Skip to content
SPECIFICTION
Get listed

Octelium

octelium.com

Free plan WebLinuxAPISelf-hosted
Visit octelium.com
Spec score 7.7 #9 of 27 in Cloud Access Security Broker Software

What it is

Octelium is a free, open-source, self-hosted secure access platform for people, workloads, and AI agents reaching hybrid infrastructure, SaaS, and applications. It places protected resources behind identity-aware proxies and applies authorization policies at the application layer. Listed protocols and services include HTTP, gRPC, web applications, SSH, Kubernetes, PostgreSQL, MySQL, RDP, DNS, SOCKS5, TCP, UDP, MCP, and LLM modes. Cluster Secrets can hold upstream credentials and inject them after authorization, avoiding credential storage by users or workloads. Identity integrations include OIDC and SAML 2.0 providers such as Okta, Microsoft Entra ID, Google Workspace, Keycloak, and Auth0, plus GitHub OAuth2. Native authentication includes FIDO2 and WebAuthn passkeys, TPM 2.0, and TOTP. MCP and LLM gateways govern tool calls, arguments, models, tokens, and usage records. OpenTelemetry-based logs and metrics cover layer-7 activity. Octelium runs on Kubernetes; an installer provisions a single-node Cluster on a fresh Linux server, while larger deployments use managed or on-premises multi-node Kubernetes.

Spec sheet

What it does
Octelium is an open-source, self-hosted secure access platform for humans, workloads, and AI agents accessing hybrid infrastructure, SaaS, and applications.Read 8 Oct 2026 · octelium.com
Deployment
Octelium runs on Kubernetes; its quick installer can provision a single-node Cluster on a fresh Linux VM or server, and larger deployments can use managed or on-premises multi-node Kubernetes.Read 8 Oct 2026 · octelium.com
Free plan
YesRead 20 Sep 2026 · octelium.com
Access model
It places protected resources behind identity-aware proxies and authorizes requests at the application layer using policies.Read 8 Oct 2026 · octelium.com
AI gateway
Its MCP gateway can authorize tool calls and arguments, while its LLM gateway can apply model and token limits and record token usage.Read 8 Oct 2026 · octelium.com
Authentication
Native authentication options include FIDO2 and WebAuthn passkeys, TPM 2.0, and TOTP.Read 8 Oct 2026 · octelium.com
Company history
Octelium says development began in 2020 and Octelium Labs, LLC was established in January 2025.Read 8 Oct 2026 · octelium.com
Enterprise features
The enterprise package lists a web console, SCIM 2.0 provisioning, encrypted Secret management, just-in-time access, multi-region Clusters, managed upgrades, premium support, and commercial licensing.Read 8 Oct 2026 · octelium.com
Identity integrations
Human identity support includes OIDC and SAML 2.0 providers such as Okta, Microsoft Entra ID, Google Workspace, Keycloak, and Auth0; GitHub OAuth2 is also listed.Read 8 Oct 2026 · octelium.com
Secretless access
Upstream credentials are stored as Cluster Secrets and injected after authorization so users and workloads do not need to hold them.Read 8 Oct 2026 · octelium.com
Security evidence
Octelium says its identity-aware, application-level auditing can provide access evidence for SOC 2, ISO/IEC 27001, and internal security controls.Read 8 Oct 2026 · octelium.com
SIEM integrations
The enterprise page lists telemetry integrations including Datadog, Splunk, Elastic, Grafana, ClickHouse, Kafka, Prometheus, Azure Monitor, and Logz.io.Read 8 Oct 2026 · octelium.com
Supported protocols
The product lists HTTP, gRPC, web applications, SSH, Kubernetes, PostgreSQL, MySQL, RDP, DNS, SOCKS5, TCP, UDP, MCP, and LLM modes.Read 8 Oct 2026 · octelium.com
Visibility and auditing
The platform describes OpenTelemetry-based, layer-7-aware logs and metrics, including request details, database queries, Kubernetes operations, and SSH session recordings.Read 8 Oct 2026 · octelium.com

Plans and prices

Free and open source Free Self-hosted; free forever for personal and evaluation use Read 8 Oct 2026 · octelium.com
Enterprise package Priced on request Contact Octelium Commercial license; premium support; enterprise features Read 8 Oct 2026 · octelium.com

Every Octelium plan and price →

Strong points and limits

Strong points

  • Free forever for personal and evaluation use
  • Supports many infrastructure and application protocols
  • Secrets inject after authorization
  • Passkeys, TPM, and TOTP are supported
  • Runs on single-node or multi-node Kubernetes

Limits

  • Self-hosted deployment requires Kubernetes
  • Larger deployments require multi-node Kubernetes

Who it suits

Octelium suits organizations needing self-hosted, policy-based access for people, workloads, and AI agents across hybrid systems. Kubernetes operators and teams requiring application-layer auditing or gateway controls are its stated audience.

Verdict

Octelium combines identity-aware access, protocol coverage, secret injection, and AI gateways in a Kubernetes-based deployment. The free plan covers personal and evaluation use; enterprise features are offered through a separate package with pricing on request.

Where Specifiction places it

Alternatives to OcteliumAll alternatives →