Pomerium is an identity and context-aware reverse proxy that enables secure, clientless access to internal applications without requiring a corporate VPN.
Pomerium solves the problem of securing access to internal services by verifying identity and context on every request before granting access. Rather than relying on network-level security or VPN tunnels, it acts as a reverse proxy deployed alongside applications, evaluating user identity and organizational context to make fine-grained access decisions. This approach eliminates the need for client software while maintaining continuous verification of all actions.
Organizations should adopt Pomerium when they want to move away from traditional VPN infrastructure toward a zero-trust model where access decisions are based on identity and context rather than network location. It suits teams protecting internal web applications and services that need clientless access from anywhere. The project offers a self-hosted open-source deployment model, with an optional hosted control plane and management interface available separately for organizations preferring managed infrastructure.
The project maintains steady development activity with regular commits across its codebase. Pull requests receive consistent review and integration. Issue tracking shows ongoing engagement with user-reported problems and feature requests. The maintainers actively document changes and maintain comprehensive project documentation. Development follows a structured approach to code contributions and release management.
