Learn about our new remote node self-hosted offering, which combines the best of self-hosted and cloud solutions.

Learn how to use the rules engine to enable geo-blocking for your resources.

How to set up health checks and load balancing targets for resources.

You can now log in to Pangolin with your existing identity provider - including Google, Microsoft, and any OAuth2/OIDC compatible IdP.

Pangolin Blueprints let you manage resources as code with YAML or Docker labels, making configurations automated, consistent, and scalable.

Pangolin 1.17 brings a wave of quality-of-life improvements that strengthen existing functionality around roles, identity providers, site provisioning, logging, and more. Let's dig in!

Pangolin helps MSPs replace VPN sprawl with a multi-tenant, identity-based remote access platform built to scale across client environments.

Pangolin modernizes enterprise SSH access by shifting from legacy, key-based methods to a comprehensive, identity-driven private access model, reducing operational complexity and strengthening security.

While WireGuard is a superb, high-performance Layer 3 tunnel protocol, Pangolin is a full remote access platform built on WireGuard, integrating identity management, policy, and automation.

Pangolin is a network-first Zero Trust Access Platform built to secure the entire enterprise workforce including the engineering team, while Teleport is a protocol-first access broker focused on engineering infrastructure sessions.

Pangolin is a zero-trust access platform that provides secure, identity-centric access to applications and infrastructure - without opening firewall ports or deploying traditional VPNs. Let's walk through how the system works.

How Twingate and NetBird are solving different problems in modern remote access.

How a self-hostable open-source access platform and an enterprise cloud security suite differ in architecture, traffic routing, deployment, and fit.

Managing SSH keys across teams is a nightmare. With version 1.16, Pangolin eliminates that pain entirely with certificate-based SSH authentication, just-in-time user provisioning via PAM, and terminal access that just works.

How an open-source, self-hostable remote access platform compares to Cloudflare One (ZTNA, WARP, Access, and Tunnel).

How an identity-based remote access platform and an identity-aware reverse proxy differ in scope, layer, and deployment.

How Twingate and Tailscale are solving different problems in modern remote access.

How two identity-based remote access platforms differ in architecture, web access, and deployment options.

A comparison of two WireGuard-powered remote access solutions and their differences in architecture, permissions, and use cases.

One year ago, we launched Pangolin as an open-source alternative to Cloudflare Tunnels. Today, with version 1.15, we celebrate our first anniversary with iOS and Android apps, device fingerprinting, posture tracking, and more.

How two WireGuard-based tools for remote access differ in design, access control, and fit.

This article explains what an identity-aware proxy is, how it differs from reverse proxies, VPNs, and ZTNA, and where it fits in modern Zero Trust access. It also looks at how Pangolin supports this pattern for private web applications and broader private-resource access.

Learn how ZTNA works, why it differs from VPN-based remote access, and how identity, device posture, and policy combine to protect private applications.

A tunneled reverse proxy lets enterprises securely publish private applications through outbound tunnels, without exposing internal networks or relying on broad VPN access.

A deep dive into how Pangolin establishes direct peer-to-peer connections through NAT devices and firewalls without opening ports.

We've deployed dedicated points of presence in the EU for our European cloud users.