Skip to content

warpgate

Secrets & Credentials

Fully transparent SSH, HTTPS, Kubernetes, MySQL and Postgres bastion/PAM that doesn't need additional client-side software

Track releases GitHub Website
Rust Latest v0.26.1 · 20d ago Security brief →

Features

  • Acts as a bastion host for SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC without needing client apps or wrappers
  • Records every session live and allows replay through an admin web UI
  • Supports native 2FA, SSO (TOTP & OpenID Connect), brute‑force protection with IP blocking and user lockout
  • Distributed as a single dependency‑free binary written in safe Rust

Recent releases

View all 22 releases →
No immediate action
v0.26.1 Bug fix

WebSSH + API playground fixes

Open
Review required
v0.26.0 New feature
Auth RBAC

Brute-force + SSH banner + toggles

Open
Upgrade now
v0.25.6 Security relevant
Auth RBAC

Critical auth security fixes

Open
Upgrade now
v0.25.5 Breaking risk
Auth

High‑severity login URL redirect fix

Open
No immediate action
v0.25.4 Bug fix

Postgres protocol version fix

Open

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
7,368
Forks
315
Languages
Rust Svelte Python
View on GitHub Homepage Documentation

Community & Support

Discord

Similar tools

Yopass
authgear-server
vaultwarden
getaegis/aegis
Totpgate

Alternative to

jump host VPN Teleport

Beta — feedback welcome: [email protected]