About Pomerium
Pomerium is an identity-aware access proxy that controls who can reach private applications and services. It is open source under the Apache-2.0 license and also has commercial offerings.
What it does
Pomerium sits in front of internal apps and checks identity, context and policy on every request before allowing access. Users sign in with an existing identity provider, so there is no separate VPN login to manage. Access decisions are recorded as logs that help with audits and compliance reviews.
Key features
- Protects private apps with identity checks
- Clientless access through the browser
- Policy as code for access rules
- Airgapped SSH access with session recording
- Access logs for compliance and audits
Who it's for
Pomerium suits platform teams, security engineers and IT admins who protect internal tools, Kubernetes services and SSH hosts. Small teams with a single app may find a simpler login gateway enough.
Pricing and good to know
The core project is licensed under Apache-2.0 and is free to use. The company also offers a platform and enterprise options, with a demo request for buyers. Check the pricing page for current plans, and review the access policies carefully before you move production apps behind the proxy.
Highlights
- Protects private apps with identity checks
- Clientless access through the browser
- Policy as code for access rules
- Airgapped SSH access with session recording
- Access logs for compliance and audits
