Defguard
WireGuard VPN and identity platform with MFA
Defguard is an open-source WireGuard VPN and identity management platform with multi-factor authentication and an OpenID Connect provider. It is fully self-hosted for secure remote access.
Key features
- WireGuard VPN management
- Built-in MFA
- OpenID Connect provider
- LDAP synchronization
Strengths
- Released under the Apache-2.0 license
- First-class Docker support for quick deployment
- Active community (2.9k GitHub stars)
- Written in Rust
Is Defguard secure?
OSV.dev has no published security advisories for Defguard's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.
Source: OSV.dev, checked 2026-10-14. How this is measured.
Defguard replaces
Health badge
Maintain Defguard? Add its health score to your README. The badge links back to this page.
Compare Defguard
4 head-to-head comparisons.
Similar remote access & vpn apps
RustDesk
Remote Access & VPNOpen-source remote desktop alternative to TeamViewer
Replaces TeamViewer, AnyDesk
frp
Remote Access & VPNFast reverse proxy to expose local servers behind NAT
Replaces ngrok
Headscale
Remote Access & VPNOpen-source self-hosted Tailscale control server
Replaces Tailscale
Sunshine
Remote Access & VPNSelf-hosted game-stream host for Moonlight clients
Replaces NVIDIA GameStream, Parsec
Tailscale
Remote Access & VPNZero-config mesh VPN built on WireGuard
Replaces ZeroTier
JumpServer
Remote Access & VPNOpen-source bastion host and PAM platform
Replaces CyberArk, Teleport