PAM Gateway
PAM Gateway in JumpServer is designed around Centralised privileged access gateway for SSH, RDP, and database sessions and tied to measurable business objectives.
Session Audit
JumpServer brings Session Audit into a controlled workflow with roles, approvals and traceable data paths.
Credential Control
Credential Control can connect to operations, reporting and adjacent systems instead of remaining an isolated function.
7-day free trial
JumpServer Hosting in Germany
WZ-IT designs, deploys, migrates and operates JumpServer for Centralised privileged access gateway for SSH, RDP, and database sessions - including monitoring, backups, updates, security and clear ownership.
About the technology
What is JumpServer?
JumpServer addresses Centralised privileged access gateway for SSH, RDP, and database sessions. A running application alone is not enough for production: data, identities, integrations, updates and recovery have to be designed as one system.
Scoping focuses on PAM Gateway, Session Audit, Credential Control, roles, data paths and recovery. WZ-IT turns these requirements into a documented target architecture and can take responsibility for migration, integration and ongoing managed operations.
Functions and operating components for JumpServer
PAM Gateway
PAM Gateway is configured and documented in JumpServer around roles, data paths and operational requirements.Session Audit
Session Audit is configured and documented in JumpServer around roles, data paths and operational requirements.Credential Control
Credential Control is configured and documented in JumpServer around roles, data paths and operational requirements.Roles and access
Separate administrators, business users and technical accounts with traceable permissions.Interfaces
Connect APIs, webhooks, directory services and adjacent business systems in a controlled way.Data and recovery
Protect persistent data, configuration and restart procedures according to the agreed scope.Migration and takeover
Assess existing data and configuration, migrate them in a test run and move to managed operations through a controlled cutover.Identity and secure access
Secure SSO, roles, administrative paths and external access for the application and existing infrastructure.Backup and recovery
Back up all stateful components consistently and document the recovery path for the agreed scope.Updates, monitoring and operations
Monitor and update the application and its technical dependencies and operate them under the agreed service level.
Managed operations
Operating JumpServer with clear ownership
For JumpServer, policies, keys, identities, audit data and emergency access are more security-critical than the application runtime alone.
Application platform
Operate runtime, dependencies, proxy and persistent components reproducibly.Data and state
Protect databases, files, configuration and retention in a traceable way.Integrations
Connect APIs, identities and downstream systems with defined failure paths.Maintenance and recovery
Combine monitoring, updates, backups, restore and incident response.
Area
Responsibilities without operational gaps
Platform operations, business configuration and integrations are separated and adapted to your environment in the proposal.
| Area | Responsibility | Scope boundary |
|---|---|---|
| Platform and runtime | WZ-IT | Deployment, hardening, monitoring, maintenance and technical documentation. |
| Backup and recovery | WZ-IT | Backup scope, supervision and agreed recovery exercises. |
| Configuration and roles | Shared | WZ-IT implements technically; your team approves business roles and permissions. |
| Business data and processes | Customer | Content, data quality and business decisions remain with the organisation. |
| Edition and licence | Shared | WZ-IT reviews the technical scope; required rights are agreed jointly. |
| Extensions and development | Expandable | Plugins, custom functions and deep integrations can be added as a retainer or project. |
Use and integration
Introducing JumpServer around the actual process
Value is created when the application, data, permissions and downstream systems are designed as one end-to-end workflow.
Connect PAM Gateway
Data sources, APIs and import paths for PAM Gateway are versioned, protected and tested for failure states.
Connect Session Audit
Identities, roles and process hand-offs around Session Audit are aligned with existing business systems.
Connect Credential Control
Monitoring, notifications and exports for Credential Control route technical signals into the responsible workflows.
Record the version, edition, extensions and licence state of the JumpServer environment
Review PAM Gateway including data, configuration and dependencies
Map Session Audit together with connected identities and interfaces
Verify Credential Control, monitoring, backup and recovery in practice
Hosting & operations
How much does JumpServer hosting cost?
We combine the right compute size with ongoing operations, backups, monitoring and a service level appropriate for the criticality of JumpServer. High availability and recovery targets are designed separately where needed.
