Bastillion is a web-based SSH console and SSH key management tool — a bastion host with a friendly browser dashboard. Register a system once; Bastillion pushes its own SSH key to it, so users never hold long-lived keys to your servers themselves. Authorized users then open live, resizable web terminals to one or more systems at once, with commands optionally broadcast to every open session simultaneously.
Highlights: centralized SSH key management (rotate/revoke access to every system instantly); two-factor authentication (Authy or Google Authenticator); every terminal session is recorded and can be replayed for audits (PCI DSS, HIPAA, SOC 2, ISO 27001); Profiles control who can reach which systems; Composite Scripts run the same script across a whole fleet; TLS/HTTPS out of the box with custom certificate support; optional LDAP authentication.
Ships as a single self-contained jar with an embedded H2 database. Free for up to 5 systems.
Features
- Web-based multi-session SSH terminal with command broadcast
- Centralized SSH key management, rotation, and revocation
- Two-factor authentication (Authy / Google Authenticator)
- Session recording with streamed replay for audits
- Profile-based access control across systems and users
- Composite Scripts to run one script across many hosts
- Built-in TLS/HTTPS with support for custom certificates
- Optional LDAP external authentication
- Self-contained single-jar deployment with embedded H2 database