Jamf launches a native AI control plane for Mac. Device management solutions company, Jamf has announced the general availability of AI Governance, a new capability within Jamf for Mac that enables IT and security teams to discover actively used AI tools, enforce policy controls, and generate audit-ready reports. "AI adoption across the enterprise is moving faster than existing technology policies can keep up," said Beth Tschida, CEO at Jamf. "Organisations need governance that matches the way AI tools actually operate on Mac. This means visibility into what's running, policy controls enforced directly on the endpoint, and reporting that helps security teams demonstrate compliance. Our AI Governance capability delivers that natively from the same platform customers already trust to manage and secure Apple devices." AI Governance. Jamf said AI Governance helps organisations manage and secure the use of artificial intelligence applications on enterprise devices by providing visibility into AI tools running on endpoints, including Shadow AI. This enables security teams to monitor usage, assess risks, and support compliance. With launch support for Claude Code, Claude Desktop, and OpenAI Codex, AI Governance offers policy controls covering model access, network permissions, file system controls, MCP server restrictions, and other vendor-specific AI configurations. Jamf said the capability establishes tamper-resistant security policies before users access AI tools. It also enables IT administrators to monitor, control, and govern AI deployments through its existing macOS endpoint management platform. Sam Lalli, Security Engineering & SOC manager at Eventbrite, said: "What impressed us about Jamf's AI Governance was how quickly we could apply policy across our Mac fleet without adding another point solution or creating friction for developers. Having this critical capability built into the same device management platform we already use really simplifies AI governance for our team."

How Jamf and Amplifier Security close the remediation gap. Learn now to turn security signals into action with Jamf and Amplifier Security's AI-powered risk management. July 6 2026 by Breean Levitch Chris Simmons Security teams are good at collecting signals. What they struggle with is turning those signals into action fast enough, at scale, without burning out the IT team in the process. That's the gap Jamf and Amplifier Security set out to close together. By connecting Jamf's device management and endpoint security capabilities with Amplifier's AI-powered human risk management platform, joint customers can go from a detected risk to a resolved one - often without a single ticket or chaser email. Here's how it works in practice. You can't secure what you can't see, and you can't act on what you can't attribute. First mile problem: closing visibility gaps that stall vulnerability management, incident response, and audit readiness. Most organizations manage device inventory in one place and security findings in another. When a vulnerability surfaces or an endpoint protection tool goes missing, the question is rarely "what device?" It's "whose device?" And more importantly: "is that person in HR, IT, or a department that handles sensitive data?" The integration between Jamf Protect and Amplifier's Risk Advisor answers that question automatically. Jamf Protect continuously monitors device health and compliance across Mac, iOS and Windows endpoints. Amplifier ingests those findings and maps them to specific employees with department, role and risk context, surfacing them in a prioritized view for security teams. The result is a risk picture that's actionable, not just informational. When Amplifier's Risk Advisor surfaces high-severity "Endpoint Protection Missing" findings across Marketing and Information Technology, security teams know exactly which employees are exposed, on which devices and how long those gaps have been open. Incident responders get the attribution data they need without manually correlating spreadsheets. Audit teams get the coverage evidence they've always wanted. This is the foundation that makes everything downstream move faster - because visibility without user context is just noise. Patching at scale has always had a people problem. Last mile problem: reducing mean time to patch by engaging end users directly. IT teams know exactly what needs to happen: update the OS, install the EDR agent, fix the out-of-SLA vulnerability. What they don't have is a scalable way to make it happen without either disrupting users or ignoring the issue until the next audit cycle. Amplifier solves this by turning Jamf Smart Groups into AI-driven user engagements. When a device falls out of compliance, Amplifier's Ampy AI agent reaches the employee directly via Slack, Microsoft Teams, or a browser-based nudge and guides them through the remediation on their own schedule. Users can defer a restart to a convenient time, confirm they've made an update or ask for help if they're stuck. The fix happens without an IT ticket, a support call or a frustrated all-hands reminder. The API integration connects Jamf Smart Groups and policies directly to Amplifier's User Security Graph and AI Agent Studio. Security teams configure the flow once; Amplifier handles the user engagement at scale. Existing Smart Groups become the trigger; no new tooling, no new workflows to build from scratch. The impact on the mean time to patch is significant. Engagements that previously required multiple chaser messages, manual coordination and weeks of follow-up can now resolve in days driven by the employees