Bastion Alternatives

Similar projects and alternatives to bastion

sso-wall-of-shame

201 583 8.3 JavaScript bastion VS sso-wall-of-shame

A list of vendors that treat single sign-on as a luxury feature, not a core security requirement.
warpgate

21 3,356 8.1 Rust bastion VS warpgate

Smart SSH, HTTPS and MySQL bastion that requires no additional client-side software
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better bastion alternative or higher similarity.

Suggest an alternative to bastion

bastion reviews and mentions

Posts with mentions or reviews of bastion. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-04-17.

U.S. Arcteryx Outlet restocked. sort of
1 project | /r/arcteryx | 11 Apr 2023

REI Arc Pata and more all use same company for recommerce (https://trove.com/) but obvi ARC is the only 1 to axe all the consumer support/protection
Warning For Trading Into Patagonia Worn Wear
1 project | /r/PatagoniaClothing | 18 Jan 2023

Classic Worn Wear. Unfortunately (or fortunately) this is not a Patagonia company, rather it is "Trove Recommerce" https://trove.com/. They have a terrible track record for customer service and draconian policies when it comes to managing their websites (and others like ReGear, Levi's, etc...)
Warpgate: Smart SSH bastion that works with any SSH client
3 projects | news.ycombinator.com | 17 Apr 2022

At a previous role I made something similar [0] in Golang, but used SSH certificates to manage authentication. This had the added benefit of logging the user connection information in each server’s auth.log based on the generated private key and signed (but short lived) certificate used for auth in the session.
I had it so that a user needed to login to the service with their GSuite account every 24H, and each login required 2fa as well. SSH sessions were recorded in asciicast format (which seems to be used here as well) and there was an audit log to track connections. They could be joined in real time and disconnected from a simple admin interface. The ACL system was a pretty basic method of using regex for defining auth rules.
Worked pretty well and helped with compliance audits we were completing at the time. I think the benefits here of being in Rust is definitely performance and memory safety. Granted, The Go implementation was pretty fast and safe as well. Go made it pretty easy to implement due to the SSH implementation in the standard library.
[0] https://github.com/notion/bastion
A note from our sponsor - InfluxDB
www.influxdata.com | 29 Apr 2024

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →