The Bastion
The facts below are what the maker publishes about The Bastion, checked and dated. Our editors have not written about it yet.
Plans and prices
From The Bastion's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| The Bastion | Free | Self-hosted; tested Linux distributions and FreeBSD versions are listed in the installation guide |
The facts
Each one read from The Bastion's own pages, with the date it was checked.
What it does
- Access controls
- It provides personal and group access schemes with delegated group roles.checked 9 Oct 2026
- Auditability
- Allowed and denied accesses and actions are logged to syslog and/or local SQLite databases.checked 9 Oct 2026
- Automation
- An optional Puppet module handles configuration and prerequisites.checked 9 Oct 2026
- Compliance context
- The documentation says the code is used in production in environments certified for PCI-DSS, ISO 27001, SOC1, and SOC2.checked 9 Oct 2026
- Deployment
- The installation guide says The Bastion expects to be the only main service running on its server.checked 9 Oct 2026
- Integrations
- Documented integrations and protocols include MOSH, SCP, the NETCONF SSH subsystem, Yubico PIV keys, and HTTPS proxying.checked 9 Oct 2026
- Intended users
- The documentation identifies sysadmins, developers, DevOps, and database administrators as examples of operational teams that use a bastion.checked 9 Oct 2026
- JSON API
- The JSON API interacts with plugins over SSH, using the existing authentication and user isolation mechanisms rather than a separate HTTPS port.checked 9 Oct 2026
- Logging
- It supports extensive syslog output for SIEM consumption.checked 9 Oct 2026
- Protocol break
- It breaks the SSH protocol between ingress and egress connections, enabling session recording and access auditability.checked 9 Oct 2026
- Purpose
- The Bastion is a single entry point for operational teams to securely connect to infrastructure machines, usually over SSH.checked 9 Oct 2026
- Security model
- The security design uses UNIX discretionary access controls, maps bastion users and groups to system users and groups, and runs code with unprivileged account rights.checked 9 Oct 2026
- Session recording
- It supports interactive and non-interactive session recording in ttyrec files.checked 9 Oct 2026
- Supported operating systems
- The guide lists Debian, RockyLinux, Ubuntu LTS, OpenSUSE Leap, and FreeBSD versions tested with each release; FreeBSD has partial MFA support.checked 9 Oct 2026
The company
- Founded
- 1999checked 28 Sep 2026
- Headquarters
- Roubaix, Francechecked 28 Sep 2026
Alternatives to The Bastion
- 1
Tailscale
Free planOpen sourceAndroidiOSWebAPI8.7From $1 a month - 2
Cloudflare Access
Free planAndroidiOSWebAPI7.8$7 usage-based - 3
VShell Server
WebAPILinuxmacOS7.5$599 one-time - 4
Boundary
Free planWebAPILinuxmacOS7.3Free plan - 5
Bastillion
Free planWebLinuxmacOSSelf-hosted7.1From $149 a year - 6
Bitvise SSH Server
Free planSelf-hostedWindows6.9Free plan