Bastillion
Web-based SSH console and key management for centralized server access
About Bastillion
Bastillion is an open-source web-based SSH console that centrally manages administrative access to systems. It acts as a bastion host with a browser-based dashboard for SSH key management, user access control, multi-system command execution, and session auditing with support for LDAP integration and two-factor authentication.
Pros & Cons
Pros
- Free and open-source under the Prosperity Public License
- Eliminates need for individual SSH client installations across the team
- Strong security with stacked TLS/SSH protocols and enforced key passphrases
- Built-in session auditing for compliance requirements
- LDAP integration simplifies user management in enterprise environments
Cons
- Self-hosted only, requires server setup and maintenance
- Java-based application may require JVM expertise for deployment
- Limited commercial support compared to enterprise alternatives
- UI is functional but dated compared to modern SSH management tools
Key Features
Web-Based SSH Console
Run SSH sessions through the browser without requiring client software or plugins
SSH Key Management
Distribute and manage SSH public keys across systems through administrative profiles
Profile-Based Access Control
Grant system access through profiles with granular user permissions and instant revocation
Multi-System Commands
Share and execute commands across multiple systems simultaneously for patching and debugging
Session Auditing
Full-privilege admins can audit other user sessions to ensure compliance with organizational guidelines
Two-Factor Authentication
Supports 2FA via FreeOTP or Google Authenticator on mobile devices
LDAP Integration
Integrate authentication with LDAP and map roles to Bastillion profiles
Stacked Security Protocols
TLS/SSL layered with SSH prevents infrastructure exposure through tunneling or port forwarding
Pricing
- Full SSH console
- Key management
- Profile-based access
- Session auditing
- 2FA support
- LDAP integration
- Pre-configured EC2 deployment
- AWS-optimized setup
- All open-source features
Best For
Server Administration
Centralize SSH access for IT teams managing multiple Linux servers through a single web interface
SSH Key Rotation
Enforce strong SSH key policies with automatic distribution and the ability to disable any key at any time
Compliance Auditing
Monitor and audit admin sessions to meet security compliance requirements
Team Onboarding
Quickly provision and revoke server access for team members through profile-based access control
Similar Tools
Proton Mail
Secure, privacy-first email built in Switzerland
Plesk
Build, secure, and run apps and websites from one control panel
Tuta
Secure email with quantum-resistant encryption
Runbox
Privacy-focused email hosting powered by Norwegian renewable energy
Odoo
Modular open-source ERP for manufacturing & beyond
Google Fonts
Free, open-source web fonts for modern design and development