Pomerium
Zero trust, identity-aware proxy enabling clientless secure connections to applications.
Pomerium is an open-source identity-aware reverse proxy that provides clientless access to web applications without a VPN. It authenticates users through OIDC-compliant identity providers, authorizes each request with centralized policies, and logs every request for auditing. It can be self-hosted or used with a managed control plane.
Key capabilities include a Layer 7 reverse proxy built on Envoy, continuous policy enforcement defined as YAML-style policy as code, and cryptographically-signed JWTs for upstream access. Integrations cover identity providers such as Okta, Auth0, Azure Active Directory, Google Workspace, GitHub, GitLab, OneLogin, and Ping Identity, as well as platforms including Kubernetes (via an Ingress Controller), Docker, Cloud Run, Amazon EKS, and Google Kubernetes Engine. Additional integrations include Grafana, cert-manager, FleetDM, BambooHR, and code-server. Use cases span secure Kubernetes access, distributed remote access, and per-request authorization and logging for AI agents.
Pomerium is packaged in three editions: a free plan for personal use, a business plan for teams with a hosted control plane and self-hosted data plane priced per user, and an Enterprise edition for large organizations that is fully self-hosted with API access and custom pricing. The business plan offers a free trial.
12 alternatives to Pomerium
Ranked by how well each tool replaces Pomerium: shared features, audience, price and popularity.
Open-source platform for secure connectivity and zero trust access to apps and workloads.
Covers 3 of 15 key features and starts cheaper.
Free planOpen source62 out of 100 match$4/moEnterprise Distributed OpenVPN WireGuard and IPsec Server
Covers 3 of 15 key features.
Free planOpen source61 out of 100 match$10/mo- 59 out of 100 match$8/mo
Business VPN and Zero Trust Network Access, delivered as self-hosted software (Access Node
Covers 2 of 15 key features.
Free planOpen source59 out of 100 match$7/mo- 58 out of 100 match$18/mo
Upgrade your VPN to zero-trust access
Covers 0 of 15 key features and starts cheaper.
Free planOpen source58 out of 100 match$4.17/moZero Trust platform for secure networking built on WireGuard.
Covers 0 of 15 key features and starts cheaper.
Free planOpen source57 out of 100 match$2/mo- 57 out of 100 match—
Zero Trust Network Access – Replace your legacy VPN with user friendly least privileged, 0
Covers 3 of 15 key features.
56 out of 100 matchContact sales- 56 out of 100 matchFree
- 54 out of 100 matchContact sales