beyondcorp

Pomerium is an identity and context-aware access proxy.

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.

Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy

A curated collection of awesome resources for the zero-trust security model.

Zero trust system

BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.

Terraform module to define a generic Bastion host with parameterized user_data and support for AWS SSM Session Manager for remote access with IAM authentication.

tobab: the poor mans identity aware proxy, easy to use setup for beyondcorp in your homelab

A backend for performing forward authentication with Auth0 using the Traefik reverse proxy.

Official helm charts for Pomerium.

a traefik / nginx companion to create an identity aware proxy like beyondcorp

brink - a lightweight identity aware proxy

An operator for running Pomerium on a Kubernetes cluster.

Identity-Aware Proxy

SNI respecting TLS reverse proxy that supports pluggable authentication

A simple webserver that serves some basic data for Cloudflare ZTA Managed Network usage