Overview
BastionSSH is an open-source, self-hosted SSH management tool that replaces juggling terminal apps, SSH config files, and shared credentials. Everything runs in the browser over WebSocket + xterm.js.
Add your SSH keys and servers once, then connect to any server from the browser with a full interactive terminal. SSH keys are encrypted at rest — your data never leaves your infrastructure.
App-level cron jobs are a key differentiator: unlike server-side crontab, BastionSSH runs scheduled commands over SSH from the application itself. Nothing is installed on your servers — you get a centralized view, run history, and failure alerts.
The AI integration supports any provider (OpenAI, Anthropic Claude, or local models via Ollama, LM Studio, or any OpenAI-compatible endpoint) to suggest commands from natural language, explain terminal output, and diagnose errors.
Team features include roles (Owner, Admin, Operator, Viewer), shared server/key/command libraries, and a full audit log of every connection, command run, and config change.
Tech Stack
Year
2026
Category
Open Source
Key Features
100% Browser-Based
Manage everything from a clean web UI via WebSocket + xterm.js. No desktop app, no local terminal required.
SSH Key Management
Generate, import, organize, and rotate multiple SSH keys. All keys encrypted at rest.
In-Browser Terminal
Full interactive SSH sessions in your browser. Real terminal, real shell, real-time.
App-Level Cron Jobs
Schedule recurring commands from the application over SSH — centralized logs, run history, and failure alerts. Nothing installed on your servers.
Team Collaboration
Roles (Owner/Admin/Operator/Viewer), shared resources, invite by email or link, and a full audit log of every action.
Bring Your Own AI
Plug in OpenAI, Claude, Ollama, LM Studio, or any OpenAI-compatible endpoint for command suggestions, output explanation, and error diagnosis.
Saved Commands
Attach named, parameterized commands to any server for one-click execution with full run history and category grouping.
Secure & Self-Hosted
No telemetry, no cloud lock-in. Runs via Docker in one command. Supports PostgreSQL or SQLite, OAuth/SSO, and TOTP 2FA.
Use BastionSSH
BastionSSH is free and open source — use it, fork it, contribute.