Features Overview
Gatwy packs a comprehensive feature set into a single ~150 MB Docker container with no external dependencies.
Protocols
| Protocol | Details |
|---|---|
| RDP | WebAssembly-powered — no Guacamole, no Java, native browser speed. Session recording (WebM) with click ripple indicators |
| SSH | Full xterm.js terminal, host key verification, port-forward tunnels, command-level audit log, session recording (asciinema), password auto-redaction |
| VNC | Remote desktop via noVNC, with optional touch input for touchscreen/touchpad devices |
| Telnet | Full IAC negotiation, auto-login, NAWS window resize, session recording |
| SMB | Full file browser for Windows network shares |
| SFTP | Secure file browser, open directly from any SSH connection |
| FTP | File browser with optional FTPS support (certificate validation on by default) |
| MySQL / PostgreSQL | Built-in DB Browser — browse tables, run SQL queries, export results as CSV/JSON |
| Moonlight | Optional low-latency game-streaming protocol, enabled via ENABLE_MOONLIGHT; access is scoped to the connections each user can use |
Feature Categories
- Workspace & UI — split panes, tabs, drag & drop, search
- Connection Management — folders, folder sharing, credential library, tags, import/export, health monitor
- Security & RBAC — 30 permissions, SSO, MFA, IP rules, audit trail
- Passkeys — WebAuthn/FIDO2 passwordless sign-in with phishing-resistant authentication
- Session Recording — live Active Sessions view, encrypted recordings, in-browser playback
- Notifications — email, Telegram, Slack, webhooks, no-code rules
- Backup & Restore — encrypted
.gebbackups with manual and automatic schedules - Port-Forward Tunnels — SSH local→remote port forwards
- Docker Deployment — single container, SQLite, health check,
BASE_PATHfor path-prefix reverse proxies - DB Browser — MySQL & PostgreSQL client built into Gatwy
- Recording Retention — age and size-based auto-purge policies