Warpgate review
A capable SSH proxy for teams that need audited, approval-based access.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Warpgate is a self-hosted, open-source bastion and proxy for SSH and other infrastructure targets, including HTTPS, Kubernetes, PostgreSQL, MySQL, RDP, and VNC. It is designed for teams that need centralized authentication, controlled target access, browser-based connections, or native SSH client access. Administrators can manage access through a web interface, API, Terraform, Helm, or Kubernetes tooling, while the product runs as a single binary or Docker image on infrastructure controlled by the operator.
The access-control depth is Warpgate’s clearest strength. Authentication can use passwords, public keys, authenticator apps, OIDC SSO, or API tokens, and MFA can be enforced for SSH and other protocols. Access roles, user and group assignments, granular administrator roles, authentication policies, and just-in-time administrator approval provide several ways to limit connections. Brute-force protection and user lockout add another defensive layer. This makes Warpgate a strong fit for environments where access needs review and separation rather than simple key-based entry.
Its auditing features extend beyond connection control. SSH session recording and terminal replay support investigation and review, while heuristic shell-command auditing adds visibility into terminal activity. Multi-node clustering and S3-compatible recording storage support larger operational arrangements, with integrations for AWS EC2 Instance Connect, OIDC providers, Docker, Kubernetes, Terraform, and Helm. The trade-off is architectural: Warpgate places a bastion and proxy layer between users and targets, so teams seeking a straightforward conventional SSH server may prefer a more direct option. Choose Warpgate when governed, recorded access matters; choose an alternative when minimal SSH infrastructure is the priority.
Warpgate pros and cons
- Where it wins
- Free, open-source self-hosting with Linux, Docker, and Kubernetes support
- MFA, SSO, granular roles, approvals, and brute-force protection
- Session recording, terminal replay, and heuristic command auditing
- Where it doesn't
- Adds a proxy layer instead of providing a conventional direct SSH server
- Requires the operator to manage self-hosted deployment and infrastructure
- Access workflows may be more involved than direct SSH for simple environments
Warpgate fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update
