Secretless SSH Access at Scale
Provide Passwordless Zero Trust SSH Access for your Users and Eliminate Managing PKIs, Distributing and Sharing Long Standing Passwords and Private Keys without any Changes in your SSH Servers or Clients
Seamless, Secretless, Zero Trust Secure SSH Access with SSO and FIDO2 Keys at any Scale
Everything you need, in one platform.
Identity-based, Context aware Configuration
Dynamically Force Your Different Users to Log in as Specific SSH Users depending on their Identity and Context
OpenTelemetry-Ready Detailed Visibility
OpenTelemetry-ready Application-layer aware Visibility and Full Recording of Sessions, Ready to be Analyzed by your SIEM in Real-Time
Integrate your OIDC/SAML SSO Providers
Seamlessly integrate any OpenID Connect or SAML 2.0 SSO Provider as well as GitHub OAuth2. Force Strong MFA via FIDO2 Phishing Resistant Authenticators into Access Control to Sensitive SSH Servers.
Serverless SSH to Machines, Containers and IoT
Seamlessly Provide Secretless SSH to Hosts without SSH Servers such as Containers and IoT Fleets via Embedded SSH Servers running within Octelium Clients
Centralized, Declarative and Programmable Management
Designed to be Administered like Kubernetes via DevOps/GitOps-friendly Centralized and Declarative Way. The Cluster is furthermore fully Programmable over gRPC.
Dynamic, Native MFA and Login with FIDO2 Passkey, TPM 2.0 and TOTP
Dynamically Apply Native FIDO2 Passkey/WebAuthn, Time-based one-time Password (TOTP) Authentication and TPM 2.0 Authentication. Enforce Using Attested Hardware-based FIDO2 Authenticators in your Access Control Decisions.
Get started
Deploy Octelium on your own infrastructure in minutes.
Free and open source. Self-hosted. No vendor lock-in.