Pomerium

Pomerium is an open source identity-aware proxy built on BeyondCorp and zero trust principles, providing secure, clientless access to internal applications and services without requiring traditional VPN infrastructure. The platform continuously verifies user identity, device state, and request context before granting access to protected resources. Unlike VPN solutions that establish tunnels, Pomerium acts as a reverse proxy with OAuth authentication, intercepting and routing user traffic through an identity-aware access layer. Every request is authenticated and authorized against configured identity providers, policies, and contextual factors including user location, device posture, time of access, and role-based permissions. Key features include support for multiple identity providers (Google Workspace, Azure AD, Okta, GitHub, OIDC), granular policy enforcement, comprehensive audit logging, and extensive integration capabilities. The platform supports both self-hosted deployments and Pomerium Zero (managed cloud service), with pricing starting at $10/month for managed services. Pomerium is particularly valuable for organizations implementing zero trust architectures, remote work scenarios, and securing internal applications that lack built-in authentication. The solution eliminates the complexity of client-based VPN deployments while providing superior security through continuous verification and contextual access controls. Recent developments include enhanced Kubernetes integration, improved policy management capabilities, and expanded protocol support beyond HTTP/HTTPS.