What is Pomerium used for?

Pomerium is an identity and context-aware access proxy written in Go that secures internal apps and services without a corporate VPN. It is a good fit for zero-trust access to internal web apps, reducing reliance on a corporate VPN and protecting internal tools with identity-based access.

Is Pomerium open source?

Yes. Pomerium is open source under the Apache-2.0 licence. Its source code is on GitHub at pomerium/pomerium and is written mainly in Go.

Yes. Pomerium is open source, so the software itself is free to use. A managed cloud version is also available, with paid plans from $7 per seat per month.

Can I self-host Pomerium?

Yes. Pomerium can be self-hosted on your own server or infrastructure.

What is Pomerium an alternative to?

Pomerium is an open-source alternative to Cloudflare Zero Trust, Twingate, Zscaler and StrongDM. Other open-source alternatives to Cloudflare Zero Trust include Octelium, OpenZiti and NetBird.

Is Pomerium actively maintained?

Yes. The most recent commit to Pomerium was on 2 October 2026, and the latest release is v0.33.3, published on 9 September 2026. The project has 5k stars on GitHub.

Pomerium: open-source alternative to Cloudflare Zero Trust

About Pomerium

Pomerium is an identity and context-aware reverse proxy that makes secure, clientless connections to internal web apps and other services. The goal is to protect internal resources without asking users to connect through a corporate VPN.

According to the project, clientless access makes it easier to adopt, running tunnel-free and close to your apps and services makes it faster, and verifying each action before it executes makes it safer. Context-aware policies can draw on data from several sources, so access decisions can reflect your organization's own needs. Repository topics point to zero-trust, BeyondCorp-style, identity-aware proxy and IAM use cases.

Pomerium is written in Go and licensed under Apache-2.0. Teams that want a hosted control plane and a management GUI can look at Pomerium Zero, while the open-source proxy can be run on your own infrastructure. Documentation and tutorials are available on pomerium.com.

Key features

Identity-aware reverse proxy
Clientless access to internal apps
Per-request verification of every action
Context-aware access policies
Tunnel-free deployment near your services
Hosted control plane via Pomerium Zero

Good fit for

→Zero-trust access to internal web apps
→Reducing reliance on a corporate VPN
→Protecting internal tools with identity-based access

Built with: Go
Tags: reverse-proxy; zero-trust; identity-aware-proxy; iam; beyondcorp; go; access-proxy; gateway

Pomerium: questions and answers

What is Pomerium used for?: Pomerium is an identity and context-aware access proxy written in Go that secures internal apps and services without a corporate VPN. It is a good fit for zero-trust access to internal web apps, reducing reliance on a corporate VPN and protecting internal tools with identity-based access.
Is Pomerium open source?: Yes. Pomerium is open source under the Apache-2.0 licence. Its source code is on GitHub at pomerium/pomerium and is written mainly in Go.
Is Pomerium free?: Yes. Pomerium is open source, so the software itself is free to use. A managed cloud version is also available, with paid plans from $7 per seat per month.
Can I self-host Pomerium?: Yes. Pomerium can be self-hosted on your own server or infrastructure.
What is Pomerium an alternative to?: Pomerium is an open-source alternative to Cloudflare Zero Trust, Twingate, Zscaler and StrongDM. Other open-source alternatives to Cloudflare Zero Trust include Octelium, OpenZiti and NetBird.
Is Pomerium actively maintained?: Yes. The most recent commit to Pomerium was on 2 October 2026, and the latest release is v0.33.3, published on 9 September 2026. The project has 5k stars on GitHub.