Show HN: Werbot – a product for easy audit and control of access to servers

Re:Show HN: Werbot – a product for easy audit and control of... by nif2ee on Tuesday January 14, 2020 @07:44AM (#22044245)

It's very hard to trust some random new company with your comany's servers. Even if we trust YOU, a single bug that leads to leak your certificate, the keys or the stored sessions (which are literally everything! they are literally the company itself) would be a disaster for all your customers, especially when the whole product is managed and closed source. Also Gravitational's Teleport does the same thing and it's FOSS. It's just hard for me to see a serious business that would trust you and proxy their entire SSH sessions through you just for the sake of authentication/authorization while there are many alternative FOSS and more trusted alternatives.

[ Parent | on HN ]

Re:Show HN: Werbot – a product for easy audit and control of... by shurco on Tuesday January 14, 2020 @08:05AM (#22044378)

No problems! Use the Enterprise version on your servers.

[ Parent | on HN ]

Re:Show HN: Werbot – a product for easy audit and control of... by nif2ee on Tuesday January 14, 2020 @09:08AM (#22044807)

Why would I pay $12,000/year for a self-hosted closed source SSH proxy+SSO while Teleport, a FOSS and battle tested alternative exists? Also something like Pritunl can does the same functionality along with a zillion more features while being more scalable and supports any protocol since it's a real VPN while only paying $50/month.

UPDATE: It seems also that Cloudflare's Access supports SSH and SSO.

[ Parent | on HN ]

Re:Show HN: Werbot – a product for easy audit and control of... by shurco on Tuesday January 14, 2020 @11:01AM (#22046025)

Let me suppose that you do not exactly know the price of 1 sever maintenance provided by Symantec, CyberArk or CheckPoint. The VPN or Cloudflare's Access solutions you are talking about, are designed for other purposes. Teleport is working in another way at all. I understand that you are supporting FOSS and it's very good! I do not exclude the possibility to become a FOSS product one day. The most important thing is that you don't need to install any additional software on the client machine or server!

[ Parent | on HN ]

Re:Show HN: Werbot – a product for easy audit and control of... by nif2ee on Tuesday January 14, 2020 @11:48AM (#22046576)

>Symantec, CyberArk or CheckPoint

These are huge and public companies and are lots of regulation and scrutiny by the government and investors and are a big target for hackers and adversary governments and that's why they spend a fortune to keep their reputation clean. I don't think you should compare yourself to them.

>VPN or Cloudflare's Access solutions you are talking about, are designed for other purposes

What other purposes? please enlighten me

>The most important thing is that you don't need to install any additional software on the client machine or server

so your product works by authenticating uses via your webapp's SSO for example and then the client has to manually download the private keys and certificates and use them with the ssh command?

[ Parent | on HN ]