v0.4 — LLM risk gating now in preview

Secure terminal support,
without SSH handoff.

Warden replaces temporary SSH credentials with browser-based guest sessions. Hosts stay in control, every command is auditable, and risky operations require explicit approval — backed by your own LLM.

warden://demo — session.mp4
● demo
$ warden play demo.mp4
$

Built for the moment trust breaks down.

Screen share is too slow. SSH is too much. Warden is the missing middle — engineered for vendors, support teams, and on-call rotations that need real shell access without the blast radius.

No SSH handoff

Skip shared keys, rotating accounts, and bastion bookkeeping. Sessions are short-lived guest links bound to a single host.

Approval-gated commands

Define policies for destructive or sensitive commands. The host gets a one-tap approve / deny before anything runs.

Bring your own LLM

Pipe commands through OpenAI, Anthropic, or a self-hosted model for risk scoring and inline explanations.

Full session audit

Every keystroke, output stream, and approval decision is captured with cryptographic timestamps — exportable to SIEM.

Self-host ready

Drop the binary on a VM, point your team at it, done. No outbound dependencies, SOC 2 friendly deployment model.

Works with your stack

Debug Postgres, Docker, Kubernetes, systemd, and anything else that lives behind a shell — no agent on the guest.

$

Three steps. Zero handoffs.

From kickoff to teardown in under a minute. The host never relinquishes control, and the guest never sees a key.

01

Host starts a session

Spin up a fresh local shell with a single command. Warden returns a one-time guest link bound to your IP.

$ warden serve --duration 30m
→ guest link: https://warden.io/s/7af3-mEq
02

Guest joins in browser

The expert opens the link — no SSH client, no VPN, no inbound port. The terminal renders in their browser, mirrored from your host.

▸ alex@vendor connected
▸ read+write mode • approval-gated
03

Host approves & audits

Watch live, pause anytime, and approve risky commands with one tap. Every action is logged and exportable.

[14:22:08] sudo systemctl restart postgres
  ✓ approved by alice@ops (0.6s)
$

When users ask for temp SSH,
they want this instead.

Capability
Temp SSH
Screen share
Warden
Real shell access for the guest
No shared keys or VPN
Host approval before risky commands
Full audit log + SIEM export
Works behind NAT / firewalls
LLM-assisted risk scoring
Time-bound, single-use access
$

Solo contractor or Fortune 500 — same workflow.

Individual contractors

Ship support without the security headache

Help clients debug production without asking for SSH keys or onboarding into their VPN. Bill faster, leave a clean audit trail.

  • Single-host self-host in 2 minutes
  • Per-session export for your client deliverables
  • Bring your own OpenAI / Anthropic key
Start free
Enterprise

Zero-standing-privilege support, by policy

Give vendors and on-call rotations time-boxed, approval-gated shell access — without expanding your IAM surface.

  • SSO / SCIM, SOC 2-friendly deployment
  • Policy engine + SIEM streaming (Splunk, Datadog)
  • Dedicated solutions engineer & 99.9% SLA
Talk to sales
$

Questions, answered.

No. It's an alternative. The goal — short-term shell collaboration — is the same, but Warden keeps the host in control and avoids any key or account handoff.

$

Stop handing out SSH keys.
Start handing out sessions.

If you regularly help customers debug Linux, Docker, Postgres, systemd, or self-hosted services — we want you on the beta.

~48h response time • SOC 2 deployment options available

connected
v0.4.0-beta