#1
Secure access platform for servers, Kubernetes, databases, desktops, and web apps with SSO/MFA, short-lived certificates, and full session auditing.
20.9k stars2.1k forksAGPL-3.0last commit Actively maintained
7 self-hosted BeyondTrust Privileged Remote Access alternatives
Cloud-based privileged remote access and secure remote support platform for IT and OT environments. Provides audited and recorded remote sessions, credential injection, least-privilege access controls, vendor and administrator access management, and centralized policy enforcement.
Alternatives to BeyondTrust Privileged Remote Access
#2
Self-hosted transparent bastion host and PAM for SSH, HTTPS, MySQL and Postgres with RBAC, session recording, and SSO/2FA—no client-side software required.
7.7k stars356 forksApache-2.0last commit Actively maintained
#3
Nexterm is an open-source server management platform providing SSH, VNC and RDP access, SFTP file management, Docker deployment, Proxmox integration, monitoring and SSO.
5k stars265 forksMITlast commit Actively maintained
Docker images providing full Linux desktop environments in your browser, with multiple distro and desktop flavors and optional GPU acceleration.
4.4k stars373 forksGPL-3.0last commit Actively maintained
Open-source browser-based gateway enabling VNC, RDP, and SSH access to remote desktops without client software.
4k stars799 forksApache-2.0last commit Actively maintained
#6
Single-binary TLS reverse proxy for self-hosted apps that provides SSH- and Telegram-based authorization, simple SSO, Let's Encrypt support and whitelist access control.
188 stars9 forksGPL-3.0last commit Likely dormant
Advanced SSH server and bastion that authenticates via OpenID Connect or keys, runs sessions inside Docker containers or Kubernetes pods, and supports automatic user provisioning.
83 stars2 forksApache-2.0last commit Actively maintained
What replacing BeyondTrust Privileged Remote Access actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 6 of 7 shipped a commit in the last six months. Licences in this list: AGPL-3.0, Apache-2.0, MIT, GPL-3.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Remote Access & Remote Desktop.