themselves. Real-world outcomes: a distributed workforce, a complex fleet, a fast result. Consider a national beverage distribution organization with approximately 1,900 employees and a mixed fleet of Mac, iOS and Windows devices spread across a distributed workforce. Like many organizations of that size and complexity, keeping every device current was a constant challenge - not because the tools weren't there, but because reaching distributed employees at scale required significant IT coordination. After deploying the Jamf and Amplifier integration, the results were impressive. Within one week, more than 1,000 iOS devices were updated, representing 77 percent of the company's mobile fleet. Before this approach, reaching that level of compliance would have taken five IT staff members roughly a month of manual outreach and follow-up. The difference wasn't new policy enforcement. It was a smarter way to engage the people behind the devices. "Normally, it would take us five IT people and a month to reach those levels because we have a distributed workforce. We did not even socialize this stuff; it just happened." - Systems engineer, national beverage distribution company The integration eliminated an estimated 809 hours of manual chasing by IT and security teams hours that are now redirected toward higher-order security work. Stronger together: the Jamf security portfolio, amplified. This integration reflects something broader about how modern endpoint security needs to work. Jamf Protect surfaces the risk. Amplifier attributes it to the right person and drives them to resolve it. Together, they create a closed loop that most security programs are still trying to build with manual effort and disconnected tools. For organizations running mixed-device environments, this means comprehensive coverage across Mac, iOS and Windows without requiring separate remediation workflows for each platform. For security leaders, it means dashboards that reflect real compliance posture not the theoretical one that assumes every alert gets acted on. The Jamf and Amplifier partnership is built on the premise that the best security outcome is one that users actually complete. When remediation is frictionless for employees and automatic for IT, everyone wins: including the security team that finally gets to close those long-open findings. Discover the difference with Jamf + Amplifier Security.

Jamf launches Beacon by Jamf Threat Labs. Jamf, the standard in managing and securing Apple at work, today announced the general availability of Beacon by Jamf Threat Labs, a new premium threat hunting service bridging a critical gap for security teams through providing dedicated, proactive detection and deep-dive analysis of threats engineered specifically for macOS environments. As organizations continue to expand their Apple footprint, macOS devices have become prime targets for sophisticated threat actors. Yet, many security teams lack the specialized resources needed to effectively monitor and investigate threats targeting macOS. Beacon puts Jamf Threat Labs' industry-leading research and detection engineers directly into customer environments, delivering threat hunting, investigation, and reporting tailored for Apple environments. "Enterprise Mac adoption has grown at a rapid pace, and threat actors have taken notice," said Jaron Bradley, Director of Threat Labs at Jamf." Beacon extends Apple-focused threat hunting directly to customers, helping them strengthen security operations and better understand activity across their Mac environments." Beacon by Jamf Threat Labs enhances an enterprise's security posture through three core pillars: Apple-focused threat hunting for macOS environments: Organizations gain access to dedicated macOS threat hunters with deep knowledge of Apple's security frameworks, threat actor techniques and macOS-specific attack vectors. Combined with Jamf telemetry, the service delivers threat hunting and reporting tailored specifically for Apple environments. Deep intelligence powered by Apple-native telemetry: Beacon by Jamf Threat Labs leverages Jamf's Mac telemetry, built on Apple's Endpoint Security API. This telemetry gives Jamf Threat Labs unprecedented visibility to hunt for Apple-specific attack techniques, anomalous activity and suspicious behaviors across Mac environments. Security teams receive prioritized investigations and reporting that help reduce attacker dwell time and improve response to threats impacting macOS devices. Actionable guidance while maintaining operational control: When a threat is uncovered, Jamf Threat Labs will deliver a comprehensive investigation report complete with actionable remediation recommendations, while internal IT and security teams retain complete ownership and operational control over all containment and policy decisions. Available as an add-on service for Jamf for Mac and Jamf for Mac Hi-Ed customers through a professional services engagement, Beacon extends the capabilities and expertise of Jamf Threat Labs directly into customer environments, helping organizations strengthen security across their Apple ecosystem. About Jamf Jamf's purpose is to simplify work by helping organizations manage and secure Apple devices while delivering an experience end users love and organizations trust. Built for the AI-enabled Apple enterprise, the Jamf platform provides a complete management and security solution with autonomous endpoint management and AI governance across cloud and on-device models. Today, Jamf helps over 78,000 organizations across 100 countries manage and secure over 35 million devices. To learn more, visit www.jamf.com.