Zero-trust access & VPN in Security & Identity


1	TailscalePopular WireGuard-based mesh VPN with SSO, ACLs and MagicDNS that connects devices and servers with no setup.	38.7k	n/a	n/a	6d ago	84
2	WireGuardPopular Fast, modern in-kernel VPN protocol with a tiny codebase; the foundation of most new VPN products.	No public repository or package of its own to measure
3	Cloudflare Zero TrustPopular SASE platform with Cloudflare Tunnel, Access and Gateway to publish and protect apps without open ports.	No public repository or package of its own to measure
4	Headscale Open-source, self-hosted implementation of the Tailscale coordination server.	45.4k	n/a	n/a	5d ago	85
5	NetBirdRising Open-source WireGuard mesh VPN with SSO, access policies and a self-hostable management plane.	30.8k	n/a	n/a	4d ago	82
6	Teleport Identity-based access to SSH, Kubernetes, databases and apps with short-lived certificates and session recording.	21.1k	n/a	n/a	6d ago	79
7	Pomerium Identity-aware reverse proxy for context-based zero-trust access to internal apps without a VPN.	5.1k	n/a	n/a	1w ago	68
8	PangolinTrending Self-hosted tunneled reverse proxy with identity-aware access; an open alternative to Cloudflare Tunnel.	23.5k	n/a	n/a	2d ago	80
9	Twingate Commercial ZTNA service that replaces VPNs with per-resource, identity-based access.	No public repository or package of its own to measure
10	ZeroTier Peer-to-peer virtual network that joins devices into one secure LAN across the internet.	17.2k	n/a	n/a	2mo ago	77
11	OpenVPNLegacy Long-established TLS-based VPN; still widespread but increasingly replaced by WireGuard-based tools.	14.8k	n/a	n/a	2d ago	76

1

TailscalePopular

WireGuard-based mesh VPN with SSO, ACLs and MagicDNS that connects devices and servers with no setup.

38.7k

n/a

6d ago

84

2

WireGuardPopular

Fast, modern in-kernel VPN protocol with a tiny codebase; the foundation of most new VPN products.

No public repository or package of its own to measure

3

Cloudflare Zero TrustPopular

SASE platform with Cloudflare Tunnel, Access and Gateway to publish and protect apps without open ports.

No public repository or package of its own to measure

4

Headscale

Open-source, self-hosted implementation of the Tailscale coordination server.

45.4k

n/a

5d ago

85

5

NetBirdRising

Open-source WireGuard mesh VPN with SSO, access policies and a self-hostable management plane.

30.8k

n/a

4d ago

82

6

Teleport

Identity-based access to SSH, Kubernetes, databases and apps with short-lived certificates and session recording.

21.1k

n/a

6d ago

79

7

Pomerium

Identity-aware reverse proxy for context-based zero-trust access to internal apps without a VPN.

5.1k

n/a

1w ago

68

8

PangolinTrending

Self-hosted tunneled reverse proxy with identity-aware access; an open alternative to Cloudflare Tunnel.

23.5k

n/a

2d ago

80

9

Twingate

Commercial ZTNA service that replaces VPNs with per-resource, identity-based access.

No public repository or package of its own to measure

10

ZeroTier

Peer-to-peer virtual network that joins devices into one secure LAN across the internet.

17.2k

n/a

2mo ago

77

11

OpenVPNLegacy

Long-established TLS-based VPN; still widespread but increasingly replaced by WireGuard-based tools.

14.8k

n/a

2d ago

76

Zero-trust access & VPN

Tailscale

WireGuard

Cloudflare Zero Trust

Headscale

NetBird

Teleport

Pomerium

Pangolin

Twingate

ZeroTier

OpenVPN

Comparison

Zero-trust access & VPN

Tailscale

WireGuard

Cloudflare Zero Trust

Headscale

NetBird

Teleport

Pomerium

Pangolin

Twingate

ZeroTier

OpenVPN

Comparison

Search TechInTrends

Zero-trust access & VPN

Tailscale

WireGuard

Cloudflare Zero Trust

Headscale

NetBird

Teleport

Pomerium

Pangolin

Twingate

ZeroTier

OpenVPN

Comparison

Zero-trust access & VPN

Tailscale

WireGuard

Cloudflare Zero Trust

Headscale

NetBird

Teleport

Pomerium

Pangolin

Twingate

ZeroTier

OpenVPN

Comparison