Pomerium

Pomerium is a US-based company that builds an open-source identity-aware proxy for zero-trust network access. Rather than relying on a traditional VPN, Pomerium authenticates and authorizes every request based on user identity and context before granting access to internal applications and services.

Pomerium's primary product is the Pomerium proxy, which enforces per-request access control using identity providers such as Okta, Google Workspace, and Azure AD. The product targets DevOps and security teams at organizations that want to replace VPN-based perimeter access with a model where no user or service is trusted by default. It is distributed as open-source software under an Apache 2.0 license, with a commercial enterprise edition available. The engineering stack is built in Go.

The core product, Pomerium, acts as an authenticating reverse proxy that sits in front of internal applications. It integrates with existing identity providers and supports fine-grained authorization policies. The project is publicly maintained on GitHub. Detailed public information on named additional products or specific launch dates beyond the core proxy is limited.

Pomerium achieved FedRAMP authorization, which is a meaningful certification for US government and public-sector customers.

Pomerium operates in the zero-trust network access (ZTNA) space, where it competes with products such as Cloudflare Access, HashiCorp Boundary, and Teleport. Its open-source model differentiates it from fully proprietary ZTNA vendors by giving engineering teams the ability to self-host and audit the codebase.