Teleport

Modern identity-aware access for SSH, Kubernetes, databases, and apps

ToolPrivileged Access ManagementOpen SourceCloudSelf-hosted

Pricing: Community edition free for companies under 100 employees and under $10M revenue. AWS Marketplace entry $50,000/yr (25-user minimum, 2026); usage-based quote (active users, workloads, resources) otherwise.

Reviewed by the CyberSecTool editorial team against the public sources cited below · Last reviewed February 2026 · How we review listings

What is Teleport?

Teleport is a modern infrastructure access platform that unifies SSH, Kubernetes, database, and application access behind a single identity-aware proxy. It replaces VPNs, bastion hosts, and shared credentials with short-lived certificates tied to SSO identity. Teleport is open source at its core (Apache 2.0), with a commercial Enterprise tier that adds FedRAMP support, IdP hosting, and advanced policies. It is popular with DevOps and SRE teams operating at cloud-native scale.

Best for: DevOps and SRE teams replacing bastion hosts, VPNs, and shared SSH keys
Pros
  • ✓ Excellent developer experience; cloud-native design
  • ✓ Open source core with strong enterprise tier
  • ✓ Short-lived certs eliminate shared credentials and password sprawl
  • ✓ Broad protocol support (SSH, K8s, DB, apps) in one tool
Things to check
  • • Enterprise features require the paid tier
  • • Complex to operate at scale without dedicated SREs
  • • Self-hosted HA setup requires Postgres/etcd expertise
  • • Smaller integration catalog than legacy PAM vendors

Reported in public reviews and vendor documentation. See sources below.

Key Features

Identity-aware proxy for SSH, Kubernetes, databases, web apps
Short-lived certificates tied to SSO (SAML, OIDC, AD)
Session recording and replay
Just-in-time access requests and approvals
RBAC with Kubernetes-native role definitions
Device trust with TPM-backed hardware keys
Headless authentication for CI/CD and machine workloads
Access Monitoring dashboards and anomaly detection
Passwordless auth with WebAuthn and biometrics
Self-hosted or cloud-hosted deployment

Are you Teleport? Improve this listing with screenshots, case studies and more.

Teleport Comparisons

Teleport vs CyberArk→Teleport vs HashiCorp Boundary→Teleport vs BeyondTrust→Teleport vs ManageEngine PAM360→Teleport vs Delinea→Teleport vs SailPoint→Teleport vs StrongDM→Teleport vs One Identity→

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Teleport — official websitePrimary source
Teleport on r/devops
Reddit
Teleport on Hacker News
Hacker News
Teleport GitHub repository
GitHub
Teleport Pricing: Cloud & Self-Hosted (official pricing page)
Vendor (goteleport.com)
Teleport Enterprise Edition Pricing Guide (rev Jan 6, 2026, official PDF)
Vendor (goteleport.com)
Teleport: The Infrastructure Identity Company — founded 2015 (Y Combinator profile)
Y Combinator

Spot an error, or do you represent Teleport? Request a correction.

Quick Info
PricingCommunity edition free for companies under 100 employees and under $10M revenue. AWS Marketplace entry $50,000/yr (25-user minimum, 2026); usage-based quote (active users, workloads, resources) otherwise.
ModelOpen Source + Per-user tiers
Founded2015
CloudYes
Self-HostedYes
Open SourceYes
Visit Website →View on GitHub →

Last updated: Feb 20, 2026

Teleport Alternatives
View All AlternativesFeaturedSplitSecure
Distributed secrets management. No vault, no vendor dependen...
StrongDM
Infrastructure access proxy with credential injection and se...HashiCorp Boundary
Session broker from HashiCorp, pairs with Vault for JIT cred...CyberArk Privilege Cloud
Enterprise PAM delivered as a SaaS...BeyondTrust Password Safe
Enterprise PAM with strong Unix/Linux/Mac coverage...
Certifications
SOC 2 Type IIISO 27001HIPAA
In the glossary
PAM