Warpgate is a self-hosted Rust bastion that assigns authenticated users to specific SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP, and VNC targets. It provides browser and native access, TOTP, OpenID Connect, brute-force protection, tickets, and optional session recording.