Authentication is not enough; a human approval is required.
RaWarden gates every privileged SSH session behind a human approval decision. The operator authenticates, sees a one-time code in their terminal, and no root shell opens until the panel says so.
$ ssh root@prod-server-01
SESSION APPROVAL CODE: 482-917
Approve in panel — 60s timeout
[awaiting panel approval...]
✓ Approved → privilege drop → shell
The moment authentication succeeds, the shell opens. It doesn't matter if the key was stolen, leaked from a CI/CD pipeline, or abused by a rogue insider. The SSH log says 'root logged in' — who actually entered, for what purpose, when it could have been stopped: all unanswered.
Standard hardening guards the door — not the moment of privilege.
Root logins are recorded but real operator identity is erased.
There is no mechanism to stop someone already in — only post-hoc analysis.
A second factor at the bastion does not protect the moment of privilege on the server.
Comparison between traditional bastion/key management and RaWarden
Comparison
Integrated via OpenSSH ForceCommand. Authentication is not sufficient; no shell opens without a positive decision. There is no bypass path by design.
The approving admin assigns the target user and UID at decision time. Full setgroups → setgid → setuid transition. Audit trail shows real identity, not just 'root logged in'.
Works seamlessly on STIG/CIS-hardened systems. Correctly sets SELinux contexts, writes loginuid for auditd, re-chowns the SSH agent socket and PTY to the target user.
If the control plane is unreachable, the session is denied — not blindly allowed. Every decision is written to LOG_AUTH — audit trail is local even when the panel is down.
Every request from the gate binary carries an HMAC-signed meta block with timestamp, nonce, request scope, and role. The control plane can verify the request genuinely came from the privileged host binary.
Explicit bypass list for CI/CD runners and service keys based on CIDR or SSH key fingerprint. Every bypass event is always logged — never silent.
Click through each step — you make the panel decision.
SSH key authentication succeeds. In a standard flow, the shell would open — in RaWarden, it doesn't.
$ ssh root@prod-server-01
Authentication successful.
Panel waiting for notification...
Protect thousands of customer VPS root accounts with centralized human approval.
Enforce break-glass approval on production bastion servers.
Prove every privileged session in finance, healthcare, and government was authorized and attributable.
Make SSH root access a reviewed event, not a default.
SSH key authentication succeeds. In a standard flow, the shell would open — in RaWarden, it doesn't.
raturka-gate installed as OpenSSH ForceCommand executes. No shell yet.
Approval code is printed to the terminal. A 60-second countdown starts. Session is frozen.
RaGent pushes a signed webhook to the panel: OTP, source IP, RaDome threat score.
An authorized admin makes the decision in the panel. Approve → continue. Deny or timeout → connection closed.
Admin assigns the target user and UID. RaWarden performs the setgroups → setgid → setuid transition.
Audit trail shows root → real user. Every event has been written to LOG_AUTH.
RaWarden operates through the RaGent agent. The gate binary sends a signed session_gate_create request to RaGent via local UDS; RaGent pushes a webhook to the panel and holds the blocked worker for approval. The panel sends its decision back via QUIC.
RaWarden pulls a live threat score for the connecting source IP from the RaDome edge-defense daemon. The admin sees the approval decision alongside the source IP's global threat intelligence — sessions from high-risk networks are evaluated in context.
RaWarden is not an add-on — it is a separately billed security layer. Prices to be announced soon.
| RaWarden Core | RaWarden StandardRecommended | RaWarden Enterprise | |
|---|---|---|---|
| Monthly Price | Coming Soon | Coming Soon | Coming Soon |
| Session Timeout | 60s sabit | Yapılandırılabilir | Yapılandırılabilir |
| Identity-Aware Privilege Downgrade | |||
| SELinux / auditd Integration | |||
| SSH Agent & PTY Ownership Transfer | |||
| CIDR / Key Fingerprint Bypass Allowlist | |||
| RaDome Threat Score Integration |
Integrate RaTurka into your production environment in minutes. Deploy the agent with a single command and put operational chaos behind you.
Free plan available — no credit card required.
