Boundary vs VShell Server
Boundary
developer.hashicorp.comVShell Server
vandyke.comSide by side
| Figure | Boundary | VShell Server |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 9 |
| Spec score · SSH Server Software | 9.0 (#1) | 8.5 (#7) |
| Authentication | Supported authentication methods are password, OpenID Connect, and LDAP, with OIDC examples including Okta, Auth0, and Microsoft Entra ID. | Supported authentication methods include password, public key, GSSAPI, keyboard-interactive, Kerberos, RADIUS SecurID and X.509 certificates, with some Windows-only. |
| Automation | Boundary supports Terraform for automated deployment and configuration and provides a REST API, CLI, and SDK. | Triggers can respond to events such as file uploads, downloads, and failed logons by running commands or moving files. |
| Founded | 2020 | 1995 |
| Headquarters | San Francisco, California, United States | Albuquerque, New Mexico, United States |
| Security | Boundary uses TLS or mutual TLS for communications and supports role-based access control, granular scopes, and envelope encryption for sensitive stored data. | VShell supports multiple encryption and message authentication algorithms, with older 3DES and MD5 options disabled by default. |
| System requirements | Production deployments require PostgreSQL with pgcrypto and citext modules, controller and worker network connectivity, and listener-specific load-balancing configuration. | Windows support lists Windows 10/11 and Windows Server 2016, 2019, 2022 and 2025; Linux lists 64-bit Ubuntu/Kubuntu 22.04 or 24.04 LTS; macOS lists versions 15 and 26. |
| What it does | Boundary provides identity-based, authenticated access to servers, databases, applications, and cloud or on-premises infrastructure without direct network access. | VShell is a multi-protocol secure file-transfer server for remote access and administration. |
Plans
Boundary
- Boundary Community EditionFree
- Boundary Community EditionFree
- HCP Boundary PlusFree
- HCP Boundary StandardFree
- Boundary EnterprisePriced on request
VShell Server
- VShell Workgroup Edition$599, paid once
- VShell Enterprise Edition$999, paid once
- VShell Enterprise Edition with HTTPSPriced on request
- VShell Workgroup Edition$599, paid once
- VShell Workgroup Edition$599, paid once
- VShell Enterprise Edition$999, paid once
- VShell Enterprise Edition$999, paid once
- VShell Enterprise Edition with HTTPS$1,499, paid once
- VShell Enterprise Edition with HTTPS$1,499, paid once
In their own words
Boundary
Boundary provides authenticated, identity-based access to infrastructure without requiring users to connect directly to its underlying network. It supports just-in-time and least-privilege access, role-based authorization, and single sign-on through OIDC or LDAP. Users can reach TCP, SSH, RDP, HTTPS, RDS, Kubernetes, and database targets through familiar clients such as SSH tools, PuTTY, Remote Desktop, database clients, and web browsers. Boundary can broker credentials and integrate with HashiCorp Vault for short-lived dynamic credentials and credential injection. Target discovery can be automated, with dynamic host catalogs for AWS, Azure, and GCP available in HCP Boundary. Deployment options include managed HCP Boundary, optionally with customer-run workers, and self-managed Boundary Enterprise. The Community Edition is listed at free. HCP Boundary Standard and Plus have usage-based billing, with monthly rates per user depending on edition; Standard includes Vault credential injection and audit-log streaming, while Plus adds session recording. Enterprise is self-managed and has full feature parity with HCP Boundary. Boundary supports Terraform, a REST API, CLI, and SDK.
VShell Server
VShell Server has no write-up on Specifiction yet; its figures are above.