Portiq puts a browser between your engineers and your infrastructure. Every command gets recorded, every password gets redacted automatically, and every session can be watched live — without installing anything on anyone's laptop.
Runs on your own infrastructure. No account, no phone-home, no vendor.
Someone shares a root password in Slack "just this once." A contractor's VPN access never gets revoked. Nobody can say who ran that command on the production database last Tuesday. Commercial PAM tools fix this — for a price tag and a procurement cycle most teams can't justify for a handful of servers.
Portiq is the version of that tool you can actually run today.
Not a feature list — the actual behavior, every time a session opens.
Every SSH, RDP, and VNC session is recorded automatically from the moment it opens. Recordings play back frame-by-frame right in the browser — no separate video player, no format conversion, no plugin.
Recordings are stored per user, so auditing "everything Alice did this month" is as easy as reviewing one incident.
Every keystroke is grouped into full command lines, the way you'd actually read a terminal transcript. Run sudo, su, or passwd, and Portiq automatically redacts whatever gets typed next.
Redaction is a heuristic, not a guarantee — tuned to over-redact rather than risk a leak.
Admins can join any active session in true read-only mode — no keyboard, no mouse, just visibility. Useful for supervising a contractor's first login, or checking in on a change mid-flight.
SSH and Telnet for the CLI, RDP and VNC for desktops — including web consoles opened through an isolated browser.
Admins see and manage everything. Everyone else only sees the systems they've been explicitly given.
Structured JSON Lines for every login, session, and admin action. Point Filebeat at it and you're done.
Engineers connect from a browser tab. Nothing to install on a laptop, nothing to whitelist through a firewall.
The part that has to be rock solid — actually proxying SSH, RDP, and VNC — is handled by guacd, the protocol engine behind Apache Guacamole. It's been in production use for over a decade.
Portiq builds a purpose-made interface, access control layer, and audit trail on top of guacd — instead of reinventing a proxy from scratch.
No cloud dependency, no per-seat license, nothing phones home. Portiq is free to use as proprietary freeware, part of the Lutpod suite — run entirely on your own infrastructure, with your data never leaving your environment.
Portiq is a Docker Compose file away from running in your environment.