Pomerium

Pomerium is a clientless zero-trust reverse proxy that provides secure access to internal applications without a VPN. It solves the problem of remote access by authenticating users via an existing OIDC identity provider, enforcing centralized policies, and logging all requests. It targets IT and security teams in enterprises and mid-market companies, as well as developers and DevOps teams. It is positioned as a self-hosted, open-source alternative to VPNs and hosted zero-trust solutions, with a focus on security and privacy.

Key features

• Clientless access without VPN
• Layer 7 reverse proxy
• Built on Envoy proxy
• Centralized policy enforcement
• YAML-style policy as code
• Centralized auditing of all requests
• Integrates with OIDC identity providers
• Cryptographically-signed JWT access
• Secure Kubernetes access
• Distributed access for remote teams
• Agentic gateway for AI agents