Become a sponsor to Aashish Gupta

Hi, I'm building Zanskar 👋

Zanskar is a free, open-source (Apache-2.0) access gateway: your team reaches servers and databases from the browser, and nothing has to be installed on those machines.

• SSH, RDP, VNC, WinRM, PostgreSQL, MySQL and MariaDB, all through one gateway
• No shared passwords. Credentials stay sealed in the gateway, and users never see them.
• Just-in-time access. Someone asks for production, an admin approves it, and access expires on its own.
• Every session recorded. The audit log is hash-chained, so it can't be quietly edited.
• SSH certificates instead of keys scattered across hosts, plus AWS autoscaling groups that enrol themselves
• One binary, one server. It installs with a deb/rpm package or Docker Compose.

Commercial privileged-access tools are priced per seat and kept closed. I think the controls auditors ask for, such as least privilege, approvals and session evidence, shouldn't depend on budget.

Built to be trusted

• Signed releases (cosign) with an SBOM and SLSA provenance
• Reproducible builds: the same tag rebuilds to the same bytes on any machine
• OpenSSF Scorecard and Best Practices badges, fuzz tests, and CodeQL, gosec, Trivy and OSV scans on every change
• Public threat model and design decisions

What your sponsorship funds

• Security hardening: more tests and fuzzing, and reaching OpenSSF Best Practices Silver
• New capabilities: high availability, SAML/SCIM, WebAuthn, and an audited admin CLI in the console
• Real-world testing on cloud infrastructure: AWS, Active Directory labs and Windows fleets cost money to run
• Time, so issues and security reports get fast, careful answers

Every sponsor, at any amount, tells me this matters. Thank you 🙏

🌐 Website · 📦 Releases · 📖 Install guide