AI Session Recording Summaries for SSH, Kubernetes Exec, and Postgres

Since Teleport 1.0, we have shipped built-in session recording and replay. Nine years later, we are shipping the biggest upgrade yet: AI Session Summaries.

What's worse than a 3am incident?

Watching the 3-hour recording of someone fixing it.

Teams using Teleport onboard thousands of engineers (developers, DBAs, Windows users) who run thousands of interactive sessions every day. That easily adds up to 5,000+ hours of recordings per month, which is too much for humans to review proactively. We partnered with design customers to distill interactive sessions into accurate, useful summaries that make review fast.

What you get

• Short, useful digests for interactive SSH, kubectl exec, and interactive Postgres sessions.
• At-a-glance outcomes including what Type of Operations Performed, Security-Relevant Activities, and Risk/Impact Level of the Activities:.
• Review in familiar places including the redesigned Session Recording Audit view and via tsh.
• Portable Session Summary records stored as JSON alongside the original session artifacts.

Why it matters

• Cut review time from hours of video to minutes of reading.
• Strengthen audits with consistent, human-readable context for compliance and incident reviews.
• Reduce blind spots by surfacing risky actions across high volumes of sessions.
• Coach the team by creating a playbook based on their 6hr SSH Session.

How it works

Teleport processes the session recording, then generates a concise summary you can skim or store with your existing evidence. Summaries live next to recordings, which keeps governance and retention simple.

Availability and setup

AI-powered summarization is disabled by default in all Teleport deployments (both self-hosted and cloud). No AI processing occurs unless you explicitly enable this feature.

Teleport Session Recording Summaries are available in Teleport Enterprise 18.2. The initial release supports OpenAI and OpenAI-compatible gateways such as LiteLLM and Ollama, giving you the flexibility to choose the inference path that best fits your environment and data requirements. Simply configure your preferred endpoint and model, and summaries will be generated automatically for supported session types.

For Teleport Enterprise Cloud: Session Recording Summaries are now available, but are in preview. You can enable this feature today by bringing your own OpenAI API key, maintaining full control over your AI integration while benefiting from Teleport's managed infrastructure. Later this year we'll be supporting Amazon Bedrock and BYOBedrock (Bring Your Own Bedrock). If you are a Teleport Cloud customer who would like to try this, please please reach out.

Learn how to set up Session Recording Summaries via our docs.

Try it

Want to test out Teleport Identity - Session Recording Summaries. Try our updated Teleport Identity Security lab. If you would like a trial on your own Teleport deployment, contact us and we will get you set up.

One more thing.

Alongside AI Session Summaries, we have added more depth to Teleport Identity Security:

• Track KMS keys in Access Graph Customers using Crown Jewels asked to visualize their most sensitive assets, including key material. Access Graph now shows relationships to KMS keys, which helps you spot risky access paths and validate key hygiene.
• RBAC for session recordings Fine-grained controls over who can view which recordings and summaries. For example, Team A can review Team A sessions, and GRC can review all access to production.
• Encrypted session recordings Integrate with HSMs or KMS so recordings are encrypted before they are uploaded to storage. This keeps governance strong without complicating your workflow.