Bastillion

Plans and prices

Every plan, in full

On the record

Access controls

Systems can be grouped into profiles that control which users can access them.github.com · read 30 Sep 2026

Authentication

The product supports two-factor authentication, LDAP/JAAS authentication, and SAML 2.0 single sign-on.github.com · read 30 Sep 2026

Centralized keys

Bastillion centrally issues and rotates SSH keys for a team.loophole.company · read 30 Sep 2026

Identity integrations

The maker lists Entra ID, Okta, and ADFS as SAML identity-provider examples.github.com · read 30 Sep 2026

Key types

Bastillion supports Ed25519 and Ed448 SSH keys, with Ed25519 as the default.github.com · read 30 Sep 2026

License terms

Licenses are annual and non-renewing, and one license key can be used across multiple Bastillion deployments.loophole.company · read 30 Sep 2026

Notable limit

A paid license raises the registered-system cap, and each instance enforces the selected tier's cap independently.loophole.company · read 30 Sep 2026

Product

Bastillion is a self-hosted, browser-based SSH console and SSH key-management platform.loophole.company · read 30 Sep 2026

Run requirements

The maker's installation instructions require Java 21 and run Bastillion as a self-contained jar with an embedded server.github.com · read 30 Sep 2026

Security reporting

The project asks users to report vulnerabilities by email to [email protected] and not to open a public issue for non-public vulnerabilities.github.com · read 30 Sep 2026

Session audit

Sessions are recorded and can be replayed; the default retention period is 90 days, and recording can be disabled.github.com · read 30 Sep 2026

Support

The maker lists project, licensing, and support questions at [email protected].loophole.company · read 30 Sep 2026

Terminal access

Users can open live terminal sessions to registered systems in a browser and broadcast commands across multiple sessions.github.com · read 30 Sep 2026

Transport security

Bastillion generates a self-signed certificate and serves HTTPS on first startup; deployments can use a CA-signed certificate instead.github.com · read 30 Sep 2026

Alternatives to Bastillion

T TailscaleAndroidiPhone & iPad+7 CA Cloudflare AccessAndroidiPhone & iPad+5 B BoundaryWebWindows+4 BS Bitvise SSH ServerWindowsSelf-hosted VS VShell ServerWebWindows+4 CS CoreSSH ServerWindowsMac+2 W wolfSSHWindowsMac+3 J JumpServerWebWindows+3

Every alternative, ranked