A bastion host is a highly secured computer system that is intentionally exposed to the public network. It acts as a bridge between the public internet and a private network, providing controlled access to specific services or resources within the private network.