Tailscale

WireGuard

wireguard.com

Popular

Fast, modern in-kernel VPN protocol with a tiny codebase; the foundation of most new VPN products.

Cloudflare Zero Trust

cloudflare.com

Popular

SASE platform with Cloudflare Tunnel, Access and Gateway to publish and protect apps without open ports.

Headscale

juanfont/headscale

Open-source, self-hosted implementation of the Tailscale coordination server.

NetBird

netbirdio/netbird

Rising

Open-source WireGuard mesh VPN with SSO, access policies and a self-hostable management plane.

Teleport

gravitational/teleport

Identity-based access to SSH, Kubernetes, databases and apps with short-lived certificates and session recording.

Pomerium

pomerium/pomerium

Identity-aware reverse proxy for context-based zero-trust access to internal apps without a VPN.

Pangolin

fosrl/pangolin

Trending

Self-hosted tunneled reverse proxy with identity-aware access; an open alternative to Cloudflare Tunnel.

Twingate

twingate.com

Commercial ZTNA service that replaces VPNs with per-resource, identity-based access.

ZeroTier

zerotier/ZeroTierOne

Peer-to-peer virtual network that joins devices into one secure LAN across the internet.