Pomerium

Pomerium is a zero trust access proxy that sits between users and internal applications. It verifies identity and permission before allowing access to any resource. The tool works by connecting to your existing identity provider like Google, Okta, Azure, or others.

When someone tries to access an application, Pomerium checks their identity, device status, and other factors against your security rules. Only if everything matches will it grant access. This happens in real time for every request, not just once during login.

Pomerium is open source and can be self-hosted, meaning your data stays under your control. It offers both free and paid versions, with the paid options adding team features and support for larger organizations.

• Zero trust architecture with continuous verification

• VPN replacement with clientless browser access

• Support for Google, Okta, Azure, GitHub, and more identity providers

• Self-hosted proxy keeps data private

• Kubernetes native integration and API security

• Context-aware policies using identity, device, and location

• Real-time access decisions for every request

• Open source with active community

• JWT-based authentication and authorization

• Single sign-on across applications