Tech partner spotlight: Jamf and CyCraft

Jamf and CyCraft are better together, combining Jamf’s industry-leading Apple device management and security with CyCraft’s AI-powered threat exposure management.

September 4 2025 by

Vinci Tu

Illustration of two women: one wearing CyCraft colors and one wearing Jamf colors, holding up a shield together. Arrows are stuck in the shield, but they are unharmed.

The challenge

The growing weaponization of AI by threat actors is increasing pressure on detection and response strategies that are already lagging. We must incorporate preemptive cyber defense capabilities, or we will fail to help our customers combat future threats.

Jamf and CyCraft rise to this challenge

Jamf and CyCraft are better together, combining Jamf’s industry-leading Apple device management and security with CyCraft’s AI-powered threat exposure management. This partnership delivers a comprehensive, proactive defense against AI-enhanced threats.

Together, they solve critical cybersecurity problems with these approaches:

  • Unified endpoint and attack surface management: Jamf Pro’s mobile device management (MDM) and Jamf Protect’s endpoint security integrate seamlessly with CyCraft XCockpit’s External Attack Surface Management (EASM), Internal Attack Surface Management (IASM), and Endpoint Detection and Response (EDR), providing end-to-end visibility and control.
  • AI-driven threat detection and response: CyCraft’s XCockpit leverages generative AI to autonomously detect, analyze, and summarize attack incidents, while Jamf Protect’s real-time telemetry and threat prevention enhance rapid response to sophisticated threats.
  • Reduced operational burden: The integration automates threat triage, prioritization, and remediation, addressing manpower shortages and enabling SOC teams to focus on strategic tasks.
  • Enhanced Apple ecosystem security: Jamf’s deep expertise in Apple environments ensures robust protection for macOS and iOS devices, complemented by CyCraft’s AI-driven insights into hacker behaviors and geopolitical threat intelligence.
  • Compliance and risk mitigation: XCockpit’s continuous monitoring and compliance mapping, paired with Jamf Pro’s inventory insights and access controls, reduce breach risks and ensure regulatory adherence.

How does the integration work?

The integration of Jamf Pro, Jamf Protect and CyCraft XCockpit creates a cohesive cybersecurity ecosystem that addresses both endpoint and enterprise-wide threats. Below is an overview of the workflow, supported by a conceptual diagram.

Jamf Pro: Device Management, Policy Enforcement, Inventory Insights, Compliance Checks. Jamf Protect: Endpoint Security, Telemetry Data, Threat Detection, Real-Time Alerts CyCraft XCockpit: AI Threat Analysis, Attack Surface Mgmt, Automated Response, Visu

Workflow

Device management and inventory (Jamf Pro):

Jamf Pro manages Apple devices, providing detailed inventory data (e.g., installed software, user accounts, and privilege levels). It enforces security policies, such as encryption protocols and access controls, to secure endpoints.

Endpoint threat detection (Jamf Protect):

Jamf Protect monitors macOS and iOS devices in real time, detecting malware, suspicious applications, and unauthorized activities. Telemetry data is collected and shared with CyCraft XCockpit for advanced analysis.

AI-driven threat analysis and exposure management (CyCraft XCockpit):

XCockpit’s AI agents (Asset Discovery, Dark Web, Security Posture Assessment, and IT Risk-to-Compliance) analyze internal and external attack surfaces. It correlates Jamf Protect’s endpoint alerts with global threat intelligence, dark web monitoring, and privileged account activity to identify attack paths and vulnerabilities. Generative AI summarizes incidents, providing actionable reports and mitigation recommendations.

Automated response and remediation

XCockpit’s autonomous case management prioritizes alerts and triggers remediation actions, such as isolating compromised devices via Jamf Pro.

Jamf Protect executes real-time threat prevention, blocking malicious processes or network traffic.

Continuous monitoring and reporting

The integrated platform provides visual root cause analysis, topological attack maps, and compliance reports, enhancing SOC efficiency and decision-making.

  • Jamf Pro serves as the foundation for device management and policy enforcement.
  • Jamf Protect acts as the endpoint security layer, feeding real-time telemetry to XCockpit.
  • CyCraft XCockpit processes data using AI: correlating endpoint alerts with external and internal threat intelligence to deliver actionable insights and automated responses.

More benefits of Cycraft

  • Integration with SIEM tools: XCockpit’s compatibility with platforms like ArcSight (via CyberTotal) allows SOC teams to incorporate Jamf telemetry into existing workflows, enhancing alert validation and triage.
  • Geopolitical intelligence: CyCraft’s Taiwan-based insights provide unique perspectives on APAC-specific threats, complementing Jamf’s global Apple-focused expertise.
  • Scalability: The solution supports organizations of all sizes, from SMEs to large enterprises, with minimal operational disruption.

Summary

The integration of Jamf Pro, Jamf Protect, and CyCraft XCockpit addresses the critical challenges posed by AI-empowered threat actors in the cybersecurity market. By combining Jamf’s robust Apple device management and endpoint security with CyCraft’s AI-driven threat exposure management, this partnership delivers a proactive, automated, and comprehensive solution. It solves the problems of complex attack surfaces, resource constraints, and real-time response by offering unified visibility, AI-enhanced threat detection, and streamlined remediation. Together, Jamf and CyCraft empower organizations to pivot toward a resilient, future-proof cybersecurity posture, effectively combating sophisticated threats and ensuring business continuity.

-0-

About Jamf
Jamf’s purpose is to simplify work by helping organizations manage and secure an experience that end users love and organizations trust. Jamf is the only company in the world that provides a complete management and security solution for an Apple-first environment that is enterprise secure, consumer simple and protects personal privacy. To learn more, visit www.jamf.com.

About CyCraft
CyCraft is a leading AI cybersecurity company, dedicated to automating cybersecurity with AI technology. Its product suite encompasses AI Red Teaming for automated validation of Large Language Model (LLM) security and strengthening cloud and on-premise AI models with AI Guardrail technology, with the ultimate goal of building multi-layered cybersecurity resilience for the entire AI ecosystem. Their XCockpit AI platform integrates three pillars of XASM (Extended Attack Surface Management): EASM, IASM, and automated endpoint protection, aiming to provide enterprises with proactive, preventative, and real-time deep defense. With a proven track record in government, finance, high-tech semiconductor, and other industries, and high recognition from international institutions such as Gartner, CyCraft continues to build Asia’s most advanced AI Security Operations Center, fully committed to safeguarding enterprise digital resilience. To learn more, visit www.cycraft.com/en.

Learn more about the Jamf-Cycraft partnership at Jamf Marketplace.