SELF-HOSTED BASTION HOST

Your infrastructure. One secure entry.

Connect to servers, desktops, and internal apps. Manage access and replay sessions on your own infrastructure.

Free edition · 100 assets · Unlimited users

  • SSH / SFTP
  • RDP
  • VNC
  • HTTP
Next Terminal remote access workspace
SSH and remote desktop access, together in your browser.
01 / UNIFIED ACCESS

Your assets. One place to connect.

Bring remote connections together in a single workspace. Organize assets and credentials so your team can find the right connection.

  • SSH / SFTP, RDP, VNC, Telnet, HTTP, and database access
  • Centralized assets, credentials, and asset groups
Explore asset management →
Assets and remote connections
Grouped assets and connection entries
02 / ACCESS CONTROL

The right access. For the right people.

Assign assets to users and groups. Keep access organized as your team grows, with authentication and policies that fit your environment.

  • Permissions by user, group, and asset
  • Passkey and TOTP sign-in; command rules for SSH
Explore access policies →
Asset permissions and access policies
User and asset authorization records
03 / SESSION RECORDINGS

See every session. Keep the full story.

Review recorded text and graphical sessions in your browser. Keep the context you need for troubleshooting and accountability.

  • Live session monitoring and history replay
  • Trace login, command, and file operations
Explore session auditing →
Session history and recording playback
Recorded session history
SSH recording playback
Replay terminal activity with the playback timeline

Deploy on your own infrastructure

One container next to the database and storage you already run — no agent fleet, no heavyweight middleware.

Deployment options

  • Docker Compose single-container deployment
  • Your own PostgreSQL and recording storage
  • Offline deployment for intranet-only environments
  • Primary-standby high availability deployment

Resource footprint

  • From 1 vCPU / 512 MB for small teams
  • 2 vCPU / 2 GB covers 25 concurrent sessions
  • Ports 8088 (web), 2022 (SSH), 80/443 (web assets)
  • Reverse proxy and real client IP configuration

Security and access control

Identity, authorization, connectivity, and audit records stay inside your own environment.

Identity and strong authentication

  • Passkey and TOTP two-factor sign-in
  • LDAP and OIDC directory sign-in
  • WeCom sign-in
  • HTTPS mutual TLS with client certificates

Access control

  • Authorization by user, department, role, and asset
  • Sign-in policies for time window and source address
  • Command filtering and risky command interception
  • Auto-disconnect for idle access sessions

Audit and traceability

  • Session recording with history replay
  • Operation, login, file, and SQL audit logs
  • Access watermark on remote sessions
  • Offline session records

Data stays yours

  • Assets, credentials, and recordings never leave your network
  • Offline license activation
  • Database and recording storage you control

Live Demo

Try the full workflow of asset onboarding, session auditing, and license management with the demo accounts. No sign-up required.

Frequently asked questions

Open source scope, the free edition, and deployment boundaries.

Is Next Terminal open source?

The web front end is open source under Apache-2.0 in the GitHub repository. Since v2.0.0 the server side is no longer open source; releases up to v1.3.9 stay Apache-2.0. The free edition is self-hosted and covers 100 assets.

What does the free edition include?

Unlimited users and 100 assets with the core capabilities: multi-protocol access, authorization, auditing and recording, command interception, and Passkey/TOTP sign-in. Paid licenses raise the asset quota and unlock enterprise identity, gateways, and advanced auditing.

Can Next Terminal run fully offline?

Yes. Deploy the container on an intranet host and point it at your own PostgreSQL and recording storage — connection data never leaves your environment, and licenses can be activated offline.

How is Next Terminal different from JumpServer?

Both cover SSH/RDP/VNC/HTTP access with authorization and auditing. Next Terminal keeps the footprint small: a single container that starts at 1 vCPU / 512 MB, so a small team can self-host it without maintaining a separate gateway, proxy, and worker fleet.