LDAP/Active Directory sync, full audit logging, and webhooks are usually locked behind a $50+/user/month "Enterprise" tier at other password managers. Here, they're part of the $69/year Unlimited plan — flat, no per-user math.
Sync users automatically from your corporate directory. Deprovisioned employees lose access the moment they're removed from AD.
Every login, view, share, and admin action — logged and exportable for compliance reviews.
Client-side encryption so not even your own server admin can read sensitive credentials.
Runs on infrastructure you control — on-prem, VPC, or your own datacenter. Nothing leaves your network by default.
Security and compliance teams need the same things regardless of company size — the difference is usually just what vendors charge for it.
Your vault data never touches Jadex-owned infrastructure. For regulated industries, that simplifies the compliance story considerably.
Employees authenticate against your existing directory — no separate password manager credentials to manage or leak.
Formal approve/deny workflow for sensitive credential access, with a full audit trail of who approved what and when.
$69/year flat, regardless of headcount. No surprise bill when your team grows from 50 to 500.
"Self-hosted" means you control the server — not that remote workers can't reach it. Pick whichever setup fits how your team actually works.
Run the server on a cloud VM (AWS, DigitalOcean, Azure, or similar) with a domain name, and put it behind a reverse proxy like Caddy or Nginx for a real TLS certificate via Let's Encrypt. Remote workers open a normal browser tab from anywhere — home, a hotel, a different country — no VPN client needed. This is the most convenient option for fully distributed teams.
For teams that would rather not expose the server to the public internet at all, put it behind a VPN like Tailscale or WireGuard instead. Remote workers connect to the private network first, then reach the server at its internal address — nobody outside the VPN can even see the server exists. More setup per device, but the smallest possible attack surface.
Jadex Vault self-signs a TLS certificate on first run, which is fine on a private LAN but will show a browser warning over the public internet — that's why a reverse proxy with a real certificate is the right setup for public access, not a Jadex-specific limitation.
Standard LDAP and Active Directory over LDAP/LDAPS — you provide the server address, bind credentials, and base DN in Settings → Integrations. Users are synced in on a schedule; removing someone from your directory revokes their Jadex Vault access on the next sync.
No — Jadex Vault does not currently hold SOC 2 or ISO 27001 certification. Because it's self-hosted, your own infrastructure's compliance posture (not a third-party vendor's) is what applies, which is why regulated teams often prefer it for that piece of the compliance story. We're not claiming a certification we don't have.
Vault events like logins, password shares, and admin actions can be pushed to Slack, Discord, or Zapier via webhook, configured under Settings → Integrations on the Unlimited and Lifetime plans.
Yes — it installs as a standard Windows service (.exe) or Linux systemd service (.deb), so it runs wherever you can run those: a physical on-prem server, a VM in your own datacenter, or a VPC instance you control. There's no dependency on Jadex-owned cloud infrastructure.
Logins, password views, shares, and admin actions (user changes, permission changes, settings changes) are all logged with timestamp and actor, and the full log can be exported for compliance review from Settings → Data.
Yes. Self-hosted means you control the server, not that it's limited to your office network. Run it on a cloud VM with a domain and TLS certificate (via a reverse proxy like Caddy or Nginx) and remote workers reach it from anywhere, the same as any website. If you'd rather not expose it to the public internet at all, put it behind a VPN like Tailscale or WireGuard instead — remote workers connect to the private network first, then reach the server at its internal address.
We're happy to walk through your setup, LDAP configuration, or migration from another vendor.
Talk to Sales