> For the complete documentation index, see [llms.txt](https://docs.bastionzero.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bastionzero.com/docs/home/readme/server-access.md).

# Server Access

{% hint style="danger" %}

### <mark style="color:red;">**The BastionZero product is maintained for existing BastionZero customers only.**</mark>&#x20;

Moving forward, we are natively rebuilding BastionZero’s technology as Cloudflare’s [Access for Infrastructure](https://developers.cloudflare.com/cloudflare-one/applications/non-http/infrastructure-apps/) service.
{% endhint %}

BastionZero allows you to secure your remote Linux hosts using Zero Trust Access by leveraging our multi-root zero trust protocol (MrZAP) and without the need for using Secure Shell (SSH).

With BastionZero, you can:

* Support access to your servers even if they are on private IPs
* Close SSH ports on your servers
* Eliminate management of server account passwords and SSH keys
* Control who has access to what account on which servers (e.g. Alice has access to root account on server centos-nyc-123)
* Obtain an audit trail of who logged into what machine as which account, and what commands were run
* Obtain ascii-cinema session recordings of their interactive sessions
* Eliminate single points of compromise associated with jump hosts and VPNs using our MrZAP protocol

{% hint style="info" %}
See [Server Deployment](/docs/deployment/installing-the-agent.md#remote-servers) for instructions on securing your server with BastionZero.
{% endhint %}

Using package managers, `zli` Quickstart, or a Bash or Ansible script will implement the autodiscovery process. Once BastionZero's `bzero` agent is installed, it will phone home to BastionZero using either your organization's default registration API key's secret or a short-lived activation token.