SHSelfHostIndex

Pomerium

Identity-aware reverse proxy for zero-trust access

Reverse Proxy & Gateways ★ 5k stars Medium setup Apache-2.0

Pomerium is an open-source identity-aware reverse proxy that secures internal applications without a VPN. It enforces context-aware access policies on every request.

Official siteSource code

Key features

  • Identity-aware access proxy
  • Context-aware policies
  • No VPN required
  • SSO integration

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Kubernetes-ready with Helm charts available
  • Mature project with 5k GitHub stars

Is Pomerium secure?

No known vulnerabilities affect Pomerium's latest release (v0.33.4). OSV.dev lists 11 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-50285, published 2026-09-17 (27 days ago), fixed in 0.32.8

Source: OSV.dev, checked 2026-10-14. How this is measured.

Pomerium replaces

Self-hosted Cloudflare Access alternativesSelf-hosted BeyondCorp alternatives

Health badge

Maintain Pomerium? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 92 · excellent

Markdown
[![SelfHostIndex health score for Pomerium](https://selfhostindex.com/badge/pomerium.svg)](https://selfhostindex.com/app/pomerium/)
HTML
<a href="https://selfhostindex.com/app/pomerium/"><img src="https://selfhostindex.com/badge/pomerium.svg" alt="SelfHostIndex health score for Pomerium"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/pomerium.svg
   :alt: SelfHostIndex health score for Pomerium
   :target: https://selfhostindex.com/app/pomerium/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Pomerium

3 head-to-head comparisons.

Similar reverse proxy & gateways apps