XFA checks every device at sign-in, on macOS, Windows, Linux, iOS, and Android. Nothing is enrolled and XFA takes no control, so it works for personal and contractor devices too.
Jamf manages Apple devices. IT enrolls each Mac, iPhone, or iPad and then sends it apps, policies, and updates from a distance.
It does not manage Windows or Linux. Jamf can pass a device's compliance to Microsoft Entra ID, Okta, or Google Workspace, which then keep a non-compliant device out of protected apps.
| XFA | Jamf | |
|---|---|---|
| Security checks | ||
| OS version, disk encryption, and screen lock checks | Yes | Yes |
| Jailbreak and root detection | Yes | Yes |
| Browser kept up to date | Yes | YesOnly on Macs that Jamf manages |
| Active antimalware verified | Yes | YesThrough Jamf Protect, licensed separately from Jamf Pro |
| The same checks on every operating system | Yes | NoNo Linux, and only partial coverage for Windows and Android |
| BYOD | ||
| Works for company-owned devices | Yes | Yes |
| Built for people to install themselves | Yes | No |
| Never takes control of the device | Yes | No |
| Finds devices through sign-in logs, before anything is installed | Yes | NoJamf only sees enrolled devices, so personal and contractor devices stay invisible until they are enrolled |
| Setup and admin | ||
| One admin dashboard | Yes | Yes |
| Self-serve setup, no IT rollout | Yes | No |
| Known vulnerabilities per device, from OS and browser versions | Yes | YesJamf Protect reports OS versions with known vulnerabilities, on managed Apple devices only |
| Warns people before they are blocked at sign-in | Yes | No |
| Ecosystem | ||
| Works with any identity provider | Yes | Entra ID, Google, and Okta |
| Nothing to migrate from your device management | Yes | No |
Jamf details from Jamf's documentation, checked October 2026. Sources: Jamf platforms (opens in a new tab); Jamf device compliance (opens in a new tab).
macOS, Windows, Linux, iOS, and Android are checked the same way at sign-in. The laptops that are not Macs need no second tool.
A personal or contractor laptop gets the same check at sign-in as a company one. The app installs without admin rights, and XFA takes no control of the device.
XFA for personal and contractor devicesEach person installs the XFA app at their next sign-in, without admin rights, and fixes issues from the app. Nobody enrolls a device and IT runs no rollout.
How XFA works“We have contractors who work on personal devices, which means we cannot install full-blown device management and control their devices because it's a kind of privacy invasion. XFA is great for hybrid teams like ours.”
Alex UlyanovHead of Security, Gateway.fmRead the Gateway.fm story
Yes. Jamf keeps managing your Apple devices. XFA checks every device at sign-in, including the Windows, Linux, and contractor devices Jamf does not reach.
No. The XFA app checks security settings and does not collect personal content. Nothing changes without the person’s OK.
Only if you set that check to block. You choose per check whether a device is warned or blocked, and after how many days. At sign-in, the person sees what to fix.
Nothing. XFA is free to start, with no cap on people. From the start it checks operating system version, disk encryption, screen lock, and antimalware at every sign-in.
Compare plansDevice security used to mean a project. With XFA it means connecting your identity provider and picking your checks.
Starting with XFA