đź”’ Secure infrastructure access without complexity or cost
Website · Docs · Discussions
Hoop.dev is the free, open-source access gateway for databases and servers - the secure alternative to VPNs, credential sharing, and access tickets.
Hoop is a proxy that secures and simplifies access to your infrastructure. It acts as an intelligent pipeline between your team and your resources (databases, servers, Kubernetes):
- No VPNs or exposed credentials - Outbound-only connections with zero inbound firewall rules
- Free SSO integration - Works with Google, Okta, JumpCloud, and more with no additional fees
- Complete audit trail - Every action is recorded in a standardized format for compliance
- Deploy in minutes - Average setup time of 4.3 minutes across 200+ deployments
Get up and running in minutes:
bash
# create a jwt secret for auth
echo "JWT_SECRET_KEY=$(openssl rand -hex 32)" >> .env
# download and run
curl -sL https://hoop.dev/docker-compose.yml > docker-compose.yml
docker compose up
View full installation options
Hoop creates a secure pipe between users and infrastructure:
- Authentication - Users authenticate through your existing identity provider (Google, Okta, etc.)
- Connection - Hoop agents establish outbound-only connections to your resources
- Access - Users connect through the Hoop proxy with just-in-time permissions
- Audit - Every action is recorded for complete visibility and compliance
VPNs and public endpoints create unnecessary attack vectors. Hoop agents establish protected outbound-only connections between authenticated users and your authorized resources—no inbound traffic required. This reduces your attack surface while simplifying your network architecture, minimizing time spent managing complex firewall rules.
Enterprise tools charge substantial fees annually just to connect your identity provider. Hoop integrates freely with Google Workspaces, Okta, JumpCloud, Entra ID, Auth0, and AWS Cognito—with no additional licensing fees. Save on costs while improving security through unified authentication without the SSO tax that other solutions impose.
Stop spending hours processing access request tickets. Hoop automatically maps your existing identity provider groups to read-only, read-write, or admin profiles across all your infrastructure. Delegate access management to IT using your existing group structure and free up engineering time for higher-value tasks.
Multiple audit formats across different systems create compliance challenges. Hoop records every action in a single, standardized format across all your infrastructure—from database queries to Kubernetes commands. Transform audit preparation from a time-consuming project to a streamlined process while maintaining compliance with SOC2, GDPR, and other frameworks.
bash
# create a jwt secret for auth
echo "JWT_SECRET_KEY=$(openssl rand -hex 32)" >> .env
# download and run
curl -sL https://hoop.dev/docker-compose.yml > docker-compose.yml && docker compose up
See Docker Compose installation documentation
See Kubernetes Deployment Documentation
See AWS Deploy & Host Documentation
Region | Launch Stack |
---|---|
N. Virginia (us-east-1) | |
Ohio (us-east-2) | |
N. California (us-west-1) | |
Oregon (us-west-2) | |
Ireland (eu-west-1) | |
London (eu-west-2) | |
Frankfurt (eu-central-1) | |
Sydney (ap-southeast-2) |
What makes Hoop unique is its ability to not only inspect but also modify connections between users and infrastructure:
- AI Data Masking - Automatically hide sensitive data like emails, SSNs, and credit cards
- Just-in-Time Reviews - Approve risky commands in real-time through Slack or MS Teams
- Runbooks - Create pre-approved workflows for common tasks
- Web & Native Modes - Use the web interface or connect through your native database tools
- 200+ successful deployments from companies around the world
- 4.3 minute average setup time across all deployments
- Trusted by teams from startups to enterprises
We welcome contributions! Check out our Development Documentation to get started.
Join our Discussions to ask questions, share ideas, and connect with other users.