Defguard
Open-source zero-trust network access solution with built-in WireGuard VPN and multi-factor authentication for secure remote access.
Defguard is an open-source alternative to:
DefGuard is a self-hosted zero-trust access management platform that combines WireGuard VPN with robust 2FA/MFA capabilities. Designed for teams and enterprises, it provides secure remote access without compromising security or privacy.
Key Features
- WireGuard Integration: Native WireGuard VPN support for high-performance secure networking
- Multi-Factor Authentication: Built-in 2FA/MFA with TOTP, hardware keys, and backup codes
- Zero-Trust Architecture: Enforces least-privilege access controls and continuous verification
- Self-Hosted: Full control over data with on-premise or private cloud deployment
- User Management: Centralized user provisioning, roles, and permissions
- Audit Logging: Comprehensive activity tracking and compliance reporting
- Multi-Platform Support: Works with Windows, macOS, Linux, and mobile devices
- Open Source: Transparent codebase with community-driven development
Tech / Self-Hosting
DefGuard is built with Go and TypeScript, using PostgreSQL for data storage. The platform can be deployed via Docker containers or directly on bare metal servers. Comprehensive documentation is available for Kubernetes deployments and production setups. All components are designed for high availability and scalability.