Pomerium | Zero trust, identity-aware proxy | Pomerium
Pomerium enables clientless, secure connections to your applications without a VPN
Categories:
Pomerium is a zero-trust, identity-aware reverse proxy that provides secure, clientless access to internal web apps, services, and AI agents for humans, services, and non-human identities without a VPN.
🚀 Overview
Access control hasn't kept up with modern workflows or non-human identities, leaving gaps in per-request authorization, context-aware decisions, multi-environment support, universal identity handling, self-hosted control, and auditability. Pomerium solves these by providing a unified Zero Trust proxy that secures every request.
It is built for security-conscious organizations, global enterprises, AI innovators, high-scale engineering teams, and developers securing legacy, cloud-native, and AI infrastructure.
Pomerium was built to close these security gaps, enabling faster, safer, and auditable access that replaces VPNs and legacy tools with modern Zero Trust principles.
✨ Key Features
- Per-request authorization (apply policy to every action, control more than just sessions)
- Context-aware policies (use identity, time, device, and other signals to make smarter access decisions)
- Multi-environment support (apply Zero Trust across cloud, hybrid, and on-prem without re-architecture)
- Universal identity support (secure users, services, and AI agents with one consistent model)
- Self-hosted control and audit-ready (keep data/traffic/policies in your environment; log/trace every decision) Optional: upcoming features like enhanced AI agent support in recent v0.32 releases
🛠 Tech Stack
- Frontend: TypeScript, JavaScript (UI components)
- Backend: Go (core proxy)
- Database: N/A (stateless, configuration-driven)
- Auth: OIDC identity providers (e.g., Google, Okta, Azure AD), JWTs, mTLS
- Hosting: Self-hosted (Docker, Kubernetes), Managed Pomerium Zero
👥 Who Is This For?
This project is useful for:
- Developers who want to secure internal apps, APIs, databases, and dev tools without VPNs
- Teams looking for zero-trust access to Kubernetes, CI/CD, multi-tenant environments, and services
- Enterprises building secure access for humans, services, contractors, and AI agents
📸 Screenshots / Demo
- Live demo: https://console.pomerium.app/create-account
- GitHub: https://github.com/pomerium/pomerium
🔥 Project Status
- 🟢 Actively building
Last updated: 2026-03-24
❓ FAQ
Is this project free?
Freemium / Open Source — Personal Free tier for individuals (limited features), Business $7/user/month, Enterprise custom pricing. Core is open source and self-hostable.
Is the source code available?
Yes — https://github.com/pomerium/pomerium (Apache-2.0 license, 4.7k stars)
Can I contribute?
Yes — Review the contributing guide at https://www.pomerium.com/docs/community/contributing, report issues, or submit pull requests on GitHub.
📬 Contact & Links
- Website: https://www.pomerium.io
- GitHub: https://github.com/pomerium/pomerium
- Twitter/X: https://x.com/pomerium_io
- LinkedIn: https://www.linkedin.com/company/pomerium-inc
Built with ❤️ and kept warm on WarmIndex.
Similar apps
Scaledrone Realtime Messaging Service
scaledrone.com
Scaledrone is a realtime messaging service and platform. Send live updates, create chatrooms and collaborative tools.
Online cron service - EasyCron
easycron.com
EasyCron provides the most stable online cron service. Here you can schedule cron jobs that run periodically, with execution logs, email notifications, webhooks, execution time predictions and a bunch of other features.
SpeedTest by OpenSpeedTest™ HTML5 Internet Speed Test.
openspeedtest.com
Run a free Internet Speed Test in your browser. No app needed. Fast, accurate HTML5 SpeedTest for any device measuring download, upload, ping, and jitter.
Real-time Pair Programming with any IDE - Duckly
duckly.com
Duckly is a pair programming tool that enables you to code together with people using different IDEs. Share your code in real-time, talk, share your server, terminal and more with Duckly.