JADAPTIVE is a UK software company that builds SSH libraries and self-hosted access appliances. Its products help organisations get rid of static SSH keys and permanent bastion hosts, giving people, servers, devices and AI agents short-lived, identity-bound access instead.
Its customers are operations teams running OpenSSH estates and software vendors that embed SSH in what they sell, and everything it ships runs in the customer’s own infrastructure.
At A Glance
| Vendor | JADAPTIVE (Jadaptive Limited) |
|---|---|
| Category | SSH libraries, SSH certificate access and self-hosted access appliances |
| Identities covered | Users, servers, registered devices, AI agents using SSH |
| Deployment | Self-hosted Docker appliances, Debian and RPM packages, embedded Java SDK |
| Agentic AI | Maverick SSH MCP server for AI agents and IDE assistants |
| Customers | DHL, HP, IBM, Sony Music, Thales |
| Founded | Incorporated 2008; core APIs in use since 2002 |
What JADAPTIVE Does
SSH keys tend to be copied to servers and laptops and then forgotten, which leaves long-lived credentials scattered across an estate. JADAPTIVE replaces those keys with identity-bound access: each session is tied to a verified person, device or agent and the credential expires within minutes. Existing OpenSSH servers and clients keep working, so the change does not require a new gateway in the path. The same approach extends to AI agents, which receive short-lived certificates instead of a private key pasted into a configuration file.
Products
Maverick Synergy
Maverick Synergy is JADAPTIVE’s Java SSH library, aimed at software vendors that need SSH inside their own products. Its pure Java core has no external dependencies, with optional JNI wrappers.
- SSH client and server APIs for file transfer, shell control, port forwarding and virtual file systems
- AES-GCM encryption and readiness for post-quantum cryptography
- A community edition under LGPL-3.0 and a Commercial LTS branch with security backports
SSH Teams
SSH Teams is for operations teams that run OpenSSH estates and want to stop handing out permanent keys. It issues five-minute OpenSSH certificates on demand and manages users, servers, registered devices and policies from one interface. Revoking a device stops it obtaining new certificates, and role-based administration lets teams delegate management.
Docker Appliances
| Nodal VPN | A WireGuard access appliance with user identity validation and policy-driven 2FA |
|---|---|
| Athene | A self-hosted repository manager for Debian, RPM and Maven packages |
| Password Express | Self-service password reset for Active Directory users |
| Aegis Gateway | A reverse proxy front door for web services, with automatic certificates and reverse SSH tunnels |
| DropPort | Temporary encrypted browser-to-browser file transfer that writes no file bytes to the server disk |
How It Works
Everything runs in the customer’s own infrastructure. The appliances ship as Docker images, and Maverick SSH MCP is also packaged in Debian and RPM repositories.
| Component | What it does |
|---|---|
| Certificate authority | SSH Teams acts as the certificate authority. Existing OpenSSH servers only need to trust it, and no SSH gateway sits in the path. |
| Policy | Access policies restrict users by server, principal, source IP and schedule, and can limit which SSH capabilities are allowed. |
| Device binding | Devices register through OAuth 2.0 device registration, and DPoP binds each signing request to the device’s key. |
| Clients | Users keep their standard OpenSSH clients, working through a wrapper CLI and ssh-agent. |
| Embedded SDK | Developers pull Maverick Synergy into their applications as Maven artifacts. |
Identities And Systems Covered
| Human users | SSH users receiving short-lived OpenSSH certificates, and VPN users validated by Nodal VPN |
|---|---|
| Servers | OpenSSH servers that trust the SSH Teams certificate authority |
| Devices | Registered devices with DPoP-bound keys that can be revoked |
| AI agents | Agents and IDE assistants using SSH through Maverick SSH MCP with centrally managed identities |
| Directories | Active Directory accounts, for password self-service |
| Repositories and web services | Debian, RPM and Maven repositories, and web services behind Aegis Gateway |
Agentic AI Capabilities
Maverick SSH MCP
Maverick SSH MCP is an MCP server for SSH operations that gives AI agents and IDE assistants a handle-based interface. Its tools cover interactive shell sessions, one-shot commands, SFTP file operations, SCP transfers, local and remote TCP tunnels and Unix domain socket forwarding. Built-in resources expose the open handles and a policy for destructive operations.
Agent Credentials
An agent can use existing SSH authentication, or SSH Teams for passwordless access with short-lived certificates obtained through OAuth device flow and certificate authentication.
Company Background
| Founded | Jadaptive Limited was incorporated on 30 June 2008; its core APIs have been in use since 2002 |
|---|---|
| Headquarters | Nottingham, United Kingdom (registered office) |
| Founder | Lee David Painter |
Note: This overview is compiled from JADAPTIVE’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.