Jamf Pro controls Apple fleets — pushes profiles, enforces policy, deploys apps. Lorika observes device posture across macOS, Windows, and Linux — without enrolment, without enforcement. Different jobs, often used together.
Jamf's strength is end-to-end Apple device management: zero-touch enrolment via ABM, profile push, app deployment, OS update orchestration, lost-device actions. It answers: "How do we configure and operate our Apple fleet at scale?"
Lorika assesses 190+ security controls on every endpoint, regardless of OS, regardless of MDM enrolment status. It answers: "Is this device — Mac, Windows, or Linux — configured to a security baseline, and can I produce evidence for an auditor?"
| Capability | Jamf Pro | Lorika |
|---|---|---|
| Primary purpose | Manage & configure Apple devices | Verify device security posture |
| Approach | Push configuration & enforce policy | Read configuration & report posture |
| Requires MDM enrolment | ✓ ABM / ASM / user-initiated | ✗ No enrolment — voluntary agent install |
| Cross-platform coverage | Mac first, Windows / Linux secondary | ✓ macOS, Windows, Linux first-class |
| BYOD & contractor laptops | ✗ Enrolment friction; user resistance | ✓ Read-only, voluntary, privacy-first |
| Configuration profile push | ✓ Core capability | ✗ Observation only — never pushes config |
| App deployment | ✓ VPP, self-service portal | ✗ Not in scope |
| Real-time Security Score (0–100) | ✗ Compliance report, not posture-weighted | ✓ Severity-weighted, time series |
| 190+ posture checks | Partial via Jamf Protect (separate SKU) | ✓ Bundled |
| CIS / NIST / ISO 27001 / SOC 2 / PCI DSS mapping | Via Jamf Compliance Editor | ✓ 8 frameworks built-in, custom builder included |
| CVE scanning per installed package | ✗ Not in core scope | ✓ OSV.dev matching across dpkg, rpm, brew, MSI |
| Linux server coverage | ✗ Not Jamf's domain | ✓ Same scope as desktop |
| Free tier | ✗ Enterprise pricing only | ✓ Free up to 10 devices |
Most Apple-first organisations end up running both. Jamf for the Apple-fleet lifecycle (enrolment, profile push, app delivery), Lorika for the cross-platform posture picture — Windows laptops, Linux servers, contractor BYOD — plus the audit-ready evidence trail.
Apple-fleet enrolment and configuration management. Self-service app portals. Zero-touch DEP enrolment for new hires. Patch management on macOS. Lost-device actions.
Cross-platform posture (Mac + Windows + Linux) in one dashboard. Continuous compliance evidence mapped to CIS/NIST/SOC 2. BYOD and contractor visibility. Linux server fleet hygiene.
The full device lifecycle: Jamf provisions and configures, Lorika continuously verifies the result and produces audit evidence. Many organisations run Lorika alongside Jamf to close the cross-platform gap.
See how Lorika compares with other categories in your security stack:
Free forever for personal use. Works alongside Jamf. Mac, Windows, and Linux from day one.
Start free — up to 10 devices →