Warpgate is a bastion host and privileged access management gateway that proxies SSH, HTTPS, Kubernetes, database, RDP, and VNC connections without requiring client-side software.
Warpgate solves the problem of controlling and auditing access to internal infrastructure by acting as a transparent proxy that sits between users and target systems. Rather than requiring users to install custom clients or SSH wrappers, it intercepts connections at the protocol level and forwards them directly to targets, making it invisible to native clients. The tool records all sessions for later replay through a web interface and enforces authentication policies including two-factor authentication via TOTP and OpenID Connect single sign-on. It includes built-in brute-force protection with IP blocking and user lockout mechanisms.
Organizations should choose Warpgate when they need centralized access control and session auditing across heterogeneous infrastructure without deploying client software to every user machine. It suits environments where teams use native SSH clients, kubectl, database tools, or RDP/VNC clients and want those tools to continue working unchanged while gaining visibility and control. The tool is particularly valuable for teams operating bastion hosts in DMZ deployments who want to avoid the complexity of VPN infrastructure or jump host workflows.
The project maintains active development with regular releases and nightly builds available. The codebase is written entirely in safe Rust with no runtime dependencies, distributed as a single binary. The maintainers provide comprehensive documentation covering deployment scenarios including Docker, authentication configuration, and access control features. Community engagement is supported through Discord and the project has received backing from open-source funding initiatives.
