Pomerium

Pomerium is an open-source application that functions as an identity and context-aware reverse proxy. It enables secure access to internal web applications and services without requiring a corporate VPN. The software operates by verifying every single action before it is allowed to execute, ensuring that access is granted based on the identity of the user and the specific context of the request. This approach allows organizations to move away from traditional perimeter-based security toward a zero-trust architecture.

Key features include clientless access, which removes the need for users to install specialized software or agents on their devices to reach internal resources. It utilizes a tunnel-free architecture, meaning the proxy is deployed directly where the apps and services reside, reducing latency and complexity. By integrating organizational data, the tool allows administrators to define granular access policies that consider various context signals before permitting a connection.

Pomerium is written in Go and is typically deployed as a server or gateway within a network infrastructure. It is used to protect internal dashboards, development environments, and other sensitive web-based tools. The software is designed to be deployed across various environments, including on-premises servers and cloud platforms, where it acts as the primary entry point for authenticated traffic. The project provides a self-hosted core that manages the routing and verification of requests based on pre-defined identity rules. It is positioned as a security layer for businesses that need to verify every request to their internal infrastructure without the overhead of traditional VPN tunnels.