News for hackers. Stuff that matters.

A comment on Show HN: Werbot – a product for easy audit and control of access to servers. Parent comment

Re:Show HN: Werbot – a product for easy audit and control of... by nif2ee on Tuesday January 14, 2020 @09:08AM (#22044807)
Why would I pay $12,000/year for a self-hosted closed source SSH proxy+SSO while Teleport, a FOSS and battle tested alternative exists? Also something like Pritunl can does the same functionality along with a zillion more features while being more scalable and supports any protocol since it's a real VPN while only paying $50/month.

UPDATE: It seems also that Cloudflare's Access supports SSH and SSO.

[ Parent | on HN ]
Re:Show HN: Werbot – a product for easy audit and control of... by shurco on Tuesday January 14, 2020 @11:01AM (#22046025)
Let me suppose that you do not exactly know the price of 1 sever maintenance provided by Symantec, CyberArk or CheckPoint. The VPN or Cloudflare's Access solutions you are talking about, are designed for other purposes. Teleport is working in another way at all. I understand that you are supporting FOSS and it's very good! I do not exclude the possibility to become a FOSS product one day. The most important thing is that you don't need to install any additional software on the client machine or server!
[ Parent | on HN ]
Re:Show HN: Werbot – a product for easy audit and control of... by nif2ee on Tuesday January 14, 2020 @11:48AM (#22046576)
>Symantec, CyberArk or CheckPoint

These are huge and public companies and are lots of regulation and scrutiny by the government and investors and are a big target for hackers and adversary governments and that's why they spend a fortune to keep their reputation clean. I don't think you should compare yourself to them.

>VPN or Cloudflare's Access solutions you are talking about, are designed for other purposes

What other purposes? please enlighten me

>The most important thing is that you don't need to install any additional software on the client machine or server

so your product works by authenticating uses via your webapp's SSO for example and then the client has to manually download the private keys and certificates and use them with the ssh command?

[ Parent | on HN ]