Pangolin
Open-source identity-based remote access platform for IT/OT, IoT, and engineering teams. Provides secure, scalable zero-trust access to applications and infrastructure without VPN complexity.
Pangolin is an open-source alternative to:

Pangolin is an open-source, identity-based remote access platform designed to replace traditional VPNs with a zero-trust architecture. Built for IT/OT, IoT, and engineering teams, Pangolin provides unified, secure access to applications and infrastructure across on-prem, cloud, and edge environments.
Key Features
- Zero Trust Access: Enforce identity and context-aware rules for granular access control
- Multi-Protocol Support: Secure access to SSH, web apps, RDP, databases, and APIs
- Peer-to-Peer Tunnels: Direct connections via WireGuard® for high performance
- Clientless Browser Access: No client installation required for web-based resources
- Unified Dashboard: Centralized management and monitoring of all remote access
- Identity Integration: Connects with existing identity providers (SSO, OAuth, etc.)
- Cross-Platform Support: Native clients for macOS, Windows, Linux, iOS, and Android
- Self-Hosted & Cloud: Deploy on-premises or in your preferred cloud environment
- AI Gateway: Built-in support for connecting to cloud and self-hosted AI models (v1.22+)
Tech / Self-Hosting
Pangolin is built on WireGuard® and released under an open-source license. The platform can be self-hosted on any infrastructure or used via Pangolin's managed cloud service. The connector can be deployed behind any firewall, making it suitable for secure enterprise environments. Documentation and downloads are available at docs.pangolin.net.