Warpgate

Smart SSH, HTTPS and MySQL bastion host

Remote Access & VPN ★ 8.1k stars Medium setup Apache-2.0

Warpgate is a smart, open-source bastion host for SSH, HTTPS, and MySQL that requires no client-side software. It records sessions and enforces multi-factor authentication.

Key features

  • SSH, HTTPS, and MySQL bastion
  • Session recording
  • MFA support
  • No client software needed

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Mature project with 8.1k GitHub stars
  • Written in Rust

Is Warpgate secure?

No known vulnerabilities affect Warpgate's latest release (v0.29.2). OSV.dev lists 11 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-58491, published 2026-09-21 (23 days ago), fixed in 0.25.5

Source: OSV.dev, checked 2026-10-14. How this is measured.

Warpgate replaces

Health badge

Maintain Warpgate? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 93 · excellent

Markdown
[![SelfHostIndex health score for Warpgate](https://selfhostindex.com/badge/warpgate.svg)](https://selfhostindex.com/app/warpgate/)
HTML
<a href="https://selfhostindex.com/app/warpgate/"><img src="https://selfhostindex.com/badge/warpgate.svg" alt="SelfHostIndex health score for Warpgate"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/warpgate.svg
   :alt: SelfHostIndex health score for Warpgate
   :target: https://selfhostindex.com/app/warpgate/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Warpgate

4 head-to-head comparisons.

Similar remote access & vpn apps