Teleport Access Plane

Quickly access any computing resource anywhere

Teleport allows engineers and security professionals to unify access for SSH servers, Kubernetes clusters, web applications, and databases across all environments.

Get Started

New Teleport 7.0 Brings Identity-Based Access to MongoDB

Single Sign On

terminal

Loading...

Teleport Server Access

For SSH servers behind NAT in multiple environments.

Learn More

Teleport Kubernetes Access

For Kubernetes clusters behind NAT in multiple environments.

Learn More

Teleport Application Access

For web applications behind NAT in multiple environments.

Learn More

Teleport Database Access

For databases behind NAT in multiple environments.

Learn More

Access that doesn't get in the way

A single sign-on allows discovery and instant access to all layers of your tech stack behind NAT across clouds, data centers, or on the edge. There is no more juggling of shared secrets, SSH keys, or hopping between VPNs and multiple access points.

Unified Resource Catalog

There is no need to maintain inventories. Enjoy the live view of all servers, Kubernetes clusters, internal applications, databases, and live sessions across all environments.
Session Recording

Invite colleagues to collaborate in a shared session. Work together to troubleshoot a problem on a remote server or on each others’ laptops. Record sessions for knowledge-sharing purposes.
Plugins and API

Teleport provides ready to use auth for your internal web applications. Customize access workflows and react to security events using favorite programming languages.

# use your favorite programming language to customize access:
def access_request_callback(req):
   is_admin    = 'admin' in req.roles
   jira_ticket = jira.get_ticket(req.id)
   team_name   = req.attributes['team']

   # Only allow users with an 'admin' role
   if not is_admin:
       raise AccessDenied("Not a member of 'admin' role.")

   # Contractors must provide a valid Jira ticket
   if team_name == "contractor" and not jira_ticket:
      raise AccessDenied("Please provide an active JIRA ticket.")

Easily implement security and compliance

Use Teleport to adopt industry best practices for access across all protocols and all environments with minimal configuration. Easily enforce MFA, RBAC, and SSO using identity-based short-lived certificates.

Access Requests

Approve or deny privilege escalation requests using flexible access workflows. Access can be approved or denied via ChatOps, Slack, PagerDuty, or customized via the programmable API. Learn more.
Access Controls

Use flexible access controls to implement compliance standards such as SOC2, PCI, and FedRAMP. Teleport can bring new and legacy resources into compliance.
Session Controls

Define and enforce policy to handle idle sessions, concurrent sessions, and to share and record interactive sessions across all protocols and environments.

Complete visibility into access and behavior

Teleport records interactive sessions, filesystem changes, data transfers, command executions and other security events across all environments into a structured audit log, making it easy to see what’s happening and who is responsible.

Unified Resource Catalog

There is no need to maintain inventories. Enjoy the live view of all servers, Kubernetes clusters, internal applications, databases, and live sessions across all environments.
Live Session View

Teleport maintains a list of live sessions across all protocols and environments, providing a picture of what’s happening. Each session is recorded and tied to identities of humans and machines involved.
Audit Log

Teleport streams recorded sessions and security events to a centralized destination of choice such as SIEM solutions to help integrate access events into a single source of truth.

Works with everything you have

Teleport is open source and it relies on open standards such as X.509 certificates, HTTPS, SAML, OpenID connect and others. Deployed as a single-binary, it seamlessly integrates with the rest of your stack.

Puppet

Google Cloud

Amazon

Linux

Azure

Chef

Okta

Ansible

One Login

Auth0

Active Directory

Kubernetes

Easy to get started

Teleport is easy to deploy and use. We believe that simplicity and good user experience are key to first-class security.

Teleport consists of just two binaries.

The tsh client allows users to login to retrieve short-lived certificates.
The teleport agent can be installed on any server or any Kubernetes cluster with a single command.

Download Teleport

# on a client
$ tsh login --proxy=example.com

# on a server
$ apt install teleport

# in a Kubernetes cluster
$ helm install

Teleport Access Plane

Quickly access any computing resource anywhere

Single Sign On

terminal

Teleport Server Access

Teleport Kubernetes Access

Teleport Application Access

Teleport Database Access

Access that doesn't get in the way

Unified Resource Catalog

Session Recording

Plugins and API

Easily implement security and compliance

Access Requests

Access Controls

Session Controls

Complete visibility into access and behavior

Unified Resource Catalog

Live Session View

Audit Log

Demo Video

Works with everything you have

Easy to get started

Teleport consists of just two binaries.

Trusted by leading organizations

Our vision for the future

Try Teleport today