Dev tools · alternatives · 2026
24 alternatives to Isolate – 2FA(OTP) SSH bastion host
Contribute to devopsprodigy/isolate development by creating an account on GitHub.
Isolate is an SSH bastion host that implements two-factor authentication using one-time passwords (OTP). It provides a secure intermediary server for accessing other systems, requiring both standard SSH credentials and… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Isolate – 2FA(OTP) SSH bastion host launched in 2017; newer entries below may have overtaken it.
- 1
- 2BI
Self-hosted virtual machines for background coding agents.
Jun 2026 · bastion.computer · its alternatives →
- 3
- 4
🧸 fully isolated honeypot ssh server using thrussh - w4/pisshoff
2023 · github.com · its alternatives →
- 5KS
Hi HN! I built KeyPub.sh to solve the problem of user verification for CLI applications. It's essentially OAuth for the terminal, but using SSH keys that developers and users already have. - No installation needed - works with existing SSH setup - Privacy-focused: users control what email info is shared - Simple email verification process - Free public service - Perfect for CLI app developers who don't want to build user verification Try it with: `$ ssh keypub.sh about` Source code: https://github.com/skariel/keypub
2024 · keypub.sh · its alternatives →
- 6RT
Every privacy-focused DNS service requires an account: NextDNS, Cloudflare for Families, Apple's iCloud Private Relay (paid, iOS-only). The protocol that doesn’t require one - ODoH - had basically one well-known public relay operator (Frank Denis on Fastly Compute, default in dnscrypt-proxy). I built a second one and the client to talk to it.
May 2026 · numa.rs · its alternatives →
- 7
Use Touch ID / Secure Enclave for SSH Authentication! - sekey/sekey
2017 · github.com · its alternatives →
- 8SS
2021 · sharedotp.com · its alternatives →
- 9AP
Hi HN, Bastion Enclave is an experiment in removing centralized trust from password management by eliminating server-side state entirely. Instead of storing an encrypted vault or syncing secrets through a backend, Bastion computes credentials deterministically on-the-fly using explicit cryptographic inputs. Given the same master entropy, service name, username, and version counter, the same password is reproduced across platforms. There is no account system, no database, and no persistent server storage — the server serves static code only. Password generation uses domain-separated salts and…
Feb 2026 · bastion-enclave.vercel.app · its alternatives →
- 10
We talk about a new feature in Teleconsole:\ you can turn any laptop into a secure and publicly accessible SSH server which uses Github SSH keys for authentication.
2017 · gravitational.com · its alternatives →
- 11
🔐 Share end-to-end encrypted secrets with others via a one-time URL - sniptt-official/ots
2021 · github.com · its alternatives →
- 12
Secur3▲77First decentralized 2FA solution for self-custodial wallets
2022 · secur3.xyz · its alternatives →
- 13
MFA for your servers without having to enter 2FA codes.
2020 · getidee.com · its alternatives →
- 14
Central management and deployment for SSH keys. Contribute to ierror/ssh-permit-a38 development by creating an account on GitHub.
2018 · github.com · its alternatives →
- 15
- 16
Solo 1 firmware in C. Contribute to solokeys/solo1 development by creating an account on GitHub.
2018 · github.com · its alternatives →
- 17
SecurSSH▲57SSH access for developers. Secure, European, done right.
May 2026 · securssh.com · its alternatives →
- 18
OtpVault▲3Zero-knowledge desktop 2FA authenticator
Jun 2026 · otpvault1.vercel.app · its alternatives →
- 19
- 20
Hi everyone, I built a runtime to isolate untrusted code using wasm sandboxes. Basically, it protects your host system from problems that untrusted code can cause. We’ve had a great discussion about sandboxing in Python lately that elaborates a bit more on the problem [1]. In TypeScript, wasm integration is even more natural thanks to the close proximity between both ecosystems. The core is built in Rust. On top of that, I use WASI 0.2 via wasmtime and the component model, along with custom SDKs that keep things as idiomatic as possible. For example, in Python we have a simple decorator:…
Feb 2026 · github.com · its alternatives →
- 21
A Virtual FIDO2 USB Device. Contribute to bulwarkid/virtual-fido development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 22
🔐 Share end-to-end encrypted secrets with others via a one-time URL - sniptt-official/ots
2021 · github.com · its alternatives →
- 23
Hey HN! Happy to finally launch Stack. We made it because we like to put apps into production quickly, and authentication & user management was taking up way too much time. We have components like and that automatically adapt to whatever theme & design system you're using. Check the blog post to see the example with Radix UI and Joy UI. Also, there's an admin dashboard for monitoring and editing accounts. Stack is 100% AGPL/MIT-licensed, so you can self-host it. Cheers!
2024 · stack-auth.com · its alternatives →
- 24
SSH over AWS SSM. No bastions or public-facing instances. SSH user management through IAM. No requirement to store SSH keys locally or on server. - elpy1/ssh-over-ssm
2020 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →