Teleport logo

7 self-hosted Teleport alternatives

Teleport is a cloud access platform that provides identity-based access to SSH servers, Kubernetes clusters, databases and internal web apps. It enforces SSO/OIDC/SAML, short-lived certificates, role-based access, session recording and audit logging.

Alternatives to Teleport

OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.

OpenVPN screenshot

14.4k stars3.4k forkslast commit Actively maintained

Self-hosted transparent bastion host and PAM for SSH, HTTPS, MySQL and Postgres with RBAC, session recording, and SSO/2FA—no client-side software required.

Warpgate screenshot

7.7k stars356 forksApache-2.0last commit Actively maintained

Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.

Pomerium screenshot

5k stars350 forksApache-2.0last commit Actively maintained

Centralized SSH gateway to remotely manage Linux servers, containers and IoT devices via web or native SSH; offers key auth, firewall rules, audit logging and session recording.

ShellHub screenshot

2.1k stars188 forksApache-2.0last commit Actively maintained

Single-binary TLS reverse proxy for self-hosted apps that provides SSH- and Telegram-based authorization, simple SSO, Let's Encrypt support and whitelist access control.

188 stars9 forksGPL-3.0last commit Likely dormant

Advanced SSH server and bastion that authenticates via OpenID Connect or keys, runs sessions inside Docker containers or Kubernetes pods, and supports automatic user provisioning.

Engity's Bifröst screenshot

83 stars2 forksApache-2.0last commit Actively maintained

What replacing Teleport actually involves

Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 6 of 7 shipped a commit in the last six months. Licences in this list: Apache-2.0, GPL-3.0. In exchange you take on hosting, backups and updates yourself.

Browse everything in Identity & Access Management (IAM).

Other tools people replace alongside Teleport