# Flotte

> Flotte is an SSH certificate-management product for teams, designed around configurable short-lived certificates, centralized permissions, OIDC authentication, and identity-linked permission and certificate-issuance records.

Flotte is built for small to medium-sized DevOps and infrastructure teams that want centralized SSH access without distributing persistent user public keys to every managed server. The canonical site is [https://flotte.sh/](https://flotte.sh/).

## Product

- [Home](https://flotte.sh/index.md): Product overview, capabilities, operating boundaries, and availability.
- [Join the Waitlist](https://flotte.sh/waitlist.md): Early-access signup information and data-handling summary.
- [Employee Onboarding and Offboarding](https://flotte.sh/usecase/onboarding-offboarding/): Centralized SSH access eligibility across employee role changes and departures.
- [Supply Chain Resilience](https://flotte.sh/usecase/supply-chain-resilience/): How identity-linked, short-lived SSH certificates can reduce the infrastructure blast radius and cleanup effort after developer endpoint or software supply-chain compromise.

## Compliance Use Cases

- [ISO 27001](https://flotte.sh/usecase/iso-27001/): How Flotte can support SSH access controls and operational evidence within an ISO 27001 programme; it does not establish conformity.
- [NIS2](https://flotte.sh/usecase/nis2/): How Flotte can support core-infrastructure access controls within a wider NIS2 programme; it is not a complete compliance solution.
- [NIS2 SSH Access-Control Checklist](https://flotte.sh/nis2-ssh-access-control-checklist.md): Twelve review questions for server and privileged-access risk management.

## Blog

- [Blog](https://flotte.sh/blog/): Engineering and security articles from Flotte.
- [What Are SSH Certificates, Anyway?](https://flotte.sh/blog/what-are-ssh-certs-anyway/): SSH certificates, certificate authorities, short-lived access, and team access lifecycles.
- [A Practical Guide on SSH Port Forwarding](https://flotte.sh/blog/ssh-port-forwarding-without-the-mystery/): Local and remote forwarding, reusable tunnel configuration, and security guidance.

## Legal

- [Datenschutz (Privacy Policy)](https://flotte.sh/datenschutz.md): German privacy notice under the DSGVO covering hosting, self-hosted analytics, newsletter signup, and contact data.
- [Impressum (Legal Notice)](https://flotte.sh/impressum.md): German provider details and legal disclosures under the DDG and MStV.

## Optional

- [GitHub](https://github.com/flotte-sh): Flotte repositories.
- [llms-full.txt](https://flotte.sh/llms-full.txt): Consolidated representation of the site's key content.
- [llm.txt](https://flotte.sh/llm.txt): Compatibility alias containing the same public content index.