Bastillion centralizes SSH access behind one web console. Every session is recorded and replayable line-by-line for PCI DSS/HIPAA/SOC 2 audit trails. Ships as a single self-contained JAR (embedded Jetty + HTTPS) on Java 21/Jakarta EE 11, with Ed25519/Ed448 SSH key support. Hardened CSRF protection, secure cookies, PBKDF2 hashing, and per-IP login throttling round out the security model. Free for up to 5 systems; source-available under the Prosperity License.
No reviews yetBe the first to leave a review for Bastillion
Maker
📌
Hey Product Hunt! I built Bastillion to get rid of scattered SSH keys and ad-hoc bastion boxes — one web console to grant and revoke SSH access, and see exactly what happened on a server afterward.
Recent releases added: a single self-contained JAR (embedded Jetty + HTTPS, no app server needed), a move to Java 21 / Jakarta EE 11, Ed25519/Ed448 SSH key support, session recording and replay enabled by default for audit trails (PCI DSS, HIPAA, SOC 2, ISO 27001), and a hardened auth layer (CSRF protection, secure cookies, PBKDF2 hashing, per-IP login throttling).
It's source-available under the Prosperity License and free to run for up to 5 systems. Would love your feedback!