Bastillion
The facts below are what the maker publishes about Bastillion, checked and dated. Our editors have not written about it yet.
Plans and prices
From Bastillion's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | Up to 5 registered systems · self-hosted |
| Starter | $149 a year | Up to 150 registered systems per instance · $149/yr |
| Team | $399 a year | Up to 500 registered systems per instance · $399/yr |
| Business | $999 a year | Unlimited registered systems per instance · $999/yr |
The facts
Each one read from Bastillion's own pages, with the date it was checked.
What it does
- Access controls
- Systems can be grouped into profiles that control which users can access them.checked 30 Sep 2026
- Authentication
- The product supports two-factor authentication, LDAP/JAAS authentication, and SAML 2.0 single sign-on.checked 30 Sep 2026
- Centralized keys
- Bastillion centrally issues and rotates SSH keys for a team.checked 30 Sep 2026
- Identity integrations
- The maker lists Entra ID, Okta, and ADFS as SAML identity-provider examples.checked 30 Sep 2026
- Key types
- Bastillion supports Ed25519 and Ed448 SSH keys, with Ed25519 as the default.checked 30 Sep 2026
- License terms
- Licenses are annual and non-renewing, and one license key can be used across multiple Bastillion deployments.checked 30 Sep 2026
- Notable limit
- A paid license raises the registered-system cap, and each instance enforces the selected tier's cap independently.checked 30 Sep 2026
- Product
- Bastillion is a self-hosted, browser-based SSH console and SSH key-management platform.checked 30 Sep 2026
- Run requirements
- The maker's installation instructions require Java 21 and run Bastillion as a self-contained jar with an embedded server.checked 30 Sep 2026
- Security reporting
- The project asks users to report vulnerabilities by email to [email protected] and not to open a public issue for non-public vulnerabilities.checked 30 Sep 2026
- Session audit
- Sessions are recorded and can be replayed; the default retention period is 90 days, and recording can be disabled.checked 30 Sep 2026
- Support
- The maker lists project, licensing, and support questions at [email protected].checked 30 Sep 2026
- Terminal access
- Users can open live terminal sessions to registered systems in a browser and broadcast commands across multiple sessions.checked 30 Sep 2026
- Transport security
- Bastillion generates a self-signed certificate and serves HTTPS on first startup; deployments can use a CA-signed certificate instead.checked 30 Sep 2026
The company
- Headquarters
- Garfield Heights, Ohio, United Stateschecked 28 Sep 2026
Alternatives to Bastillion
- 1
Tailscale
Free planOpen sourceAndroidiOSWebAPI8.7From $1 a month - 2
Cloudflare Access
Free planAndroidiOSWebAPI7.8$7 usage-based - 3
VShell Server
WebAPILinuxmacOS7.5$599 one-time - 4
Boundary
Free planWebAPILinuxmacOS7.3Free plan - 5
Bitvise SSH Server
Free planSelf-hostedWindows6.9Free plan - 6
wolfSSH
Free planAPILinuxmacOSSelf-hosted6.8From $2,600 a year