Boundary vs WALLIX Bastion
Boundary
developer.hashicorp.comWALLIX Bastion
wallix.comSide by side
| Figure | Boundary | WALLIX Bastion |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 1 |
| Spec score · SSH Server Software | 9.0 (#1) | 7.3 (#26) |
| Access controls | Boundary supports just-in-time and least-privilege network access, role-based authorization, and single sign-on through OIDC and LDAP. | Features include least privilege and just in time access to critical systems. |
| Credential management | Boundary can broker credentials and integrate with HashiCorp Vault for short-lived dynamic credentials and credential injection. | The platform provides a centralized secrets vault and automated password and SSH key rotation. |
| Founded | 2020 | 2003 |
| Headquarters | San Francisco, California, United States | WALLIX’s legal notice lists its registered office at 250 bis rue du Faubourg Saint-Honoré, 75008 Paris, France. |
| Purpose | Boundary provides identity-based, authenticated access to infrastructure without requiring users to access the underlying network directly. | WALLIX PAM manages and secures privileged accounts across an organization’s IT and OT environments. |
| Security | Boundary uses TLS or mutual TLS for communications and supports role-based access control, granular scopes, and envelope encryption for sensitive stored data. | The datasheet lists AES-256 and SHA2 encryption, ECC curves p256, p381, and p515, clustering, and disaster recovery support. |
| Session controls | Boundary supports session logs, audit logs, HCP audit-log streaming, and administrator termination of active sessions. | Bastion provides session management with full color video, transcripts, and metadata in the audit trail. |
Plans
Boundary
- Boundary Community EditionFree
- Boundary Community EditionFree
- HCP Boundary PlusFree
- HCP Boundary StandardFree
- Boundary EnterprisePriced on request
In their own words
Boundary
Boundary provides authenticated, identity-based access to infrastructure without requiring users to connect directly to its underlying network. It supports just-in-time and least-privilege access, role-based authorization, and single sign-on through OIDC or LDAP. Users can reach TCP, SSH, RDP, HTTPS, RDS, Kubernetes, and database targets through familiar clients such as SSH tools, PuTTY, Remote Desktop, database clients, and web browsers. Boundary can broker credentials and integrate with HashiCorp Vault for short-lived dynamic credentials and credential injection. Target discovery can be automated, with dynamic host catalogs for AWS, Azure, and GCP available in HCP Boundary. Deployment options include managed HCP Boundary, optionally with customer-run workers, and self-managed Boundary Enterprise. The Community Edition is listed at free. HCP Boundary Standard and Plus have usage-based billing, with monthly rates per user depending on edition; Standard includes Vault credential injection and audit-log streaming, while Plus adds session recording. Enterprise is self-managed and has full feature parity with HCP Boundary. Boundary supports Terraform, a REST API, CLI, and SDK.
WALLIX Bastion
WALLIX Bastion has no write-up on Specifiction yet; its figures are above.