Move your team off shared and per-user virtual API keys and onto identity-based access for your AI gateway - no keys to generate, distribute, or rotate for human users.

• ai
• security
• zero-trust
• getting-started

Virtual API keys solve model routing and budgeting well, but they were never built to be an identity system. Here's where that gap shows up in self-hosted LiteLLM and Bifrost deployments, and what to do instead.

• ai
• security
• zero-trust
• self-hosted

A general-purpose guide to putting any self-hosted model server - vLLM, Ollama, llama.cpp, LM Studio, LocalAI, or a private downstream gateway - behind Pangolin's identity-aware AI gateway.

• ai
• self-hosted
• remote-access
• zero-trust
• getting-started

Run open-weight models like DeepSeek, Qwen, and Kimi K2 on your own hardware, then reach them securely from anywhere through Pangolin's AI gateway - no API keys, no data leaving your infrastructure.

• ai
• self-hosted
• remote-access
• zero-trust
• open-source

Give engineers and coding agents access to a self-hosted vLLM or Ollama cluster from one endpoint, authenticated by identity instead of API keys passed around a team.

• ai
• self-hosted
• remote-access
• zero-trust
• vllm
• ollama

Pangolin 1.22 introduces an AI Gateway for cloud and self-hosted models with identity-aware access. SSH, RDP, and VNC public resources, plus SSH and HTTPS private resources, are now available in Community Edition.

• release
• changelog
• ai

Access your NVIDIA DGX Spark from any laptop without SSH, a VPN, or an open port. Run Ollama on the Spark and reach it through Pangolin's identity-aware AI gateway, from the same endpoint you use for cloud models.

• ai
• self-hosted
• remote-access
• nvidia-dgx-spark
• getting-started
• ollama

Pangolin 1.21 adds same-network detection for clients and sites, improves share links and access tokens, and tightens the pending sites provisioning workflow.

• release
• changelog

Pangolin 1.20 rebuilds the Resource Launcher with saved views, grouping, and filtering, and adds a global command palette for administrators.

• release
• changelog

Access Windows desktops through a full RDP session rendered in the browser, with clipboard, file transfer, and standard RDP features. Users need only a web browser on their side.

• rdp
• remote-access
• clientless
• browser-based

Run a full SSH session in any modern browser. Users connect with a URL and authentication, without installing an SSH client, VPN, or desktop app.

• ssh
• remote-access
• clientless
• browser-based

View and control remote displays through a VNC session in your browser. Users connect with a URL instead of installing a standalone VNC viewer or VPN client.

• vnc
• remote-access
• clientless
• browser-based

SSH to private servers through Pangolin with a browser terminal or private CLI over a scoped tunnel. Automatic user provisioning via PAM, without opening port 22 or distributing static keys.

• ssh
• remote-access
• getting-started
• browser-based
• zero-trust

Pangolin 1.19 adds browser-based remote access with SSH, RDP, and VNC in the browser, a simpler Pangolin SSH mode, automatic site updates, labels, and resource policies.

• release
• changelog
• ssh
• rdp
• vnc

Learn what MCP tunnels are, how they connect AI agents to private Model Context Protocol servers over outbound-only connections, and why they matter for enterprise security.

• mcp
• zero-trust
• networking
• security
• ai

Use these remote access policy examples to scope access for admins, contractors, OT systems, internal web apps, and emergency workflows.

• remote-access
• security
• access-control
• zero-trust