Hoop on Ubuntu 24.04 LTS

Azure Security

Hoop, an open source access gateway that brokers, records and audits privileged access to your databases, servers and infrastructure from one place.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Hoop is a layer 7 access gateway that sits between your people and your infrastructure. Instead of handing out standing credentials to databases, servers and internal tools, users connect through hoop, which enforces access at the wire protocol level, records every session, and can route sensitive actions through review and approval. It brokers access to PostgreSQL, MySQL, SQL Server and MongoDB databases, SSH and RDP servers, Kubernetes and internal web apps, so a single audited entry point replaces scattered direct connections. Every command and query is captured to an immutable session log for audit and incident review, optional reviewers can approve or reject risky operations before they run, and data masking can redact sensitive fields in flight.

Administrators register connections and enroll lightweight agents that reach the resources being protected, then define who can access what. It suits platform, security and data teams who need to give engineers and analysts safe, time bound access to production systems, satisfy audit and compliance requirements with a full record of who did what, and remove long lived database and SSH credentials from laptops.

Why the cloudimg image

cloudimg delivers hoop as a complete, secure by default appliance: the pinned upstream gateway runs the moment the instance boots, backed by a self contained local database, with no container registry to reach or compose file to assemble. It is secure by default: local password authentication is enabled, no administrator login is baked into the image, and on the first boot of every instance a unique database password and a unique administrative API key are generated and written to a root only file, so no two instances ever share a secret. The gateway learns its own public address on every boot so the web console works without hand editing, the database is captured empty and re provisioned per instance, the base is fully patched with unattended security upgrades enabled, and every deployment comes with a paired deploy guide and 24/7 cloudimg support.

Common uses

  • Broker and record privileged access to databases, servers and Kubernetes
  • Remove standing credentials with time bound, audited access to production
  • Satisfy audit and compliance with a full session log and optional approvals

See it running

Real screenshots taken while testing this image against its deployment guide.

Hoop on Ubuntu 24.04 LTS screenshot 1 Hoop on Ubuntu 24.04 LTS screenshot 2 Hoop on Ubuntu 24.04 LTS screenshot 3 Hoop on Ubuntu 24.04 LTS screenshot 4