Defguard

WireGuard VPN and identity platform with MFA

Remote Access & VPN ★ 2.9k stars Medium setup Apache-2.0

Defguard is an open-source WireGuard VPN and identity management platform with multi-factor authentication and an OpenID Connect provider. It is fully self-hosted for secure remote access.

Key features

  • WireGuard VPN management
  • Built-in MFA
  • OpenID Connect provider
  • LDAP synchronization

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Active community (2.9k GitHub stars)
  • Written in Rust

Is Defguard secure?

OSV.dev has no published security advisories for Defguard's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

Source: OSV.dev, checked 2026-10-14. How this is measured.

Defguard replaces

Health badge

Maintain Defguard? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 87 · excellent

Markdown
[![SelfHostIndex health score for Defguard](https://selfhostindex.com/badge/defguard.svg)](https://selfhostindex.com/app/defguard/)
HTML
<a href="https://selfhostindex.com/app/defguard/"><img src="https://selfhostindex.com/badge/defguard.svg" alt="SelfHostIndex health score for Defguard"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/defguard.svg
   :alt: SelfHostIndex health score for Defguard
   :target: https://selfhostindex.com/app/defguard/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Defguard

4 head-to-head comparisons.

Similar remote access & vpn apps