# Bastillion

> Self-hosted bastion host with browser-based SSH terminal, centralized key management, and full session recording. Supports 2FA, SAML SSO, LDAP, runs as a single Java JAR.

- **Category:** SSH
- **Licence:** Other
- **Latest version:** v6.0.3
- **Open source:** source_available
- **Languages:** Java, HTML
- **Platforms:** Java, Build from Source
- **Tags:** Security, Devops, LDAP, 2FA, Compliance, Web Based, Remote Access, Audit, Ssh, Session recordings, Web Terminal, Javascript, Java, SAML, Self Hosted, Web App, Remote Access, Ssh Server, Bastion Host, Two Factor Authentication, Ssh Client, SSH Key Management, Ssh Key

## Description

Bastillion is a self-hosted SSH bastion host that provides a browser-based terminal for accessing managed servers without distributing individual SSH keys. The application creates its own key pair and installs the public key on target hosts, then lets authorized users open live terminal sessions in the browser with optional command broadcasting to multiple hosts at once. All session activity is recorded and replayable for compliance auditing. Authentication options include TOTP two-factor, SAML 2.0 single sign-on with providers like Entra ID and Okta, and LDAP/Active Directory integration. It runs as a single Java 21 JAR that includes a Jetty server and H2 database, serving HTTPS on port 8443 with a self-signed certificate by default. The free tier supports up to 8 registered systems; paid licenses increase that limit.

## Links

- [Homepage](https://github.com/loophole-llc/bastillion)
- [Website](https://loophole.company)
- [GitHub Repository](https://github.com/Loophole-LLC/Bastillion)
- [Releases](https://github.com/Loophole-LLC/Bastillion/releases)
- [Pricing](https://loophole.company/pricing.html)
- [Migration Tool](https://github.com/Loophole-LLC/Bastillion/tree/main/tools/migrate)

---
Source: https://selfhost.directory/project/bastillion