Userify vs SSH Universal Key Manager

The shim (their agent) installs in the blink of an eye. The old server took a lot longer (about five minutes) but only needs one command to install, so you can walk away and come back. (The new server installs in about five seconds as well.)

Lots of built-in recipes make deploying pretty fast, and just adding a single server is pasting a one-liner that takes a few milliseconds to install.

It manages sudo permissions (root/user/none) in a nice color-coded interface based on projects. You can manage more than one server in groups.

This is a pretty awesome feature. When you remove a user, not only are their keys removed, but any active sessions are terminated and home directory renamed to deleted:$username so that you can go check it out and get any work files left in it (or hacking evidence). Even better, if you later restore their access, their home directory automatically gets restored as well.

A single self-hosted installation or Userify Cloud can manage your user accounts in multiple clouds or your own datacenter. All that's needed is HTTPS outbound from your managed instances.

Instantly shows who has access to what server groups in color (red for root/sudo access, green for regular user, and white/none for no access.)

Even if the userify servers go down, you can still log in with your private key.

Cloud is available for free up to 20 servers, while self-hosted is limited to five servers free.

Handles thousands of servers hassle-free using an AWS EC2 cluster.

Users are isolated in what they can see. If a user doesn't have access to a server group, project, or company, they can't see any of its parts -- not even the project or server group names or who has access.

Tip: click the word "None" to change user permissions.

Scans for unused keys (what Userify calls "loose" keys) and presents them on a per-server basis within each server groups. No additional configuration is needed, it just works out of the box.

It's completely free (no credit card needed) and can be used up to 20 servers, and this free tier does NOT expire.

Support is fast and responsive, but more importantly, actually knows the product.

This is great so you don't have to pay per key or per user, and it's easy to control your budget.

Self-hosted Userify integrates with Let's Encrypt, providing instant SSL.

Generates private keys, including both Mac/OSX/Linux RSA keys as well as Putty keys, and can even distribute those keys to end boxes (useful for automation accounts).

Other systems like Userify use other tools like auditd or Splunk to log commands, but SSH UKM has logging built in.

Can scan your existing systems and find and remove old keys.