gravitational/teleport

Features

• Zero Trust Access - Provides identity-based, least-privileged access to infrastructure resources without relying on static credentials.
• Remote Access - Provides unified access to remote server resources through web-based terminals or command-line interfaces to manage distributed environments from any location.
• Identity-Based Tunnels - Connects users to remote infrastructure through identity-based tunnels to remove the complexity and security risks of traditional VPNs.
• Authentication Gateways - A centralized control plane that consolidates authentication and authorization workflows across distributed, multi-cloud, and on-premises environments.
• Identity-Aware Proxies - A secure connectivity layer that replaces traditional VPNs by routing traffic through identity-verified tunnels to internal applications and resources.
• Federated Access - The platform establishes trust between independent clusters to allow users to access resources across multiple environments through a single authentication point.
• Infrastructure - The platform captures interactive session activity and protocol-level events across infrastructure resources to provide a comprehensive audit trail for compliance.
• Self-Hosted Infrastructure Platforms - Sets up centralized management infrastructure to coordinate identity verification, audit logging, and unified access control across distributed environments.
• Access Auditing - The platform records and logs detailed events for all infrastructure interactions to provide a comprehensive trail of user and machine activity.
• Credential Lifecycle Management - Automates the issuance, rotation, and expiration of short-lived digital identities to eliminate standing access and long-term secret exposure.
• Mutual Authentication - Requires mutual identity verification between clients and servers using cryptographic certificates for all communications.
• Privileged Access Management - A security solution that enforces role-based access controls, session recording, and audit logging for sensitive infrastructure and administrative tasks.
• Role-Based Access Control - Enforces granular authorization policies by mapping external identity provider claims to specific infrastructure permissions and ephemeral user privileges.
• Deployment Agents - Installs lightweight services on remote servers or databases to establish secure, identity-based connectivity and enforce access policies.
• Remote Access Clients - Provides command-line and desktop utilities to authenticate users and manage secure connections to remote infrastructure resources.
• Ephemeral Certificate Issuance - The platform generates digital credentials with brief validity periods that automatically expire to reduce the risk of unauthorized access from compromised or stolen secrets.
• Access Request Orchestrators - Automates the lifecycle of infrastructure access requests through approval routing and role-based policy enforcement.
• Audit and Compliance - Recording detailed session logs and system events across distributed environments to maintain a searchable trail for security monitoring.
• Mutual TLS Authentication - Terminates and inspects encrypted traffic at the edge to enforce identity verification and security policies between clients and internal services.
• Security Monitoring - The platform analyzes access patterns and infrastructure configurations to detect vulnerabilities and anomalous behavior across human and machine identities.
• Identity Federation Providers - The platform connects to existing identity providers to issue short-lived certificates or act as a service provider for secure application access.
• Just-in-Time Access - Grants temporary, time-limited infrastructure permissions that automatically expire to minimize standing access risks.
• Machine Identity - The platform automates the lifecycle of credentials for services and bots to enable secure, identity-based access for workloads and continuous integration pipelines.
• Single Sign-On Solutions - The platform consolidates user authentication across multiple applications by connecting to centralized identity providers to simplify access management and improve security.
• Audit Logging Systems - Captures and centralizes session logs, command execution, and system events across heterogeneous environments into a unified, searchable audit trail.
• Overlay Networks - Control plane for secure access to infrastructure and applications.
• Server Infrastructure - Modern SSH server designed for clusters and team access.
• Service Governance and Platforms - Infrastructure access gateway based on zero-trust security models.
• Security and Compliance - Access plane for infrastructure and applications.
• Security And Privacy - Access plane for secure SSH, Kubernetes, and database connections.
• Security & Privacy - Access plane for secure SSH, Kubernetes, and database connectivity.
• Kubernetes Cluster Management - Connects Kubernetes clusters to a centralized management plane through automated discovery or manual agent deployment across various environments.
• Reverse Tunnels - Establishes secure outbound connections from private resources to a central control plane to bypass complex firewall and network configurations.
• Database Identity Mapping - Eliminates shared database accounts by automatically mapping users to individual database identities upon connection.
• Passwordless Authentication - The platform verifies user identity using hardware keys and cryptographic tokens to eliminate the need for traditional passwords during the login process.
• Kubernetes Security - Managing unified authentication and role-based access control for multiple Kubernetes clusters through a centralized identity-aware gateway.
• Policy-Based Access Control - Enforces granular security permissions and access restrictions based on centralized role-based authorization policies.
• Inline Risk Analysis - The platform identifies over-privileged users and detects security risks like exposed keys to maintain a secure access posture.
• Secure Web Gateways - Exposes internal web applications through a secure gateway using unique subdomains and automated certificate management.
• Cluster Configuration Management - Maintains dynamic resources including user roles, local accounts, and infrastructure definitions in a centralized registry.
• Infrastructure Automation - Manages access resources and infrastructure state using command-line tools or configuration files to ensure consistent security policies across the environment.
• CLI Authentication - Generates short-lived certificates for secure, identity-based authentication during command-line interface operations.
• Multi-Factor Authentication - Enforces secondary identity verification requirements for all infrastructure access requests.
• Secure Remote Access - Establishes encrypted, identity-verified tunnels for secure remote access to servers and databases.
• Database Registration - Identifies and enrolls cloud-hosted or local databases into the access system without requiring service redeployment.
• Infrastructure Discovery Tools - Automatically scans and enrolls infrastructure components like servers, databases, and clusters into the centralized access management system.
• Host Networking Services - The platform runs authentication and proxy services within isolated containers to manage secure connectivity for servers, databases, and applications.
• AI Agent Security - Provides secure, audited access controls for autonomous agents interacting with infrastructure and databases.
• Biometric Authentication - The platform verifies user identity using biometric hardware to enable secure, passwordless login flows for protected infrastructure and applications.
• Trust Verification - Validates device integrity and hardware authorization before granting access to protected infrastructure resources.

Star history