GoTerm
All use cases

IT teams

Every customer’s servers. One place to reach them.

Give each customer a team, with its own hosts and keys. Your engineers connect with the customer’s keys without ever seeing them, and when someone leaves, their access goes at once.

Business is $250 a month for 10 people, with single sign-on and a server of your own.

A woman in glasses sitting beside a rack of servers

Sound familiar?

Many customers, many loose ends

  • Passwords in a spreadsheet

    Every customer has root passwords and keys, and they end up in a shared sheet, a chat history or someone’s laptop.

  • People leave, access stays

    An engineer moves on, and their key still opens forty servers until someone finds the time to rotate it.

  • Who was on that server?

    A customer asks who logged in on Tuesday night, and the answer is in five different places, if it’s anywhere.

How GoTerm helps

Order across every customer

One workspace for all of them, with walls in the right places: a team per customer, groups inside each team, and a record of every session.

Teams and host groups

A team for each customer

Each customer gets a team with its own admins, hosts and keys. Host groups split the hosts further, and a group can be limited to the people who need it.

  • Engineers see only the teams they’re in
  • Limit a group, like the office servers, to named people
  • Save a bastion once and reach every host behind it
The Hosts page for the Pinecrest Dental team: office servers limited to named people, and the website’s hosts, each reached through a bastion

The Vault

Shared keys nobody has to see

A team’s keys live in its Vault, sealed on the server. Engineers connect with them, but a team key is never shown to them or sent to their browser.

  • Each secret sealed with AES-256-GCM under a key of its own
  • Replace a key once, and every host that uses it follows
  • Make Ed25519 and RSA keys right in the Vault
The Vault’s keys, each marked with its team, such as the Pinecrest Dental deploy key used by the team’s hosts

People and roles

When someone leaves, their access goes too

Deactivate a person and their open sessions end on the spot. They can’t sign in again, and the team keys they connected with were never in their hands.

  • Owner, admin, member and contractor roles
  • Team admins look after their own team’s people
  • A new browser or computer is confirmed before it’s trusted
The People page: each person’s role, teams and status, with sign-in links, devices and a Deactivate button

Audit log

Answer who did what, fast

The audit log shows who joined which session, what was shared with whom, and every connection the gateway refused, across all your customers.

  • Filter by sessions, sharing or security
  • A connection log with each sign-in’s device, address, city and country
  • Session recording for the hosts that need it
The audit log: a teammate joining a shared session, the share itself, and keys made in the Vault

How it fits together

One organization, a team per customer

Your engineers belong to the teams of the customers they work for. A customer’s own staff can come in as contractors, with one group, for as long as they need it.

Your organization

The owner and admins see every team

  • Pinecrest Dental

    • Website
    • Office servers(limited to named people)

    People

    • Priya
    • Lucía
  • Bluewater Labs

    • Cluster
    • CI

    People

    • Jonas
    • Mei
    • Sam

    A contractor

    Bluewater’s own developer gets the CI group until Friday at 6 p.m. Then the access ends on its own.

  • Juniper Bakery

    • Online shop

    People

    • Lucía
    • Mei

The plan that fits

Business, for a team per customer

Business has as many teams as you have customers, single sign-on, and a GoTerm server of your own. It includes 10 people, and each extra person is $15 a month.

Starting with one team? Teams is $35 a month for 5 people.

Compare all plans

Prices are in US dollars, before tax. Yearly is ten months’ price. VAT or sales tax is added at checkout where it applies.

Business

$250per month

10 seats included. Extra seats are $15 a month each.

For organizations with many teams and strict rules.

Ask about Business
  • Everything in Teams
  • As many teams as you need
  • Host groups limited to chosen people
  • A server of your own, with its own IP address
  • Private access: only your team’s own devices, over WireGuard
  • Session recording, kept up to a year
  • 200 monitors, checked every 30 seconds
  • No limit on sessions at once
  • Single sign-on (SSO)

Questions from IT teams

Can a customer’s own staff get access?

Yes. Invite them as contractors and grant them the hosts or groups they need, for a set time. They see nothing else, their sessions are recorded unless you turn that off, and the access ends on its own. GoTerm can then show what changed on the hosts.

Do engineers see the keys they connect with?

No. A team’s passwords and keys stay sealed on the server. Engineers connect with them, but a team key is never shown, sent to a browser or downloaded.

What happens when someone leaves?

Deactivate them on the People page. Their open sessions end at once and they can’t sign in again. The team keys they used were never shown to them.

Where does our workspace run?

On Business, your organization gets a GoTerm server of its own, apart from every other customer’s, with its own IP address for your customers’ firewalls. It runs in the region you choose: the US or Asia-Pacific.

Bring every customer under one roof

Tell us how many customers and engineers you have, and we’ll set up your organization.

More use cases