Flamingo Raises $4.5M to Get MSPs Out of the Ticket Queue

Pomerium logo

Pomerium

Identity and Access Management (IAM)

Open Source
Free Tier
E
Enterprise
Self-hosted
OpenMSP Score
60
47
Reddit Impact Score
Github Score
46M
5KStars
359Forks
4KCommits
Apache License 2.0License
Oct 3, 2026Last commit

Alternative Vendors

Keycloak
Keycloak
Authentik
Authentik
Teleport
Teleport
JumpServer
JumpServer

Commercial Alternatives

Okta
Okta
Azure Active Directory
Azure Active Directory
Huntress
Huntress
Duo Security
Duo Security
Pomerium is an open source identity-aware proxy built on BeyondCorp and zero trust principles, providing secure, clientless access to internal applications and services without requiring traditional VPN infrastructure. The platform continuously verifies user identity, device state, and request context before granting access to protected resources. Unlike VPN solutions that establish tunnels, Pomerium acts as a reverse proxy with OAuth authentication, intercepting and routing user traffic through an identity-aware access layer. Every request is authenticated and authorized against configured identity providers, policies, and contextual factors including user location, device posture, time of access, and role-based permissions. Key features include support for multiple identity providers (Google Workspace, Azure AD, Okta, GitHub, OIDC), granular policy enforcement, comprehensive audit logging, and extensive integration capabilities. The platform supports both self-hosted deployments and Pomerium Zero (managed cloud service), with pricing starting at $10/month for managed services. Pomerium is particularly valuable for organizations implementing zero trust architectures, remote work scenarios, and securing internal applications that lack built-in authentication. The solution eliminates the complexity of client-based VPN deployments while providing superior security through continuous verification and contextual access controls. Recent developments include enhanced Kubernetes integration, improved policy management capabilities, and expanded protocol support beyond HTTP/HTTPS.
image media

Key Features

Zero Trust Access Proxy

Identity-aware reverse proxy that provides clientless access to applications with continuous verification of every request based on identity, device, and context.

Self-Hosted Security

Fully self-hosted data plane ensures your data never leaves your infrastructure while providing hosted control plane for easy management.

Context-Aware Policies

Makes access decisions based on user identity, device posture, location, time, and other contextual factors to enforce sophisticated access policies.

Kubernetes Integration

Native Kubernetes support with Helm charts, kubectl access control, and seamless integration into cloud-native environments.

Pros and Cons

Pros

True Zero Trust

Implements genuine zero trust principles with continuous verification of every action, not just initial authentication like traditional VPNs.

Clientless Access

No client software required - users access applications through standard web browsers, eliminating installation and maintenance overhead.

Self-Hosted Data Plane

Data never leaves your infrastructure as the proxy runs entirely on your systems, while management is simplified through hosted control plane.

Cons

Relatively New

Newer solution in the market with smaller user base and ecosystem compared to established VPN or access management solutions.

Limited Customization

Some users find the customization options limited compared to building custom solutions, though this improves with open source version.

Minimum User Requirements

Enterprise version requires minimum 50 users, which may not be suitable for smaller organizations.

Feature Comparison

Comments

Kateryna ShevchenkoSecureFlow Technologies

Kateryna Shevchenko • SecureFlow Technologies

Jun 26, 2025

Streamlined Identity-Aware Access

Pomerium simplifies secure application access for our MSP clients. The identity-aware features integrate well with existing authentication systems while providing granular access control.

Isabella CostaProSecure MSP

Isabella Costa • ProSecure MSP

Jun 26, 2025

Secure Clientless Access Solution

Pomerium identity-aware proxy eliminates VPN requirements for client application access. The vulnerability assessment perspective appreciates how it reduces attack surface while maintaining usability.

Frequently Asked Questions

Getting Started

OpenMSP is The MSP Knowledge Hub & Community Platform designed specifically for Managed Service Providers seeking to optimize their technology stack, reduce vendor costs, and discover open-source alternatives. We combine a comprehensive vendor directory, open-source solution catalog, and integrated community discussions to help MSPs make informed decisions.
Yes, completely free. Browse vendors and tools, read comparisons, and join community discussions - no cost, no registration required. OpenMSP is community-supported and focused on empowering MSPs to reduce costs and improve operational efficiency through open-source technology.
We help MSPs identify cost-effective alternatives to expensive commercial solutions, provide transparent vendor information, and connect you with proven open-source alternatives. Our platform enables MSPs to make informed decisions about their technology investments.
No account required for browsing vendors, reading comparisons, or accessing community content. Creating a free account with SSO (Microsoft, Google, or Slack) allows you to participate in discussions and save your favorite tools.

Platform Information

OpenMSP is currently community-supported. We focus on providing value to the MSP community first. Any future monetization will keep the core platform free for MSPs while maintaining our independence and commitment to unbiased information.
We focus exclusively on MSP needs with transparent vendor information and open-source alternatives. No vendor partnerships or sponsored listings - just honest, community-driven information to help MSPs make better technology decisions. Our biggest value is our community where MSPs help each other with questions, setup guidance, and sharing real-world experiences.
Our community of MSP professionals helps verify and update information. We also maintain direct research on tools and vendors to ensure accuracy. Community members can report outdated information, and we work to keep everything current.
OpenMSP was founded by Michael Assraf, who has extensive experience in the MSP industry and product leadership. As the former CEO & Founder of Vicarius, Michael grew a startup from $0 to $9M ARR with 500+ customers and deep experience working with MSPs, partners, and fundraising. OpenMSP represents his commitment to empowering the MSP community through better technology decisions and cost optimization.

Open-Source Tools & Alternatives

We assess tools based on active development, community size, documentation quality, production deployments by MSPs, and available support options. Tools must meet strict criteria for reliability and enterprise readiness.
Many open-source projects offer multiple support options including community forums, commercial support from vendors, professional services, and our community discussions where experienced MSPs share implementation guidance.