Hoop, an open source access gateway that brokers, records and audits privileged access to your databases, servers and infrastructure from one place.
Hoop is a layer 7 access gateway that sits between your people and your infrastructure. Instead of handing out standing credentials to databases, servers and internal tools, users connect through hoop, which enforces access at the wire protocol level, records every session, and can route sensitive actions through review and approval. It brokers access to PostgreSQL, MySQL, SQL Server and MongoDB databases, SSH and RDP servers, Kubernetes and internal web apps, so a single audited entry point replaces scattered direct connections. Every command and query is captured to an immutable session log for audit and incident review, optional reviewers can approve or reject risky operations before they run, and data masking can redact sensitive fields in flight.
Administrators register connections and enroll lightweight agents that reach the resources being protected, then define who can access what. It suits platform, security and data teams who need to give engineers and analysts safe, time bound access to production systems, satisfy audit and compliance requirements with a full record of who did what, and remove long lived database and SSH credentials from laptops.
cloudimg delivers hoop as a complete, secure by default appliance: the pinned upstream gateway runs the moment the instance boots, backed by a self contained local database, with no container registry to reach or compose file to assemble. It is secure by default: local password authentication is enabled, no administrator login is baked into the image, and on the first boot of every instance a unique database password and a unique administrative API key are generated and written to a root only file, so no two instances ever share a secret. The gateway learns its own public address on every boot so the web console works without hand editing, the database is captured empty and re provisioned per instance, the base is fully patched with unattended security upgrades enabled, and every deployment comes with a paired deploy guide and 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.