Hosting & operations from€99.90/ month · cancel monthly
Hosting for JumpServer in Germany: GDPR-compliant operations
- One managed standard application included
- .de domain included or your own domain or subdomain via CNAME
- German data centres with ISO 27001 and BSI C5, no US clouds
- 99.9 % standard availability per month
- Regular updates, CVE monitoring and prioritised patches for critical vulnerabilities
- Central logs with immutable retention
- Daily backup with 7-day retention
- 5 TB outbound traffic per workload and month
- 24/7 proactive monitoring
- Five service levels, 24/7 P1 response with Production or Critical
- Personal technical contact
Instance sizes and monthly prices
- XS · 2 vCPU, 2 GB RAM, 40 GB NVMe SSD
- €99.90 in total
- S · 2 vCPU, 4 GB RAM, 80 GB NVMe SSD
- €129.90 in total
- M · 4 vCPU, 8 GB RAM, 80 GB NVMe SSD
- €159.80 in total
- L · 8 vCPU, 16 GB RAM, 80 GB NVMe SSD
- €219.80 in total
- XL · 16 vCPU, 32 GB RAM, 80 GB NVMe SSD
- €329.80 in total
- Additional storage per 50 GB
- +€4.99
Straightforward provisioning within a few business days
Payment
- Bank transfer
All prices are net and exclude statutory VAT. The offers are addressed to businesses. All on-premises options
Other options
Try it free for 7 daysRequest a test instance
We set up a test instance for you, usually on the next business day. No payment details required. After seven days it is deleted unless you continue.
Request a test instance →Bring Your Own InfrastructureInstallation on Your Infrastructure
Installation on your own infrastructure · On-premise or in your cloud · Control over data location and access · Custom configuration · Complete documentation · Initial setup & configuration · Optional support and maintenance contract
Request a proposal →On-premises optionRun JumpServer on hardware at your organisation
As an alternative to managed hosting in the data centre, WZ-IT provides the hardware, configures JumpServer, and handles hardening, monitoring, updates, backup and technical support. Access can be limited to the internal network or enabled through VPN and existing identities.
View WZ-IT App Node →Sizing and deployment location
Sizing JumpServer for real usage
User count alone does not determine sizing. Concurrency, data volume, background jobs, integrations and recovery objectives define the required environment.
| Usage profile | Starting point | Decisive factors |
|---|---|---|
| Small production entry | Technical discovery | Users, data, integrations and protection requirements are classified. |
| Several teams or departments | Load and role profile | Concurrency, permissions and background processes are assessed separately. |
| High data or transaction load | Capacity assessment | Growth, I/O, caches and bottlenecks are measured or modelled. |
| Business-critical operations | HA and recovery design | Outage objectives, maintenance windows and restart targets shape the architecture. |
- The calculator is technical guidance. Data volume, high availability, integrations, migration, edition and service level are assessed before a binding proposal.
Sizing and deployment location
Available deployment locations
Depending on data paths, latency, compliance and existing infrastructure, JumpServer can run on WZ-IT infrastructure, in your cloud, on premises or as a hybrid deployment.
Dedicated WZ-IT infrastructure
Isolated customer environment with documented platform operations and agreed service levels.Your cloud
Operations in your existing cloud account with clear separation of platform and account ownership.On premises
Deployment in your data centre or server room close to internal data sources and business systems.Hybrid
Distribute application, data and integrations across locations through controlled private connections.
Target architecture
Embedding JumpServer safely in the system landscape
Trust boundaries, administrative access, secrets and audit paths are separated explicitly and equipped with an emergency procedure.
Business users and systems
Controlled use through browsers, clients, APIs or automated processes.
Access and network boundary
TLS, reverse proxy, private access and restricted administration paths.
Identities and roles
SSO, directory services, role model and technical service accounts.
JumpServer platform
Application services, configuration, jobs and business runtime state.
Persistent data
Databases, object storage or files with a defined backup scope.
Interfaces
APIs, webhooks, queues and directory services connected to adjacent systems.
Operational signals
Logs, metrics, health checks and alerting for the agreed scope.
Production and administration access are separated; secrets and technical accounts are not kept in uncontrolled configuration files.
Licence and edition review
Offering JumpServer with the appropriate usage rights
The licence has undergone a technical review. Before the proposal, we align edition, functionality, operating model and vendor terms with the concrete use case.
| Licence model | Reviewed on |
|---|---|
| GPL-3.0 | 2026-08-24 |
- How licensing enters the proposal: WZ-IT operates the edition of JumpServer licensed under GPL-3.0. Not part of the offering are the components marked as Enterprise; they are under a commercial licence from the vendor. On request, we support you in obtaining any required vendor licence.
- JumpServer is a trademark or product name of its respective owners. WZ-IT is an independent service provider, neither a partner nor a representative of the project, and is not affiliated with it.
- Open official licence source
Role in the overall system
Related services for JumpServer
This page covers installation and the agreed platform operations for JumpServer. Custom code, the access layer and special confidentiality requirements remain clearly separated responsibilities that can be added when needed.
Maintain the application
Support custom code and integrations
Keep custom extensions, interfaces and dependencies controlled, updated and supportable.
