AI Assistant expands into security and adds key management capabilities

When we introduced AI Assistant, the goal was simple: help IT admins get answers faster and manage their Apple environments with more confidence. Today, we're sharing that its management capabilities are generally available for all Jamf Pro users and how we're incorporating the AI Assistant into Mac and mobile security workflows.

Transparent capability discovery and control UI

Before diving into the key areas that are now generally available, let’s start with the capability discovery and controls. The AI Assistant settings interface within Jamf Account has been redesigned since the beta to make capability discovery and control more intuitive. A new toggle-based panel gives administrators granular control over which tool groups are active - enabling or disabling capabilities independently - and reviewing all changes through the Activity History audit log.

Administrators are also in control of where AI Assistant is active. For example, scoping access to specific environments, enabling it in a sandbox or staging instance before rolling it out to production. This means admins can explore and validate capabilities on their own terms, without impacting live environments. It's a reflection of Jamf's commitment to transparency: you decide what's on, where it runs and who can use it.

Additionally, the user experience remains seamless. AI Assistant inherits the authenticated user's existing Jamf session - no separate login or API key needed -meaning everything that can be queried is shaped by existing role-based access controls. What an admin has permission to see in Jamf Pro is what AI Assistant can surface.

Nothing more, nothing less.

What's now generally available in Jamf Pro

In Jamf Pro AI Assistant can help with five key areas of device management, all generally available today.

Inventory oversight across Mac and mobile

Managing Apple devices means constantly answering questions: How many devices are running an outdated version of Chrome? What's our OS distribution across departments? Now you can query your entire fleet including both Mac and mobile devices in natural language and get results immediately, digging deeper to get the answers and solutions you need.

Configuration explanation

AI Assistant can reverse-engineer any configuration in your environment. Point it at a policy or script and get a plain-language explanation of its purpose, scope and dependencies. This can mean institutional knowledge recovery in environments where documentation may have never been made.

Blueprints search and explanation

Find blueprints by name or by the configurations they contain and get a plain-language breakdown of what a blueprint includes and what it will deploy so you can understand pre-built configurations before applying them to your fleet.

Compliance benchmarks

AI Assistant can now instantly check your fleet's compliance posture against security frameworks:

• CIS Level 1
• CIS Level 2
• NIST 800-171
• DoD STIG

Ask how many devices fail a specific benchmark and get counts broken down by the specific requirements they're missing, with the ability to drill into which devices are non-compliant. Audit prep that takes minutes rather than days.

Identify risky apps across your mobile fleet

Security risk on mobile doesn't only come from threats targeting devices, it can come from the apps already installed on them. AI Assistant can now analyze apps deployed across your managed iOS fleet for security vulnerabilities, privacy concerns and policy violations. Results are risk-scored by severity so you can prioritize what to address first, and each finding comes with specific remediation guidance. Proactive mobile security rather than reactive incident response.

Introducing AI Assistant for Security

MacOS security is a specialized discipline. Behavioral alerts, meaning detections that go beyond simple file hash matches into nuanced operating system events, require knowing what questions to ask, like:

• How to interpret what happened?
• How to determine whether an alert is a genuine threat or a false positive?

That expertise isn't always in the room, so we brought AI Assistant to Jamf Protect.

Available now in beta, you can now ask AI Assistant to help you make sense of alerts. Rather than relying on static description fields, you get dynamic analysis tailored to the specific alert in front of you. In a plain-language response, you understand:

• What triggered the alert
• What it means
• How severe it is
• What to look for next.

For behavioral alerts, this analysis is informed when malicious activity, considered high-risk by Jamf Threat Labs, is detected. For endpoint threat prevention alerts, it is augmented by Jamf's threat database that is continuously updated by Jamf Threat Labs. (The team added over 26K malware samples in 2025!)

The goal is to make every alert comprehensible and actionable – regardless of your macOS security background. This includes helping you draft communications, like the email to the affected user or the summary for your manager, so the response loop is complete.

Investigate the context around an alert

Understand the scope of an alert

A single alert tells you what happened on one device. AI Assistant can search for similar alerts across your fleet, helping you quickly determine whether you're looking at an isolated event or a broader pattern.

Who benefits?

IT admins with security responsibilities or those managing Apple fleets who've also been handed security duties, now have a virtual specialist that meets them where they are. You don't need to become a macOS security expert to understand what an alert means or what to do about it.

Security professionals who encounter Mac alerts as part of a broader workload get Apple-specific context that maps to the investigation workflows they already know, without requiring deep macOS expertise to get there.

What's ahead?

The roadmap for AI Assistant includes response capabilities, such as:

• Generating remediation actions based on alert findings
• Admin review and approval before anything executes.

And further out, the vision is event-driven triage: AI Assistant that automatically analyzes high-severity alerts and queues a response plan for admin approval, so you're reviewing pre-analyzed incidents rather than raw alerts.

To benefit from AI Assistant's management capabilities, opt-in through Jamf Account. To get early access to the new security capabilities in Jamf Protect, you can also join the beta program – also available in Jamf Account.

For any questions about how AI Assistant can help your team, reach out to your Jamf representative.