Traditional products and tools like VPNs or bastion hosts allow users to connect into an organization’s network in order to access infrastructure resources. However, these products lack features to limit user access to unauthorized systems.

Once VPN connection is established, remote users are free to connect any host, device, system, service provided HashiCorp Boundary streamlines the remote user's access (SSH, RDP, databases, kubectl, etc) to infrastructure resources. Boundary also improves infrastructure security by using identities to enforce least privileged principles whereby users or groups are authorized access only to specific target resources pre-authorized by platform administrators.

Boundary also integrates nicely with Vault to manage credentials allowing administrators to automatically provision and inject dynamic, short-live credentials, further improving security.