View service Secure accessConnect users, sites and systems
Add identity-based access and private network paths as a separate operational layer.
View service Operate confidentiallyAssess Section 203 requirements separately
For professional secrecy holders, define contractual, access and infrastructure requirements in a dedicated operating model.
View serviceThree relevant adjacent paths instead of a long list of further products.
View the overall systemFrequently asked questions about JumpServer managed hosting
Answers about operations, migration, licensing, infrastructure and integrations.
- JumpServer Hosting with WZ-IT starts at €99.90 net per month. It includes a dedicated size XS instance (2 vCPU, 2 GB RAM, 40 GB NVMe SSD), updates, daily backups with 7 days of retention, 24/7 monitoring, 5 TB of outbound traffic and a first response to critical incidents by the end of the next business day. Larger instances and higher service levels cost extra; the configurator shows the total price.
- The entry level is a dedicated size XS instance with 2 vCPU, 2 GB RAM, 40 GB NVMe SSD for €99.90; it suits lightweight applications as well as test and development environments. Size S with 2 vCPU, 4 GB RAM, 80 GB NVMe SSD costs €129.90. We check which size JumpServer needs in production before provisioning. Size M (4 vCPU, 8 GB RAM, 80 GB NVMe SSD) costs an extra €29.90 excl. VAT, L (8 vCPU, 16 GB RAM, 80 GB NVMe SSD) an extra €89.90 excl. VAT and XL (16 vCPU, 32 GB RAM, 80 GB NVMe SSD) an extra €199.90 excl. VAT, each per month. Additional storage costs €4.99 excl. VAT per 50 GB and month.
- No. WZ-IT does not limit the number of users. How many users can work smoothly at the same time depends on usage and the chosen instance size XS to XL.
- JumpServer Hosting can be cancelled monthly, with no minimum term and 30 days' notice to the end of the month.
- Germany and Switzerland are available at the same prices, in both cases without US clouds. The data centres are ISO 27001 certified; in Germany we additionally operate with a German provider whose data centres are BSI C5 attested. The Section 203 Managed Cloud for professional-secrecy holders is available in Germany only.
- We typically provide a production instance within a few business days after signing. For a trial, we set up a test instance, usually on the next business day; it runs free of charge for 7 days and without payment details.
- Yes. One .de domain is included with every hosting plan. Alternatively, connect your own domain or subdomain with a CNAME record.
- Depending on scope, we cover target architecture, deployment, secure baseline configuration, monitoring, backups, updates, recovery, documentation and technical incident handling. Integrations and further development can be added.
- Yes. Before takeover we assess version, edition, data, extensions, identities, integrations, backup status and known legacy issues, then define a controlled takeover or migration plan.
- At the review date of this page, GPL-3.0 was identified. Before deployment we verify the concrete version and edition again and document the applicable licence source. WZ-IT operates the edition of JumpServer licensed under GPL-3.0. Not part of the offering are the components marked as Enterprise; they are under a commercial licence from the vendor. On request, we support you in obtaining any required vendor licence.
- Depending on protection requirements and data paths, it can run on dedicated WZ-IT infrastructure, in your cloud, on premises or as a hybrid setup. The target architecture is agreed in advance.
- Typical integrations include OIDC, OAuth 2.0, SAML, LDAP, SCIM, device or workload identities and SIEM. Permissions and fallback access are tested before production.
Reviews & projects
Client feedback and projects worldwide
WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
International
Built in Germany's Ruhr Valley. Running worldwide.
WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.
Selected projects
- LiveRemote access platform for distributed water treatment plantsABCO Water Systems · Australia · Secure Access & OT
- 81%AWS migration with substantially lower operating costsEVA Real Estate · UAE · Cloud exit & infrastructure
- 98%Provision new sites in minutes instead of hoursnextGYM GmbH · Germany · Automation & IoT
Read client reviews
- Secure your Proxmox & backup setup
- Modernize your infrastructure - sovereign
- Plan a sovereign open-source stack
- Integrate a local AI solution
- Modernize your legacy software
- Cut cloud cost - up to −81%
- Build a high-availability Proxmox cluster
- Virtualize with Managed Proxmox
- Design an open-source AI architecture
- Get collaboration fully managed
- Ship your prototype to production
- Connect sites and clusters securely
Hosting & operations
Enquire about hosting and operations for JumpServer
Briefly describe the current state and objective for JumpServer. We assess infrastructure, integration, and ongoing operations.
- Straight with Timo and Robin - no sales team, no pitch
- A professional assessment of your situation
- Concrete next steps for infrastructure, software or AI
The conversation is free and non-binding.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.