Skip to content
/ hoop Public

Hoop.dev is an open-source access gateway that provides secure, seamless, and audited access to databases and infrastructure without exposing credentials or sensitive data.

License

Notifications You must be signed in to change notification settings

hoophq/hoop

Repository files navigation

hero

hoop.dev

đź”’ Secure infrastructure access without complexity or cost

Website · Docs · Discussions

Hoop.dev is the free, open-source access gateway for databases and servers - the secure alternative to VPNs, credential sharing, and access tickets.

What is hoop.dev?

Hoop is a proxy that secures and simplifies access to your infrastructure. It acts as an intelligent pipeline between your team and your resources (databases, servers, Kubernetes):

  • No VPNs or exposed credentials - Outbound-only connections with zero inbound firewall rules
  • Free SSO integration - Works with Google, Okta, JumpCloud, and more with no additional fees
  • Complete audit trail - Every action is recorded in a standardized format for compliance
  • Deploy in minutes - Average setup time of 4.3 minutes across 200+ deployments

🚀 Quick Start

Get up and running in minutes:

bash

# create a jwt secret for auth
echo "JWT_SECRET_KEY=$(openssl rand -hex 32)" >> .env

# download and run
curl -sL https://hoop.dev/docker-compose.yml > docker-compose.yml
docker compose up

View full installation options

How hoop.dev Works

Hoop creates a secure pipe between users and infrastructure:

  1. Authentication - Users authenticate through your existing identity provider (Google, Okta, etc.)
  2. Connection - Hoop agents establish outbound-only connections to your resources
  3. Access - Users connect through the Hoop proxy with just-in-time permissions
  4. Audit - Every action is recorded for complete visibility and compliance

Why Use hoop.dev?

⚡ Eliminate Security Vulnerabilities

VPNs and public endpoints create unnecessary attack vectors. Hoop agents establish protected outbound-only connections between authenticated users and your authorized resources—no inbound traffic required. This reduces your attack surface while simplifying your network architecture, minimizing time spent managing complex firewall rules.

đź’¸ End the SSO Tax

Enterprise tools charge substantial fees annually just to connect your identity provider. Hoop integrates freely with Google Workspaces, Okta, JumpCloud, Entra ID, Auth0, and AWS Cognito—with no additional licensing fees. Save on costs while improving security through unified authentication without the SSO tax that other solutions impose.

🔑 Automate Access Controls

Stop spending hours processing access request tickets. Hoop automatically maps your existing identity provider groups to read-only, read-write, or admin profiles across all your infrastructure. Delegate access management to IT using your existing group structure and free up engineering time for higher-value tasks.

📊 Standardize Audit Trails

Multiple audit formats across different systems create compliance challenges. Hoop records every action in a single, standardized format across all your infrastructure—from database queries to Kubernetes commands. Transform audit preparation from a time-consuming project to a streamlined process while maintaining compliance with SOC2, GDPR, and other frameworks.

📚 Popular Guides

Databases

Cloud & Infrastructure

View all guides

Installation

Docker

bash

# create a jwt secret for auth
echo "JWT_SECRET_KEY=$(openssl rand -hex 32)" >> .env

# download and run
curl  -sL https://hoop.dev/docker-compose.yml > docker-compose.yml &&  docker compose up

See Docker Compose installation documentation

Kubernetes

See Kubernetes Deployment Documentation

AWS

See AWS Deploy & Host Documentation

Region Launch Stack
N. Virginia (us-east-1) Launch Stack
Ohio (us-east-2) Launch Stack
N. California (us-west-1) Launch Stack
Oregon (us-west-2) Launch Stack
Ireland (eu-west-1) Launch Stack
London (eu-west-2) Launch Stack
Frankfurt (eu-central-1) Launch Stack
Sydney (ap-southeast-2) Launch Stack

View all regions

Advanced Features

What makes Hoop unique is its ability to not only inspect but also modify connections between users and infrastructure:

  • AI Data Masking - Automatically hide sensitive data like emails, SSNs, and credit cards
  • Just-in-Time Reviews - Approve risky commands in real-time through Slack or MS Teams
  • Runbooks - Create pre-approved workflows for common tasks
  • Web & Native Modes - Use the web interface or connect through your native database tools

See all features

You'll be in Good Company

  • 200+ successful deployments from companies around the world
  • 4.3 minute average setup time across all deployments
  • Trusted by teams from startups to enterprises

🤝 Contributing

We welcome contributions! Check out our Development Documentation to get started.

📣 Community

Join our Discussions to ask questions, share ideas, and connect with other users.

Backed by

Backed By YC, Valor, GFC, Quiet and L2 Ventures

About

Hoop.dev is an open-source access gateway that provides secure, seamless, and audited access to databases and infrastructure without exposing credentials or sensitive data.

Topics

Resources

License

Stars

Watchers

Forks

Packages