Bastillion
Web-based SSH console and key management for centralized server access
Founded
N/A
Starting Price
Free
Category
Security & IT
Last updated March 18, 2026
About Bastillion
Bastillion is an open-source web-based SSH console that centrally manages administrative access to systems. It acts as a bastion host with a browser-based dashboard for SSH key management, user access control, multi-system command execution, and session auditing with support for LDAP integration and two-factor authentication.
Pros & Cons
Pros
- Free and open-source under the Prosperity Public License
- Eliminates need for individual SSH client installations across the team
- Strong security with stacked TLS/SSH protocols and enforced key passphrases
- Built-in session auditing for compliance requirements
- LDAP integration simplifies user management in enterprise environments
Cons
Key Features
Web-Based SSH Console
Run SSH sessions through the browser without requiring client software or plugins
SSH Key Management
Distribute and manage SSH public keys across systems through administrative profiles
Profile-Based Access Control
Grant system access through profiles with granular user permissions and instant revocation
Multi-System Commands
Share and execute commands across multiple systems simultaneously for patching and debugging
Session Auditing
Full-privilege admins can audit other user sessions to ensure compliance with organizational guidelines
Two-Factor Authentication
Supports 2FA via FreeOTP or Google Authenticator on mobile devices
LDAP Integration
Integrate authentication with LDAP and map roles to Bastillion profiles
Pricing
Open Source
Free
- Full SSH console
- Key management
- Profile-based access
- Session auditing
- 2FA support
Best For
Server Administration
Centralize SSH access for IT teams managing multiple Linux servers through a single web interface
SSH Key Rotation
Enforce strong SSH key policies with automatic distribution and the ability to disable any key at any time
Compliance Auditing
Monitor and audit admin sessions to meet security compliance requirements
Team Onboarding
Quickly provision and revoke server access for team members through profile-based access control
