Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC and RDP. We call it clientless because no plugins or client software are required.


Bastillion is described as 'Open-source web-based SSH console that centrally manages administrative access to systems. It acts as a bastion host for administrators with features that promote infrastructure security' and is a terminal emulator in the os & utilities category. There are more than 10 alternatives to Bastillion for a variety of platforms, including Linux, Mac, Self-Hosted, Windows and Web-based apps. The best Bastillion alternative is Apache Guacamole, which is both free and Open Source. Other great apps like Bastillion are BastionZero, Wetty, Shell In A Box and Warpgate Bastion.
Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC and RDP. We call it clientless because no plugins or client software are required.


BastionZero delivers zero trust access without creating a single point of compromise. It pairs with your IdP to quickly grant access with policy controls and observability — without a mess of passwords, VPNs, and SSH keys.

Shell In A Box is a web based AJAX terminal emulator that can export arbitrary command line tools to a web based terminal emulator. This emulator is accessible to any JavaScript and CSS enabled web browser and does not require any additional browser plugins.

Warpgate is a smart SSH, HTTPS, MySQL and PostgreSQL bastion host for Linux that doesn't need special client apps.




TinyShell is ideal for anyone who wants command line access to their server, but is limited by HTTP access. Furthermore TinyShell comes with a native MySQL command line client, that some say is even better than MySQL’s own command line interface.
Single sign-on for everything your staff needs: databases, servers, Kubernetes, cloud CLIs, intranets, and web apps. Try it Free.


SSHy is a fast and responsive SSHv2 web client with end-to-end encryption supplied by SJCL. SSHy implements a minimal subset of the SSHv2 protocol that provides and controls a pseudo-terminal. The terminal front-end interface is provided by xterm.js.

Teleport is an identity-aware, multi-protocol access proxy which understands SSH, HTTPS, RDP, Kubernetes API, MySQL, MongoDB and PostgreSQL wire protocols.

oterm is a web browser unix terminal. It serves a console so you can access your server from anywhere in the world where you have an Internet connection. It effectively is an xterm in a browser. It emulates xterm commands, which are very similar to vt100 commands.

Boundary is a software solution that facilitates access to applications and vital systems through fine-grained authorizations. It operates on an identity-based access model, eliminating the need to manage credentials or expose your network.