Boundary
Identity-based secure access to systems and services
This project is archived. Upstream development has stopped, so expect no new features or security fixes. Consider an actively maintained identity & sso alternative.
Boundary is an open-source tool from HashiCorp that provides identity-based access to hosts and services without distributing network credentials or exposing the network. It brokers and audits sessions.
Key features
- Identity-based access brokering
- No credential distribution
- Session recording and audit
- Dynamic host catalogs
Strengths
- Released under the BUSL-1.1 license
- First-class Docker support for quick deployment
- Active community (4.1k GitHub stars)
- Written in Go
Is Boundary secure?
No known vulnerabilities affect Boundary's latest release (v0.21.3). OSV.dev lists 6 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.
- Most recent fixed advisory CVE-2026-7776, published 2026-05-04 (163 days ago), fixed in 0.19.5
Source: OSV.dev, checked 2026-10-14. How this is measured.
Boundary replaces
Health badge
Maintain Boundary? Add its health score to your README. The badge links back to this page.
Similar identity & sso apps
Keycloak
Identity & SSOOpen-source identity and access management for modern apps
Replaces Okta, Auth0
Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
SuperTokens
Identity & SSOOpen-source user authentication you can self-host
Replaces Auth0, Firebase Auth
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth