jumpserver/jumpserver
Jumpserver
JumpServer is a privileged access management platform designed to manage and audit secure access to SSH, RDP, Kubernetes, and database endpoints. It functions as a centralized gateway that brokers remote terminal and graphical sessions to isolate users from critical infrastructure.
The system utilizes a web-based protocol gateway to translate remote connections into browser-compatible streams and a protocol-based proxy layer to isolate end-user devices from target assets. It incorporates security watermarking to deter unauthorized screen captures and provides a Kubernetes access gateway for controlling administrative cluster access.
Identity governance is handled through integration with external directory services, multi-factor authentication, and biometric identity verification via facial recognition. The platform also includes access activity monitoring to track security events and session lifetime management to control user expiration.
The application supports a pluggable database backend for managing system configuration and logs.
Features
- Privileged Access Management - Provides a centralized platform for securing and monitoring access to sensitive administrative accounts across various infrastructure endpoints.
- Session Brokering - Functions as a centralized gateway that brokers remote terminal and graphical sessions to isolate users from critical infrastructure.
- Access Gateways - Provides a management layer for controlling and auditing administrative access to Kubernetes clusters via a web interface.
- Protocol Isolation Layers - Routes traffic through dedicated connectors to isolate user devices from target infrastructure endpoints.
- Remote Desktop Streaming - Launches and manages secure sessions for remote applications and graphical interfaces directly within a web browser.
- Web-Based Terminal Gateways - Translates SSH, RDP, and database protocols into web-compatible streams for browser-based access.
- Database Access Control - Manages and monitors administrative connections to remote databases using a web-based interface and proxy layer.
- Proxy Gateways - Provides a web-based proxy to interface with, control, and monitor interactions with remote databases.
- Database Query Security - Intercepts and monitors database connections to ensure all queries are authenticated and audited.
- Identity and Access Management - Integrates external directory services and multi-factor authentication to govern privileged system access.
- Remote Access Proxies - Implements a protocol-based proxy layer to isolate users from critical infrastructure assets during remote sessions.
- Secure Database Access - Establishes secure sessions to database endpoints using a web-based interface and proxy connectors.
- Infrastructure Isolation Proxies - Routes SSH, RDP, and database connections through a secure proxy to isolate end-user devices from target assets.
- Protocol Proxies - Implements a secure gateway that brokers SSH and RDP sessions to isolate users from critical infrastructure.
- Remote Desktop Environments - Provides browser-based remote desktop and streaming solutions that isolate end-user devices from critical infrastructure.
- Biometric Authentication - Provides identity verification using facial recognition services to secure access to infrastructure.
- Biometric Face Verification - Uses facial recognition to authenticate users before granting access to privileged systems.
- Identity Provider Integrations - Synchronizes user identities and group memberships from external directory services.
- Identity Synchronization - Automates the synchronization of user identities from external directory services to maintain consistent authentication.
- Multi-Factor Authentication - Secures account access by requiring one-time passwords or facial recognition during login.
- Browser-Based Streaming - Offers a centralized web portal for launching and streaming remote sessions for various operating environments directly to the browser.
- System Activity Monitoring - Tracks and visualizes system operations and security events through integrated monitoring dashboards.
- Media Watermarking Tools - Injects dynamic identifiers onto the interface to deter unauthorized screen captures of privileged sessions.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
