bastillion-io/Bastillion

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

3551 stars · 399 forks observed · 2026-10-21

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Bastillion is a self-hosted, web-based SSH console and SSH key management platform that acts like a bastion host with a dashboard. It provides browser-based terminal sessions, centralized key issuance and rotation, two-factor authentication, and recorded, replayable session auditing.

Use cases

• manage ssh access to servers from a browser
• centralize ssh key distribution and rotation
• record and replay ssh sessions for compliance audits
• broadcast commands to multiple servers at once
• set up a bastion host with two-factor authentication
• control which users can access which systems

When to choose

• you need audit-ready SSH session recording for PCI DSS, HIPAA, SOC 2, or NIST
• you want centralized SSH key management so users never hold long-lived keys
• you need a self-hosted web terminal with 2FA and per-profile access control
• you run commands across a fleet of hosts and want synchronized sessions

When to avoid

• you need more than 5 registered systems without paying for a license (source-available, not fully open source)
• you only need simple one-off SSH from a terminal without a management layer
• you require a fully open-source licensed tool for redistribution
• you need agentless access to protocols beyond SSH

Facets

application · maturity active

ssh auth security http-server developer-tools security self-hosted developer-tools self-hosted jvm windows bastion-host ssh-key-management session-recording two-factor-authentication web-terminal privileged-access source-available devops web-server linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Loophole-LLC/Bastillion")