Werbot

Werbot replaces the shared spreadsheet of server passwords and private keys with one sign-on that fans out to everything a team can reach. Users connect with their login and a private key, and every session on a connected host is logged and recorded as a screencast, so who did what stays answerable afterward.

It is written in Go, runs as microservices in Docker containers, and installs nothing on the target machine. The stack pairs an API service, a gRPC service, an authentication service and a background worker with Postgres, Redis, HAProxy and automatic certificates.

Coverage spans the protocols and platforms a mixed estate actually contains.

• Protocols: SSH, Telnet, RDP and VNC connections all pass through the same gateway.
• Providers: dedicated, VPS and cloud servers sit in one account, with fast import from AWS, Google and Azure.
• Containers: Docker and Kubernetes workloads are managed alongside plain hosts.
• Databases: MySQL, MariaDB, PostgreSQL, Redis, MongoDB and Elasticsearch are reachable through the same layer.
• Compliance: recorded sessions and collected logs gather the evidence security certifications ask for.

Setup wants Docker Compose, a domain with DNS access and Cloudflare credentials, after which one make target validates DNS and generates secrets. The project is still at version zero and warns that backward compatibility is not guaranteed before 1.0. Source is under the Business Source License, which allows what Apache 2.0 allows except reselling the product as a cloud service.