Blog

Blog

Engineering deep dives, product updates, and perspectives on SSH security from the Mezite team.

Technical June 20, 2026

Decoupling Audit Logging: Why We Built an Asynchronous Emitter

A deep dive into Mezite's audit logging architecture. Discover how we decouple database writes from the fast path to guarantee low latency and high throughput.

Read more
Technical May 10, 2026

Single-Port Architecture: Multiplexing Protocols with ALPN

A technical deep dive into how we use TLS ALPN to serve HTTPS, gRPC, reverse tunnels, and SSH all over a single port, simplifying deployment and firewall rules.

Read more
Technical April 15, 2026

Why We Choose Ed25519 for SSH Certificate Authorities

A technical look at our decision to standardize on Ed25519 for CA keypairs, focusing on performance, security properties, and side-channel resistance.

Read more
Announcements March 1, 2026

Introducing Mezite: Self-Hosted SSH Access

Today we are launching Mezite, a self-hosted platform that replaces static SSH keys with certificate-based authentication. Single signed binary, closed source, source-available under enterprise license.

Read more
Security February 15, 2026

Why Self-Hosted?

Your SSH access platform holds the keys to every server in your infrastructure. Here is why it should run on your hardware, in your network, under your control.

Read more
Technical January 15, 2026

Certificate-Based SSH Authentication Explained

SSH keys have been the default for decades. They are also one of the biggest unmanaged attack surfaces in most organizations. Here is how certificates fix this.

Read more
Technical April 10, 2024

Why We Moved SSH Session Recording to the Edge

A technical look at why proxy-based session recording is a flawed architecture for modern infrastructure, and how we implemented node-mode recording at the PTY level in Go.

Read more