. Per-device annual licensing is acceptable, depending on your volume. The setup cost is low, depending on whether you deploy it via Jamf distributor or automatically.

We did evaluate other options before choosing Jamf Protect. Those were CrowdStrike Falcon  for Mac, SentinelOne, Defender, and Kandji . We chose Jamf Protect because it was a native Apple ecosystem fit.

The features I would add to Jamf Protect include scanning, endpoint security, real-time behavioral threat detection, and seamless sync with Jamf Pro  for device management.

Regarding the accuracy and reliability of output from Jamf Protect's AI capabilities, I find it good.

The user interface and user experience of Jamf Protect are great. It is simple and has everything you need. Sometimes you have to navigate through multiple menus, but it is acceptable as long as you find the right information.

Jamf Protect handles updates and maintenance seamlessly.

Jamf Protect helps us meet compliance requirements because you can set up policies and procedures in Jamf portal. You can apply configuration profiles, and using Jamf Protect, you can protect yourself effectively.

Jamf Protect supports remote work and distributed teams because it is mainly used for security, such as malware detection and policy violation monitoring across the Apple fleet, which secures the remote workforce.

Jamf Protect has impacted our incident response times positively, making it faster. The response and detection is faster when you have something which is natively supported compared to other antivirus solutions.

Regarding cost and value, we have used other solutions, but we normally use Jamf Protect with Jamf Pro  product, so it is bundled. The price is different, and as it is a native product of Jamf, it has better integration, better response, and better threat analysis. This is why we always prefer that combination.

My advice to others looking into using Jamf Protect is that it is best suited for organizations already using Jamf Pro. If you are using Jamf Pro, the combined Pro plus Protect stack is extremely powerful. However, if you have a mixed environment with both Windows and Mac devices, you should consider pairing Jamf Protect with CrowdStrike or another Windows coverage solution alongside Jamf for Apple devices, so you can match your needs appropriately.

I would rate this product eight out of ten.