SaltGUI alternatives: a Salt web UI for Windows and teams
SaltGUI is a solid open-source web UI for Salt. What to look for when a team needs roles, approvals, patching, compliance, Windows, and audit evidence on top of it.
SaltGUI is the open-source web interface most Salt users find first. It is actively maintained, MIT licensed, talks straight to salt-api, and it is genuinely good at what it is: a window onto your master for people who already know Salt. Gardience itself builds on it.
Teams that start looking for more usually have one of these reasons. SaltGUI being broken is rarely one of them.
Signs you have outgrown a plain Salt UI#
- People who should not need Salt syntax (help desk, junior admins, the Windows team) have to run things.
- You need guardrails: some changes should wait for a second person, some machines must not change outside a window, some should be locked.
- Patching and compliance have to be reported fleet-wide, for Windows and Linux, not inferred from job returns.
- An auditor asks who changed what, on which machines, with what result, and how you know the record was not edited.
- Single sign-on is required.
SaltGUI was not built for those jobs. It shows you Salt. Roles, approvals, reports, and evidence sit a layer above it.
What to look for#
| Need | What good looks like |
|---|---|
| Ease | Common tasks as buttons and forms; search for commands in plain words |
| Access | Roles mapped from your identity provider (SAML, OpenID Connect) or directory |
| Guardrails | Two-person approval, change windows, machine locks, break-glass access |
| Patching | Pending updates per machine, Windows and Linux, with pilot and broad rings |
| Compliance | A scored baseline (STIG/CIS-aligned), one-click fixes, drift repair |
| Evidence | A tamper-evident audit log of every action and every machine's result |
| Support | Someone accountable when it breaks, and tested releases |
Your options#
- Stay on SaltGUI and add scripts. Fine for a small team of Salt experts. Budget for writing and maintaining the reporting, approval, and audit pieces yourself.
- The commercial Broadcom console. It covers much of the table above, but its standalone support ends in October 2028 and its master plugin breaks on Salt 3008 until patched by hand. See Broadcom Tanzu Salt end of support.
- Gardience. A supported console on open-source Salt that keeps a direct Salt view for experts and adds the rest: forms and a command center, an AI assistant that writes the exact Salt command or state (and runs nothing until a person approves), roles with single sign-on, two-person approval, patching, and a scored baseline for Windows and Linux, drift repair, event rules, and a signed evidence pack. Flat yearly price, free 90-day trial.
A fair comparison#
| SaltGUI | Gardience | |
|---|---|---|
| Price | Free, open source | Flat yearly fee per fleet size; free trial |
| Salt view for experts | Yes | Yes |
| Forms, command search, AI assistant | No | Yes |
| Roles, single sign-on | Uses Salt's own auth | Roles, SAML, OpenID Connect, AD/LDAP |
| Two-person approval, change windows, locks | No | Yes |
| Patching and STIG/CIS baseline, Windows and Linux | No | Yes |
| Tamper-evident audit log, evidence pack | No | Yes |
| Support | Community | Supported, with a CVE-fix SLA |
If SaltGUI covers what you need, keep using it. If the table's right column describes your week, try Gardience on the same Salt you already run.
Questions#
Is SaltGUI still maintained?#
Yes. It is active on GitHub under the MIT license, with regular releases.
Do I have to replace my Salt master to use Gardience?#
No. Gardience can install its own master or attach to an existing one, and uses your states, pillars, and minions as they are.
Can I still use the raw Salt view?#
Yes. Gardience keeps a direct Salt view for people who know Salt, under the same roles and audit log.
Try Gardience on your own machines
One supported console for Windows and Linux on open-source Salt: patching, a scored STIG/CIS-aligned baseline, drift repair, event-driven automation, two-person approval and a tamper-evident audit log. Flat yearly pricing, not per node.
Free 90-day trial (25 nodes)See it work Compare