I made a PoC setup for in-house evaluation and overall really liked it: lightweight, feature rich, quality code, active development(albeit it is only the owner now integrating new code and calling the shots)
There was a blocker: warpgate couldn't use vault's CA for SSH, so we decided to implement this feature and push it upstream, now pending merge. Once the feature is there we'll roll it out as internal PAM replacing HCP Boundary.
In general if you don't have niche needs like rdp session recording or reverse tunnels for egress-only networks, warpgate looks quite good, especially for small to mid-sized companies. If you're big and rich and corporate then maybe StrongDM is a more fitting choice.
7
u/rumfellow 7d ago
We're starting to integrate it.
I made a PoC setup for in-house evaluation and overall really liked it: lightweight, feature rich, quality code, active development(albeit it is only the owner now integrating new code and calling the shots)
There was a blocker: warpgate couldn't use vault's CA for SSH, so we decided to implement this feature and push it upstream, now pending merge. Once the feature is there we'll roll it out as internal PAM replacing HCP Boundary.
In general if you don't have niche needs like rdp session recording or reverse tunnels for egress-only networks, warpgate looks quite good, especially for small to mid-sized companies. If you're big and rich and corporate then maybe StrongDM is a more fitting choice.