Boundary: New security open source tool from HashiCorp
Boundary by HashiCorp
Simple and secure remote accessAccess any system from anywhere based on user identity.  Authenticate and authorizeAuthenticate with any trusted identity provider you are already using and authorize access based on granular, logical roles and services.ConnectManage dynamic infrastructure and integrate service registries so hosts and service catalogs are kept up to date.AccessReduce risk of leaking credentials with dynamic secrets and just-in-time credentials with HashiCorp Vault. Automate credential brokering to securely access services and hosts.How Boundary works Boundary is a secure remote access solution that provides an easy way to allow access to applications and critical systems with fine-grained authorizations based on trusted identities across clouds, local datacenters, and low-trust networks.Van PhanTechnical Product MarketingIdentity-based accessEnable privileged sessions for users and applications based on user identity and role.Session recording and audit logsVisibility into session metrics, events, logs, and traces with the ability to export data to business intelligence and event monitoring tools.Seamless IDP integrationIntegrate with your IDP of choice, including Azure Active Directory, Okta, and many others that support Open ID Connect.Dynamic secrets managementLeverage Vault integration for the brokering of Vault secrets to Boundary clients via the command line and desktop clients for use in Boundary sessions.Service discoveryAutomate service discovery and access configuration as workloads are deployed or changed. Infrastructure as code with TerraformDefine policies and manage Boundary with an infrastructure as code approach. Terraform provider supports the full breadth of Boundary configurations.Session recording for SSHComply with regulatory requirements by recording and playing back SSH sessions to deter, analyze, and remediate threat events. TutorialOIDC authenticationSet up OIDC with Auth0, Okta, or Azure Active Directory and manage from Boundary's dev mode.TutorialOIDC IdP groups Integrate with identity providers like Okta, cloud-hosted active directory services with an OIDC frontend, and cloud identity management systems such as AWS IAM.TutorialVault credential brokering Integrate with Vault to broker secrets to Boundary clients.TutorialDynamic host catalogs on AWS Enable automated discovery and dynamic connections to target hosts and services on AWS. TutorialDynamic host catalogs on Azure Enable automated discovery and dynamic connections to target hosts and services on Azure. TutorialEvent filtering and sink configuration Increase observability of event logging for operators, allowing for more fine-grained visibility when managing Boundary clusters.Ready to get started? Reduce your risk of a breach and simplify administration with identity-based, secure remote access from HashiCorp Boundary. Learn how you can grant users access to the critical infrastructure they need — without exposing your network.