Cardea is described as 'SSH bastion server with access control, session recording, and optional TPM-backed key protection, designed for small and mid-sized teams that manage infrastructure through code. Access rules live in a text file, so they can be reviewed in pull requests and' and is an app in the network & admin category. There are nine alternatives to Cardea for a variety of platforms, including Self-Hosted, Linux, Web-based, Windows and Mac apps. The best Cardea alternative is Fudo, which is free. Other great apps like Cardea are BastionZero, Warpgate Bastion, Bastillion and Engity's Bifröst.
Fudo provides the best protection for remote connections to Unix/Windows servers, databases, or web applications. With the Zero-Trust approach, users only have access to specific applications and accounts for a reason and when they really need it.
BastionZero delivers zero trust access without creating a single point of compromise. It pairs with your IdP to quickly grant access with policy controls and observability — without a mess of passwords, VPNs, and SSH keys.
Warpgate is a smart SSH, HTTPS, Kubernetes, MySQL and PostgreSQL bastion host for Linux that doesn't need special client apps.
Bastillion is an open-source web-based SSH console that centrally manages administrative access to systems. It acts as a bastion host for administrators with features that promote infrastructure security.
Highly customizable SSH server with several ways to authorize a user and options where and how to execute a user's session.
Single sign-on for everything your staff needs: databases, servers, Kubernetes, cloud CLIs, intranets, and web apps. Try it Free.
JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser.
Boundary is a software solution that facilitates access to applications and vital systems through fine-grained authorizations. It operates on an identity-based access model, eliminating the need to manage credentials or expose your network.
Teleport is an identity-aware, multi-protocol access proxy which understands SSH, HTTPS, RDP, Kubernetes API, MySQL, MongoDB and PostgreSQL wire protocols.
United States
Germany
EU
