Octelium
What it is
Octelium is free, open-source, self-hosted software for secure access by people, workloads, and AI agents to hybrid infrastructure, SaaS, and applications. It places resources behind identity-aware proxies and applies authorization policies at the application layer. Listed protocols and services include HTTP, gRPC, web applications, SSH, Kubernetes, PostgreSQL, MySQL, RDP, DNS, SOCKS5, TCP, UDP, MCP, and LLM modes. Cluster Secrets can hold upstream credentials and inject them after authorization, avoiding credential storage by users or workloads. Identity integrations include OIDC and SAML 2.0 providers such as Okta, Microsoft Entra ID, Google Workspace, Keycloak, and Auth0, plus GitHub OAuth2. Authentication options include FIDO2 and WebAuthn passkeys, TPM 2.0, and TOTP. MCP authorization can cover tool calls and arguments, while the LLM gateway applies model and token limits and records usage. Kubernetes deployment supports a quick single-node installer or larger managed and on-premises clusters.
For and against
For
- Free plan for personal and evaluation use
- Supports many infrastructure and application protocols
- Secretless credential injection after authorization
- Multiple identity and authentication integrations
- Runs on Kubernetes deployments
Against
- Self-hosted deployment requires Kubernetes
- Enterprise features require a commercial package
- Larger deployments need multi-node Kubernetes
The verdict
Octelium brings identity-aware authorization, protocol coverage, secret handling, and AI gateway controls into a Kubernetes-based platform. The free offering is self-hosted, while enterprise capabilities are provided through a separate commercial package.
Who it suits
It suits organizations needing self-hosted, policy-based access across infrastructure, applications, workloads, or AI agents. Kubernetes operators and teams requiring identity integration, auditing, or gateway controls may find its scope relevant.
Plans and prices
Free and open source
Self-hosted; free forever for personal and evaluation use
Read 8 Oct 2026 · octelium.com
Enterprise package
Commercial license; premium support; enterprise features
Read 8 Oct 2026 · octelium.com
On the record
- Access model
- It places protected resources behind identity-aware proxies and authorizes requests at the application layer using policies.octelium.com · read 8 Oct 2026
- AI gateway
- Its MCP gateway can authorize tool calls and arguments, while its LLM gateway can apply model and token limits and record token usage.octelium.com · read 8 Oct 2026
- Authentication
- Native authentication options include FIDO2 and WebAuthn passkeys, TPM 2.0, and TOTP.octelium.com · read 8 Oct 2026
- Company history
- Octelium says development began in 2020 and Octelium Labs, LLC was established in January 2025.octelium.com · read 8 Oct 2026
- Deployment
- Octelium runs on Kubernetes; its quick installer can provision a single-node Cluster on a fresh Linux VM or server, and larger deployments can use managed or on-premises multi-node Kubernetes.octelium.com · read 8 Oct 2026
- Enterprise features
- The enterprise package lists a web console, SCIM 2.0 provisioning, encrypted Secret management, just-in-time access, multi-region Clusters, managed upgrades, premium support, and commercial licensing.octelium.com · read 8 Oct 2026
- Identity integrations
- Human identity support includes OIDC and SAML 2.0 providers such as Okta, Microsoft Entra ID, Google Workspace, Keycloak, and Auth0; GitHub OAuth2 is also listed.octelium.com · read 8 Oct 2026
- Secretless access
- Upstream credentials are stored as Cluster Secrets and injected after authorization so users and workloads do not need to hold them.octelium.com · read 8 Oct 2026
- Security evidence
- Octelium says its identity-aware, application-level auditing can provide access evidence for SOC 2, ISO/IEC 27001, and internal security controls.octelium.com · read 8 Oct 2026
- SIEM integrations
- The enterprise page lists telemetry integrations including Datadog, Splunk, Elastic, Grafana, ClickHouse, Kafka, Prometheus, Azure Monitor, and Logz.io.octelium.com · read 8 Oct 2026
- Supported protocols
- The product lists HTTP, gRPC, web applications, SSH, Kubernetes, PostgreSQL, MySQL, RDP, DNS, SOCKS5, TCP, UDP, MCP, and LLM modes.octelium.com · read 8 Oct 2026
- Visibility and auditing
- The platform describes OpenTelemetry-based, layer-7-aware logs and metrics, including request details, database queries, Kubernetes operations, and SSH session recordings.octelium.com · read 8 Oct 2026
- What it does
- Octelium is an open-source, self-hosted secure access platform for humans, workloads, and AI agents accessing hybrid infrastructure, SaaS, and applications.octelium.com · read 8 Oct 2026
