Pomerium
An identity-aware reverse proxy that gives secure access to internal applications without a VPN.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
1 more ways to get Pomerium
Package managers
- Homebrew
brew install pomerium
About Pomerium
Pomerium sits in front of internal applications as a layer 7 reverse proxy built on Envoy. It authenticates users against an existing OIDC identity provider, checks every request against policies written as YAML, and passes signed JWTs to the upstream applications.
Every request is logged for auditing regardless of identity type. Common uses include securing Kubernetes ingress and kubectl access. The open-source version is run on your own infrastructure, suiting administrators who want zero trust access to self-hosted services.
Strengths
- Clientless access with no VPN client to install
- Works with any OIDC identity provider
- Policy as code in YAML
- Per-request authorization and audit logging
Limitations
- Requires an existing identity provider
- Configuration assumes familiarity with reverse proxies and OIDC
Details
- Pricing
- FreemiumThe open-source version is free to self-host, with paid commercial plans.
- License
- Open source, license not stated
- Developer
- Pomerium
- Platforms
- Self-hosted
- How it runs
- Self-hosted, Hosted service
- Best suited for
- Administrators putting self-hosted apps behind identity-based access
- Categories
- Network tools, Security tools, IT administration
- Last verified
- Added
- Provenance
- Selected from the TechWalrus Resource Hub (Enterprise & Workplace IT); facts checked against the developer's own pages, 2 sources on file.