Pomerium | Zero trust, identity-aware proxy | Pomerium
Pomerium enables clientless, secure connections to your applications without a VPN
Categories:
Pomerium is a zero-trust, identity-aware reverse proxy that provides secure, clientless access to internal web apps, services, and AI agents for humans, services, and non-human identities without a VPN.
🚀 Overview
Access control hasn't kept up with modern workflows or non-human identities, leaving gaps in per-request authorization, context-aware decisions, multi-environment support, universal identity handling, self-hosted control, and auditability. Pomerium solves these by providing a unified Zero Trust proxy that secures every request.
It is built for security-conscious organizations, global enterprises, AI innovators, high-scale engineering teams, and developers securing legacy, cloud-native, and AI infrastructure.
Pomerium was built to close these security gaps, enabling faster, safer, and auditable access that replaces VPNs and legacy tools with modern Zero Trust principles.
✨ Key Features
- Per-request authorization (apply policy to every action, control more than just sessions)
- Context-aware policies (use identity, time, device, and other signals to make smarter access decisions)
- Multi-environment support (apply Zero Trust across cloud, hybrid, and on-prem without re-architecture)
- Universal identity support (secure users, services, and AI agents with one consistent model)
- Self-hosted control and audit-ready (keep data/traffic/policies in your environment; log/trace every decision) Optional: upcoming features like enhanced AI agent support in recent v0.32 releases
🛠 Tech Stack
- Frontend: TypeScript, JavaScript (UI components)
- Backend: Go (core proxy)
- Database: N/A (stateless, configuration-driven)
- Auth: OIDC identity providers (e.g., Google, Okta, Azure AD), JWTs, mTLS
- Hosting: Self-hosted (Docker, Kubernetes), Managed Pomerium Zero
👥 Who Is This For?
This project is useful for:
- Developers who want to secure internal apps, APIs, databases, and dev tools without VPNs
- Teams looking for zero-trust access to Kubernetes, CI/CD, multi-tenant environments, and services
- Enterprises building secure access for humans, services, contractors, and AI agents
📸 Screenshots / Demo
- Live demo: https://console.pomerium.app/create-account
- GitHub: https://github.com/pomerium/pomerium
🔥 Project Status
- 🟢 Actively building
Last updated: 2026-03-24
❓ FAQ
Is this project free?
Freemium / Open Source — Personal Free tier for individuals (limited features), Business $7/user/month, Enterprise custom pricing. Core is open source and self-hostable.
Is the source code available?
Yes — https://github.com/pomerium/pomerium (Apache-2.0 license, 4.7k stars)
Can I contribute?
Yes — Review the contributing guide at https://www.pomerium.com/docs/community/contributing, report issues, or submit pull requests on GitHub.
📬 Contact & Links
- Website: https://www.pomerium.io
- GitHub: https://github.com/pomerium/pomerium
- Twitter/X: https://x.com/pomerium_io
- LinkedIn: https://www.linkedin.com/company/pomerium-inc
Built with ❤️ and kept warm on WarmIndex.
Similar apps
Indie Hackers: Work Together to Build Profitable Online Businesses
indiehackers.com
Connect with developers sharing the strategies and revenue numbers behind their companies and side projects.
Open Source API & AI Management Platform
fusio-project.org
Fusio is an open source API management platform designed for API builders and developers.
Cloudflare Pages
pages.cloudflare.com
Build your next application with Cloudflare Pages
SRS (Simple Realtime Server) | SRS
ossrs.io
SRS is a simple, high efficiency and realtime video server, supports RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH and GB28181. Oryx is an all-in-one, out-of-the-box, and open-source video solution for creating online video services, including live streaming and WebRTC, on the cloud or through self-hosting.