Short-lived certificates
8 hours by default; no long-lived SSH keys.
Secure access (whyctl)GA
SSH and kubectl, without VPN or public IPs
Users sign in with whyctl and reach only what their group allows. Every session is logged and removed members are cut off instantly.
- 8 h
- certificate lifetime
- 0
- inbound ports
- Instant
- revocation
whyctl
$ whyctl login https://whycloud.ir✓ signed in as ali@company.ir$ whyctl ssh root@web-prod-1root@web-prod-1:~#▍
Live
HOW IT WORKS
How it works
- 1
Enable
For the organization and each resource.
- 2
Groups
Members, resources and access level.
- 3
Connect
whyctl ssh or kubectl.
Capabilities
Secure access (whyctl)
Access groups
Linux users and Kubernetes levels per group.
No inbound ports
Outbound agent connection only.
Session logs
Search by resource, user and event.
FAQ
Frequently asked questions
Does it work with scp and VS Code?
Yes; whyctl config ssh writes your SSH config.
Related services
Security & complianceLayered security with whycloud: Trivy CVE scanning, agent access contr…DevOps as a ServiceManaged registry, tunnels, logs and metrics with a self-service consol…Log ExplorerCollect, search and retain logs from all servers and services in one c…Monitoring & metricsLocal Prometheus and Thanos with live charts in the whycloud console; …
Turn on your own cloud today
Create an account and connect your first server in under five minutes.