- Home
- Remote desktop software
- Apache Guacamole
Apache Guacamole
What it is
Apache Guacamole is a free, open-source remote desktop gateway that provides browser access to remote machines. It supports VNC, RDP, and SSH, and works after installation on a server without browser plugins or separate client software. Connected desktops may be hosted in the cloud. Access is available through web browsers, mobile phones, and tablets, with file transfer and session recording listed among its capabilities. The project documents native and Docker installation methods and offers core APIs for integrating Guacamole into open-source or proprietary applications. Authentication extensions include Active Directory or LDAP, multi-factor authentication, single sign-on, smart cards and certificates, vault secrets, and RADIUS. The software uses Apache License, Version 2.0. Its manual recommends SSL/TLS protection and safeguards against brute-force attacks. SSH and SFTP identity checks are not enabled by default but can be configured. Community help uses subscription-based public mailing lists, while third-party commercial support is separately listed.
For and against
For
- Supports VNC, RDP, and SSH connections
- Works through browsers without client software
- Offers file transfer and session recording
- Provides native and Docker installation methods
- Includes documented integration APIs
Against
- Requires installation on a server
- SSH host verification is off by default
- Mailing-list support requires subscription
- Commercial providers are not endorsed or vetted
The verdict
Apache Guacamole provides a free gateway for browser-based remote desktop access with broad protocol and authentication support. Administrators should configure transport protection, brute-force defenses, and SSH host verification before use.
Who it suits
It suits organizations that want self-hosted, browser-based access to VNC, RDP, or SSH desktops across computers and mobile devices. Developers can also use its documented APIs and authentication extensions.
Plans and prices
Apache Guacamole
Free and open source · Apache License, Version 2.0
Read 7 Oct 2026 · guacamole.apache.org
On the record
- Access mode
- bothguacamole.apache.org · read 20 Sep 2026
- Authentication integrations
- The manual lists extensions for Active Directory or LDAP, multi-factor authentication, single sign-on, smart cards and certificates, vault secrets, and RADIUS.guacamole.apache.org · read 7 Oct 2026
- Browser access
- After Guacamole is installed on a server, users can access desktops through a web browser without plugins or client software.guacamole.apache.org · read 7 Oct 2026
- Cloud desktops
- Desktops accessed through Guacamole can be hosted in the cloud rather than physically present.guacamole.apache.org · read 7 Oct 2026
- Commercial support
- The project lists third-party commercial support providers and says the Apache Software Foundation does not endorse or vet them.guacamole.apache.org · read 7 Oct 2026
- Community support
- The project's primary support channel is its public mailing lists, which require users to subscribe before posting.guacamole.apache.org · read 7 Oct 2026
- Current release
- The release page identifies version 1.6.0, dated 2025-06-22, as the current release.guacamole.apache.org · read 7 Oct 2026
- Deployment
- The project documents native and Docker installation methods.guacamole.apache.org · read 7 Oct 2026
- File transfer
- File transfer is supported for VNC, RDP, and SSH when the underlying protocol supports it and the feature is enabled.guacamole.apache.org · read 7 Oct 2026
- Integration API
- Guacamole provides documented core APIs that can be integrated into open source or proprietary applications.guacamole.apache.org · read 7 Oct 2026
- Licensing
- The project describes the software as free and open source and licenses it under Apache License, Version 2.0.guacamole.apache.org · read 7 Oct 2026
- Purpose
- Apache Guacamole is a clientless remote desktop gateway that supports protocols including VNC, RDP, and SSH.guacamole.apache.org · read 7 Oct 2026
- Security guidance
- The manual recommends encrypting communication between users and Guacamole with SSL/TLS and using a mechanism to prevent brute-force attacks.guacamole.apache.org · read 7 Oct 2026
- Session recording
- Yesguacamole.apache.org · read 20 Sep 2026
- SSH host verification
- SSH and SFTP server identity verification is not performed by default, but can be configured using known-hosts data or connection parameters.guacamole.apache.org · read 7 Oct 2026
- Supported platforms
- web browsers,mobile phones,tabletsguacamole.apache.org · read 20 Sep 2026
