Vauban
The facts below are what the maker publishes about Vauban, checked and dated. Our editors have not written about it yet.
Plans and prices
From Vauban's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Vauban | Free | Free and open source under BSD-2-Clause; no user or asset limits stated |
The facts
Each one read from Vauban's own pages, with the date it was checked.
What it does
- Access control
- Its access policies support roles, groups and asset groups, with Just-In-Time access.checked 8 Oct 2026
- AI agent control
- Vauban describes controls for AI agent action chains, including stated intent, reviewed execution plans, revocation on drift and operator contestation.checked 8 Oct 2026
- Authentication
- Vauban supports TOTP, HOTP, OIDC and SAML single sign-on, and compatibility with LDAP and Active Directory.checked 8 Oct 2026
- Contact
- The maker’s homepage lists [email protected] as its contact email.checked 8 Oct 2026
- License and hosting
- Vauban is offered under the BSD-2-Clause license and is deployed on the customer’s infrastructure, with the maker stating that data does not flow through a third-party cloud.checked 8 Oct 2026
- Purpose
- Vauban is a self-hosted privileged access management system and security bastion for SSH, RDP, IACS and MCP access to critical infrastructure.checked 8 Oct 2026
- Secrets vault
- The secrets vault stores SSH keys, passwords and certificates using AES-GCM encryption and HKDF-SHA3 key derivation.checked 8 Oct 2026
- Security architecture
- The maker describes ten isolated services, privilege separation and Capsicum sandboxing; the project README says Capsicum sandboxing requires FreeBSD, while builds on macOS and Linux lack sandboxing.checked 8 Oct 2026
- Session recording
- Sessions can be recorded as MP4 video with BLAKE3 cryptographic integrity and replayed for audit or investigation.checked 8 Oct 2026
- Support options
- The maker says subscriptions are available for priority security fix notifications, five-year LTS release cycles, certified builds and priority bug resolution; integration services and professional support are available on request.checked 8 Oct 2026
Where it runs
- Browser access
- Users can access Linux and Windows servers through an in-browser SSH terminal or RDP remote desktop.checked 8 Oct 2026
Money
- Industrial protocols
- The FAQ lists Modbus TCP, OPC-UA, PROFINET, IEC 60870-5-104, EtherNet/IP, BACnet/SC, DNP3 and IEC 61850 MMS over sandboxed EWS tunneling.checked 8 Oct 2026
Alternatives to Vauban
- 1

Tailscale
Free planOpen sourceAndroidiOSWebAPI8.7From $1 a month - 2

Cloudflare Access
Free planAndroidiOSWebAPI7.8$7 usage-based - 3
VShell Server
WebAPILinuxmacOS7.5$599 one-time - 4
Boundary
Free planWebAPILinuxmacOS7.3Free plan - 5

Bastillion
Free planWebLinuxmacOSSelf-hosted7.1From $149 a year - 6

Bitvise SSH Server
Free planSelf-hostedWindows6.9Free plan
