Boundary
7.3#4 in ssh server softwareFree planFree planWebAPILinuxmacOS
VisitBoundary vs The Bastion
The Bastion
5.9#23 in ssh server softwareFree planFree planAPILinuxSelf-hosted
VisitWhat both publish
| Fact | Boundary | The Bastion |
|---|---|---|
| Access controls | Boundary supports just-in-time and least-privilege network access, role-based authorization, and single sign-on through OIDC and LDAP. | It provides personal and group access schemes with delegated group roles. |
| Automation | Boundary supports Terraform for automated deployment and configuration and provides a REST API, CLI, and SDK. | An optional Puppet module handles configuration and prerequisites. |
| Founded | 2020 | 1999 |
| Headquarters | San Francisco, California, United States | Roubaix, France |
| Purpose | Boundary provides identity-based, authenticated access to infrastructure without requiring users to access the underlying network directly. | The Bastion is a single entry point for operational teams to securely connect to infrastructure machines, usually over SSH. |
Boundary plans
- Boundary Community EditionFree
- HCP Boundary PlusFree
- HCP Boundary StandardFree
- Boundary EnterprisePriced on request
The Bastion plans
- The BastionFree
Pick Boundary if…
Boundary suits organizations that need controlled access to infrastructure across a hybrid deployment. It is also relevant to teams using Vault, Terraform, or identity providers such as Okta, Microsoft Entra ID, Auth0, and LDAP.
Pick The Bastion if…
You want what its maker publishes above — check its page for the details.