BA

Bastillion

Web-based SSH console and key management

Remote Access & VPN ★ 3.6k stars Medium setup GPL-3.0

Bastillion is an open-source, web-based SSH console that centrally manages access to systems and distributes SSH keys. It is self-hosted to provide audited, browser-based administrative access to servers.

Key features

  • Web SSH console
  • SSH key distribution
  • Session auditing
  • Multi-user access control

Strengths

  • Released under the GPL-3.0 license
  • First-class Docker support for quick deployment
  • Active community (3.6k GitHub stars)
  • Written in Java

Is Bastillion secure?

No known vulnerabilities affect Bastillion's latest release (v6.0.0). OSV.dev lists 1 past advisory for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-75627, published 2026-08-18 (57 days ago)

Source: OSV.dev, checked 2026-10-14. How this is measured.

Bastillion replaces

Health badge

Maintain Bastillion? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 90 · excellent

Markdown
[![SelfHostIndex health score for Bastillion](https://selfhostindex.com/badge/bastillion.svg)](https://selfhostindex.com/app/bastillion/)
HTML
<a href="https://selfhostindex.com/app/bastillion/"><img src="https://selfhostindex.com/badge/bastillion.svg" alt="SelfHostIndex health score for Bastillion"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/bastillion.svg
   :alt: SelfHostIndex health score for Bastillion
   :target: https://selfhostindex.com/app/bastillion/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Bastillion

6 head-to-head comparisons.

Similar remote access & vpn apps