Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Octelium

Free#20 of 25 in Cloud Access Security Broker SoftwareZero Trust PlatformsSSH Server SoftwareBusiness VPN Software

Octelium: Open-source, self-hosted access control for APIs, infrastructure, and AI agents. Ranked #20 of 25 in Cloud Access Security Broker Software by our editors (7.3/10); pricing: Free plan; best for technical teams wanting open-source access control.

7.3/10Editor score
Visit Octelium
Octelium7.3 Visit Octelium

At a glance

  • Editor score
    7.3 / 10
  • Pricing
    Free plan
  • Best for
    Technical teams wanting open-source access control
  • Free plan
    Yes
  • Paid from
    Free
  • Deployment model
    Hybrid
  • Facts checked
    20 Sep 2026
Octelium screenshot

  • Where it wins

    • Policy-as-code identity-aware access control
    • WireGuard, QUIC, and clientless browser access
    • Secretless credentials with real-time auditing

  • Where it doesn't

    • No verified DLP capabilities
    • No verified shadow IT discovery
    • No verified threat-detection features

Our verdict on Octelium

Octelium is an open-source, self-hosted zero-trust access platform for humans, workloads, and AI agents. It provides identity-aware, application-layer access to SaaS APIs, databases, internal applications, Kubernetes, SSH, and other infrastructure. Technical teams can deploy it on Kubernetes-managed infrastructure and choose client-based access over WireGuard and QUIC tunnels or clientless browser access through OAuth2 and bearer authentication.

Its strongest fit is policy-driven control across varied environments. Policy-as-code, dynamic routing, and identity-based upstream credential selection support granular access decisions, while secretless injection handles API keys, access tokens, database passwords, and other credentials. Octelium supports SaaS REST and gRPC APIs, plus integrations including OpenID Connect, SAML 2.0, GitHub OAuth2, AWS KMS, Google Cloud KMS, Azure Key Vault, HashiCorp Vault, Datadog, Splunk, and Grafana. Native FIDO2, WebAuthn, TOTP, and TPM authentication add authentication options, and OpenTelemetry-native visibility provides logging and auditing.

The free, open-source deployment suits teams that want control over hosting and configuration without adopting a proprietary access layer. The enterprise package adds centralized web administration, SCIM 2.0 provisioning, encrypted secrets, multi-region clusters, and premium support; enterprise pricing is handled through contact with sales. Octelium is a strong choice for infrastructure and API access governed by identity and policy. Teams specifically seeking verified DLP, shadow IT discovery, or threat-detection capabilities should choose a product that explicitly provides those controls.

Your product? Our editors can test Octelium in depth and publish a review, labelled as paid · from $149/mo →

Octelium pricing

Plans Free planFree Free to use — no paid tier required for the core job.
See plans on octelium.com

Octelium fact sheet

Free planYes
Paid fromFree
Deployment modelHybrid
Inline controlsYes
API-based controlsYes
DLP controlsNot verified
Shadow IT discoveryNot verified
Threat detectionNot verified
App connectorsNot verified
DeploymentSelf-hosted
PlatformsWeb, Linux
Compliance & securitySSO/SAML, 2FA
SupportEmail, Community, Docs
Built forSmall business, Mid-market, Enterprise (editorial estimate)
Integrations15 integrations: OpenID Connect, SAML 2.0, GitHub OAuth2, OpenTelemetry, AWS KMS, Google Cloud KMS …
PricingFree plan
Websiteoctelium.com
Facts checked20 Sep 2026

Octelium integrations

Octelium lists 15 integrations on its own site.

  • OpenID Connect
  • SAML 2.0
  • GitHub OAuth2
  • OpenTelemetry
  • AWS KMS
  • Google Cloud KMS
  • Azure Key Vault
  • HashiCorp Vault
  • Cloudflare DNS
  • AWS Route 53
  • Google Cloud DNS
  • Azure DNS
  • Datadog
  • Splunk
  • Grafana

Alternatives to Octelium

See all Octelium alternatives →

Also Ranked In

Octelium is ranked in 4 of our directories.

Used Octelium? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Octelium for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Octelium 7.3/10

Octelium is listed in our Cloud Access Security Broker Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/octelium/"><img src="https://www.itechguides.com/best/badge/octelium.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update