A Modern, Self-Hosted, Secure Remote Access Solution
A Complete, Scalable, Self-Hosted, Secure Remote Access Solution for Developers and Teams to Access any Internal Resource of any Type Running behind NAT Anywhere
Open Source, Self-Hosted Homelab Infrastructure for Remote Access, Hosting and Deployment
Everything you need, in one platform.
Unified Architecture for Client-based and Clientless Access
A Unified Zero Trust Architecture that Supports both the Private VPN-like Client-based Mode over WireGuard/QUIC Tunnels as well as the Client-less Public BeyondCorp Mode via Browsers.
A Platform for Deployment and Public Hosting, too
Seamlessly Deploy Containers via Octelium and Provide Secure as well as Public Anonymous Access for your Containerized Microservices such as APIs, Blogs and Development as well as Production Web Applications.
Integrate your GitHub and OIDC/SAML SSO Providers
Seamlessly integrate any OpenID Connect or SAML 2.0 SSO Provider as well as GitHub OAuth2.
Secretless Access to APIs, SSH and Databases
Provide Secretless Access to SSH Servers, HTTP-based APIs, Databases and mTLS-based Applications
Identity-based, L7 Aware Access Control
Application-layer Aware Access Control via Identity-based Context-aware ABAC and Policy-as-Code via CEL and Open Policy Agent (OPA)
OpenTelemetry-native Real-time Visibility
OpenTelemetry-ready Layer-7 Aware, Real-Time Visibility and Auditing to Your Log Management and SIEM Providers
Centralized, Declarative and Programmable Management
Designed to be Administered like Kubernetes via DevOps/GitOps-friendly Centralized and Declarative Way. The Cluster is furthermore fully Programmable over gRPC.
Dynamic, Native MFA and Login with FIDO2 Passkey, TPM 2.0 and TOTP
Dynamically Apply Native FIDO2 Passkey/WebAuthn, Time-based one-time Password (TOTP) Authentication and TPM 2.0 Authentication. Enforce Using Attested Hardware-based FIDO2 Authenticators in your Access Control Decisions.
Automatic, Centralized Private DNS
A unified, automatically managed, private DNS using your own domain for all resources scattered across the different remote networks that works consistently and independently of the dynamic network details of the upstreams. Furthermore, protect and audit all DNS queries using your own fallback servers (e.g. Pi-hole or commercial DNS servers) for all connected Users.
Get started
Deploy Octelium on your own infrastructure in minutes.
Free and open source. Self-hosted. No vendor lock-in.