warp-tech/warpgate is one of the developer-focused repositories TopGit tracks, currently at 7.7k stars, written primarily in Rust. Fully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software
Snapshot summary built from the project's own GitHub metadata — there's no written TopGit review yet. The page will update automatically when a full review is published.
WHY NO REVIEW YET
TopGit writes full reviews for the most-starred, most-requested repositories. This page is a snapshot until then — see the READ ME tab for the original README in full.
Warpgate is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC bastion host that doesn't require a client app or an SSH wrapper.
Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network.
Warpgate will record every session for you to view (live) and replay later through a built-in admin web UI.
Browser-based SSH, RDP and VNC access is built in; native clients continue to work.
Not a jump host - forwards connection straight to the target in a way that's fully transparent to the client.
Native 2FA and SSO support (TOTP & OpenID Connect)
Built-in brute-force protection with IP blocking and user lockout
Single binary with no dependencies.
Written in 100% safe Rust.
Supported by:
Getting started & downloads
See the Getting started docs page (or Getting started on Docker).
Release / beta binaries
Nightly builds
Documentation
Full documentation is available at warpgate.null.page, including:
How is Warpgate different from a jump host / VPN / Teleport?
Warpgate
SSH jump host
VPN
Teleport
✅ Precise 1:1 assignment between users and services
(Usually) full access to the network behind the jump host
(Usually) full access to the network
✅ Precise 1:1 assignment between users and services
✅ No custom client needed
Jump host config needed
✅ No custom client needed
Custom client required
✅ 2FA out of the box
🟡 2FA possible with additional PAM plugins
🟡 Depends on the provider
✅ 2FA out of the box
✅ SSO out of the box
🟡 SSO possible with additional PAM plugins
🟡 Depends on the provider
Paid
✅ Command-level audit
🟡 Connection-level audit on the jump host, no secure audit on the target if root access is given
No secure audit on the target if root access is given
✅ Command-level audit
✅ Full session recording
No secure recording possible on the target if root access is given
No secure recording possible on the target if root access is given
✅ Full session recording
✅ Non-interactive connections
🟡 Non-interactive connections are possible if the clients supports jump hosts natively
✅ Non-interactive connections
Non-interactive connections require using an SSH client wrapper or running a tunnel
✅ Self-hosted, you own the data
✅ Self-hosted, you own the data
🟡 Depends on the provider
SaaS
✅ Built-in brute-force protection
🟡 Requires fail2ban setup
🟡 Depends on the provider
✅ Built-in brute-force protection
Reporting security issues
Please use GitHub's vulnerability reporting system.
Project Status
Warpgate is being actively used in enterprise settings.
What's planned and being worked on next is tracked on the public roadmap.
How it works
Warpgate is a service that you deploy on the bastion/DMZ host, which will accept SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC connections and provide an (optional) web admin UI.
Run warpgate setup to interactively generate a config file, including port bindings. See Getting started for details.
It receives connections with specifically formatted credentials, authenticates the user locally, connects to the target itself, and then connects both parties together while (optionally) recording the session.
When connecting through HTTPS, Warpgate presents a selection of available targets, and will then proxy all traffic in a session to the selected target. You can switch between targets at any time.
You manage the target and user lists and assign them to each other through the admin UI, and the session history is stored in an SQLite database (default: in /var/lib/warpgate).
You can also use the admin web interface to view the live session list, review session recordings, logs and more.
AI transparency disclosure
In late 2025, this project had started accepting AI-assisted contributions. Contributors are required to disclose AI use. I believe that by applying the same high quality standard to all PRs, whether AI-assisted or not, no sacrifice in quality or security needs to be made.
Since AI is a spectrum between braindead vibe bros and autocomplete users, I believe that being transparent about its use helps establish and limit the place of AI in this project.
Architectural and security decisions on this project are 100% human.
Contributing / building from source
You'll need Rust, NodeJS and NPM
Clone the repo
Just is used to run tasks - install it: cargo install just
Warpgate admin and user facing APIs use autogenerated OpenAPI schemas and SDKs. To update the SDKs after changing the query/response structures, run just openapi-all.
Contributors ✨
Thanks goes to these wonderful people (emoji key):
Eugeny 💻
Spencer Heywood 💻
Andreas Piening 💻
Niklas 💻
Nooblord 💻
Shea Smith 💻
samtoxie 💻
P Foundation 💵
Skyler Lewis 💻
Mohammed Noureldin 💻
Mourad Maatoug 💻
Justin 💻
liebermantodd 💻
Hariharan 💻
Rokas Krivaitis 💻
SachinMaharana 💻
Sambhavi Pandey 💻
Tina 💻
Immanuel Tikhonov 💻
Lukas Klepper 💻
kamilkrzeminski 💻
rjourdan04 💻
theharold 💻
noammeltzer-ax 💻
Haoqian 💻
Victor Coutellier 💻
Hexalyse 💻
Lars 💻
basti-nis 💻
Chanta007 💻
Stoyan Kolev 💻
britbennett 💻
PokAhonTAS911 💻
Jens Willmer 💻
Hugues Granger 💻
sravan-blitz 💻
Francesco Degrassi 💻
Yuzhong Zhang 💻
Sean Ferguson 💻
This project follows the all-contributors specification. Contributions of any kind welcome!
The most recent commit recorded on warp-tech/warpgate was 25 days ago, based on the GitHub push timestamp. The repository has 351 forks — one of the better signals of community interest.
How many stars does warp-tech/warpgate have?
warp-tech/warpgate has 7.7k GitHub stars — refresh the page for the live number, or check github.com/warp-tech/warpgate. TopGit mirrors GitHub's count but does not claim minute-by-minute accuracy.
Is warp-tech/warpgate open source?
Yes — warp-tech/warpgate ships under the Apache-2.0 license, which makes its source code freely readable (and, depending on license terms, forkable and reusable). Source: github.com/warp-tech/warpgate.
What else is in the Developer Tools space?
warp-tech/warpgate is tracked by TopGit under the Developer Tools category, alongside 20 GitHub-tagged topics. Trending and Topics pages list peer repositories of comparable stars and language.
What topics is warp-tech/warpgate associated with?
The project maintains a homepage at https://warpgate.null.page. The README tab on this page also usually contains screenshots and a quickstart.
Where do I read more about warp-tech/warpgate?
This TopGit page is a snapshot — the READ ME tab shows the project's own README content (links stripped, images preserved). The GitHub repository at github.com/warp-tech/warpgate is the definitive source.
Read full README in the tab above.
Still deciding about warpgate?
One click hands the question to an AI along with this page — see what it says about warpgate.
/warpgate
