veops/oneterm

Health v2 · maintenance only

Adoption not part of the score

1732 stars · 181 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

OneTerm is a lightweight, flexible enterprise bastion host (jump server) built on the 4A model: authentication, authorization, account, and audit. It proxies SSH, RDP, and VNC access to internal infrastructure while recording sessions and enforcing access control.

Use cases

• secure ssh access to internal servers through a bastion
• record and audit terminal sessions of ops teams
• restrict direct access to critical systems behind a jump server
• manage credentials and password policies for server access
• give contractors time-limited access to infrastructure
• proxy rdp and vnc sessions to windows and desktop hosts

When to choose

• you need a self-hosted, lightweight alternative to commercial bastion solutions like JumpServer or Teleport
• your team primarily uses SSH with some RDP/VNC needs
• session recording and audit logs are compliance requirements
• you want a simple web UI for managing server access permissions

When to avoid

• you need deep integrations with enterprise SSO/IdP ecosystems or large-scale multi-cluster support offered by mature tools like Teleport
• you require a fully open permissive license for commercial redistribution (AGPL-3.0 applies)
• you need cloud-maned zero-trust access rather than a self-hosted bastion

Facets

application · maturity active

auth authorization ssh security logging self-hosted gui security self-hosted infrastructure-as-code self-hosted go bastion-host jump-server pam session-recording rdp vnc 4a audit devops linux docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="veops/oneterm")