Appearance

Get started

Resources

Guides, comparisons and background reading on SSH certificates, access control and running Shellius.

InsightHow SSH certificate authorities actually workBuild a CA by hand with ssh-keygen, and see why authorized_keys is a liability.ComparisonShellius vs. TeleportSame core idea, very different scope. Where each one fits.ComparisonShellius vs. Tailscale SSHA network that authenticates SSH, and a CA that assumes a network. They compose.ComparisonShellius vs. a DIY SSH CAWhat ssh-keygen gives you, and what you end up building around it.ComparisonShellius vs. static SSH keysWhat changes when hosts trust one CA — and what honestly does not.TutorialQuickstart: first certificate loginFrom an empty Docker host to a login that expires, in four steps.TutorialMigrate a fleet off authorized_keysOne environment at a time, without locking yourself out.TutorialPut production behind an approverTag, choose approvers, and decide whether anyone may bypass.TutorialReach private hosts from a browserShellius inside the network, only HTTPS exposed.TutorialGive a contractor access that endsNarrow policy, short grants, recorded sessions.InsightThe Shellius threat modelWhat it protects, what it trusts, and what a compromise would mean.InsightDo my users still need a VPN?It depends which machine opens the connection. Route by route.Product updateChangelogEvery release, with what changed and why.Product updateReleasesTagged versions and terminal client binaries.