Zscaler
Cloud-based zero trust security platform providing secure access to applications without traditional VPNs
Open-Source Projects
Discover top open-source software, updated regularly with real-world adoption signals.
Discover top open-source software, updated regularly with real-world adoption signals.
Clientless, zero‑trust access proxy for internal web applications
Pomerium provides secure, clientless connections to internal web apps and services, eliminating VPNs with policy‑driven, identity‑aware access that’s deployed alongside your workloads.
When teams consider Pomerium, these hosted platforms usually appear on the same shortlist.
Looking for a hosted option? These are the services engineering teams benchmark against before choosing open source.
Remote employee accesses internal dashboard
Securely logs in via SSO and reaches the dashboard without VPN, with policies enforcing role‑based access.
Third‑party vendor accesses a specific API
Vendor authenticates through the corporate IdP, and Pomerium grants time‑limited, context‑aware access to the API endpoint.
CI/CD pipeline calls internal service
Pipeline uses service‑account identity; Pomerium validates the request and forwards it, keeping internal services shielded from the public internet.
Zero‑trust segmentation for microservices
Microservices communicate through Pomerium, ensuring each request is authorized based on identity and request context.
It means users do not need to install VPN clients; access is performed through standard web browsers or HTTP clients that are redirected through the proxy.
Unlike VPNs that create a network tunnel, Pomerium operates at the application layer, verifying each request against identity and policy before forwarding it, providing finer‑grained security without tunneling overhead.
Pomerium integrates with common SSO providers such as Okta, Azure AD, Google Workspace, and any OpenID Connect‑compatible IdP.
Yes, the project is open source under Apache‑2.0 and can be deployed on‑premises or in any cloud environment; a hosted option called Pomerium Zero is also available.
The core proxy can run independently; for advanced management and GUI you may use the optional hosted control plane (Pomerium Zero), but it is not mandatory.
Project at a glance
ActiveLast synced 4 days ago