Freedom251 › SSH Server Software
Bastillion
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | Up to 5 registered systems · self-hosted | Free |
| Starter | $149/yr · Up to 150 registered systems per instance | $149 a year |
| Team | $399/yr · Up to 500 registered systems per instance | $399 a year |
| Business | $999/yr · Unlimited registered systems per instance | $999 a year |
As loophole.company lists them, read 30 Sept 2026. The maker's own page has the final word.
Facts from Bastillion's own pages
- Access controls
- Systems can be grouped into profiles that control which users can access them. · github.com, 30 Sept 2026
- Authentication
- The product supports two-factor authentication, LDAP/JAAS authentication, and SAML 2.0 single sign-on. · github.com, 30 Sept 2026
- Centralized keys
- Bastillion centrally issues and rotates SSH keys for a team. · loophole.company, 30 Sept 2026
- Headquarters
- Garfield Heights, Ohio, United States · loophole.company, 28 Sept 2026
- Identity integrations
- The maker lists Entra ID, Okta, and ADFS as SAML identity-provider examples. · github.com, 30 Sept 2026
- Key types
- Bastillion supports Ed25519 and Ed448 SSH keys, with Ed25519 as the default. · github.com, 30 Sept 2026
- License terms
- Licenses are annual and non-renewing, and one license key can be used across multiple Bastillion deployments. · loophole.company, 30 Sept 2026
- Notable limit
- A paid license raises the registered-system cap, and each instance enforces the selected tier's cap independently. · loophole.company, 30 Sept 2026
- Product
- Bastillion is a self-hosted, browser-based SSH console and SSH key-management platform. · loophole.company, 30 Sept 2026
- Run requirements
- The maker's installation instructions require Java 21 and run Bastillion as a self-contained jar with an embedded server. · github.com, 30 Sept 2026
- Security reporting
- The project asks users to report vulnerabilities by email to [email protected] and not to open a public issue for non-public vulnerabilities. · github.com, 30 Sept 2026
- Session audit
- Sessions are recorded and can be replayed; the default retention period is 90 days, and recording can be disabled. · github.com, 30 Sept 2026
- Support
- The maker lists project, licensing, and support questions at [email protected]. · loophole.company, 30 Sept 2026
- Terminal access
- Users can open live terminal sessions to registered systems in a browser and broadcast commands across multiple sessions. · github.com, 30 Sept 2026
- Transport security
- Bastillion generates a self-signed certificate and serves HTTPS on first startup; deployments can use a CA-signed certificate instead. · github.com, 30 Sept 2026
Where Bastillion stands on Freedom251
- SSH Server Software#2 of 34