Zedlin for teams
A Zedlin server is one Docker image on a host you control. It holds the credentials, keeps the connections, watches your servers around the clock and runs the work, so people get access without getting the passwords.
Access
Put people in teams, give each team a level per module on the servers it needs, and read the result on one page: servers, vault items, apps and people, with who can reach them.
One door
Members connect through the Zedlin server instead of carrying credentials on their devices. Each server opening is approved on their own approval device, and you can see what happened afterwards.
Monitoring
The server collects metrics and runs healthchecks even when every phone is in a pocket, and sends a push alert to the people who should hear about it.
Modules
Each of these has its own page with the details.
Checks and metrics around the clock, and rules for who hears about what.
Versioned playbooks that run on the server, with live output.
Versions, deployments, actions, checks and error tracking.
Analysis across every server, and rules you change in one place.
Connection logs, scored addresses and daily scans.
WireGuard networks, forwards and the device bridge.
Scheduled restic backups to your own storage.
Shared items, password delivery and per-person offline access.
Fleet tools
These pages look across every server, analyse what they find and let you act from there.
Keep playbooks on the server, run them from the app, and read the output of every host.
Your own and third-party apps: versions, installs, command or playbook actions, checks and Sentry-style error tracking.
Scheduled restic backups to S3, B2, SFTP and more. Browse snapshots, download and restore files.
See every server's rules by address and port, and block or allow in one place across all, a tag or chosen servers.
Who connected to which port, and whether it got through, with threat analysis and one-click blocking. Uses an optional collector.
Daily scans that show what is open from outside and what is listening, with alerts for changes.
Reach servers with no public address through a WireGuard gateway Zedlin sets up over SSH.
Expose a service on a closed network through a host of yours, limited to the addresses you allow.
A server only your laptop can reach? Team jobs run through the device that starts them, and secrets still stay on the server.
Run one command on many servers. The job runs on the Zedlin server, so closing the window doesn't stop it.
Getting started
Start the Zedlin server image with Docker on a Linux host you control. Its database and time-series store come inside the image.
Add the server in the Zedlin app with its setup code. You become the owner, and your sign-in details are created and saved for you.
Invite people with a QR code, put them in teams and choose what each team may do. Nobody types or sees a server password.
Write to us with the size of your team and how you work today. We'll help you get the server running.