Praxis is a self-hosted Linux fleet operations platform that replaces a stack of separate tools with one app: inventory, privileged access, patching, repository control, and audit evidence.
Most teams managing Linux fleets end up gluing together an inventory tool, an SSH bastion, a credential store, patch scripts, a repo mirror, and hand-built reporting — then babysitting all of it. Praxis puts that whole loop in one self-hosted plane: enroll hosts over SSH or an optional outbound-only agent, control what packages your hosts can install, stage patch plans through approval-gated rollout rings, and coordinate reboots and rollbacks with a full record of what ran and where.
Access runs through Praxis too. Operators get a full terminal inside the app backed by short-lived SSH certificates issued through OpenBao (Vault-compatible) — no shared keys, no standing root, no forgotten authorized_keys entries. Every session is recorded locally and playable back for review. Just-in-time access requests expire on their own; paid editions add session approvals, locks, and formal access reviews.
Everything runs on your own infrastructure with no call-home, including fully air-gapped deployments with signed offline update bundles. Free up to 15 managed hosts with unlimited users, OIDC/SSO, and session recordings. Supports Ubuntu, Debian, RHEL, Rocky, and AlmaLinux on x86_64 and arm64.