Freedom251 › SSH Server Software
Vauban

Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Vauban | Free and open source under BSD-2-Clause; no user or asset limits stated | Free |
As vauban.sh lists them, read 8 Oct 2026. The maker's own page has the final word.
Facts from Vauban's own pages
- Access control
- Its access policies support roles, groups and asset groups, with Just-In-Time access. · vauban.sh, 8 Oct 2026
- AI agent control
- Vauban describes controls for AI agent action chains, including stated intent, reviewed execution plans, revocation on drift and operator contestation. · vauban.sh, 8 Oct 2026
- Authentication
- Vauban supports TOTP, HOTP, OIDC and SAML single sign-on, and compatibility with LDAP and Active Directory. · vauban.sh, 8 Oct 2026
- Browser access
- Users can access Linux and Windows servers through an in-browser SSH terminal or RDP remote desktop. · vauban.sh, 8 Oct 2026
- Contact
- The maker’s homepage lists [email protected] as its contact email. · vauban.sh, 8 Oct 2026
- Industrial protocols
- The FAQ lists Modbus TCP, OPC-UA, PROFINET, IEC 60870-5-104, EtherNet/IP, BACnet/SC, DNP3 and IEC 61850 MMS over sandboxed EWS tunneling. · vauban.sh, 8 Oct 2026
- License and hosting
- Vauban is offered under the BSD-2-Clause license and is deployed on the customer’s infrastructure, with the maker stating that data does not flow through a third-party cloud. · vauban.sh, 8 Oct 2026
- Purpose
- Vauban is a self-hosted privileged access management system and security bastion for SSH, RDP, IACS and MCP access to critical infrastructure. · vauban.sh, 8 Oct 2026
- Secrets vault
- The secrets vault stores SSH keys, passwords and certificates using AES-GCM encryption and HKDF-SHA3 key derivation. · vauban.sh, 8 Oct 2026
- Security architecture
- The maker describes ten isolated services, privilege separation and Capsicum sandboxing; the project README says Capsicum sandboxing requires FreeBSD, while builds on macOS and Linux lack sandboxing. · vauban.sh, 8 Oct 2026
- Session recording
- Sessions can be recorded as MP4 video with BLAKE3 cryptographic integrity and replayed for audit or investigation. · vauban.sh, 8 Oct 2026
- Support options
- The maker says subscriptions are available for priority security fix notifications, five-year LTS release cycles, certified builds and priority bug resolution; integration services and professional support are available on request. · vauban.sh, 8 Oct 2026
Where Vauban stands on Freedom251
- SSH Server Software#19 of 34