Pomerium is an identity and context-aware access proxy.
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy
A curated collection of awesome resources for the zero-trust security model.
BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.
Terraform module to define a generic Bastion host with parameterized user_data and support for AWS SSM Session Manager for remote access with IAM authentication.
tobab: the poor mans identity aware proxy, easy to use setup for beyondcorp in your homelab
A backend for performing forward authentication with Auth0 using the Traefik reverse proxy.
Official helm charts for Pomerium.
a traefik / nginx companion to create an identity aware proxy like beyondcorp
brink - a lightweight identity aware proxy
An operator for running Pomerium on a Kubernetes cluster.
Identity-Aware Proxy
SNI respecting TLS reverse proxy that supports pluggable authentication
A simple webserver that serves some basic data for Cloudflare ZTA Managed Network usage
kubectx for gcloud — fast, native CLI to switch gcloud configurations with fuzzy pick, auth checks, and no Python cold-start
Zero Trust AWS architecture: identity-aware proxy, microsegmentation, continuous verification, BeyondCorp patterns on AWS
🔧 Manage and monitor your homelab infrastructure efficiently with Model Context Protocol (MCP) servers through Claude Desktop.
Google Cloud security study cases with Cloud Armor, NGFW, BeyondCorp, KMS, logging, monitoring, VPC Flow Logs, and audit-ready evidence.
To associate your repository with the beyondcorp topic, visit your repo's landing page and select "manage topics."