Defguard

Defguard is a self-hosted, open-source platform for managing access to internal systems. The solution combines identity and access management with VPN capabilities, designed as an alternative to cloud-based SSO and VPN solutions. The platform integrates with WireGuard for secure network access and supports LDAP/Active Directory integration for user management. The platform provides user, group, and device management with role-based access control. It implements zero-trust security principles through fine-grained access control lists that define who can access specific resources from particular locations. All components are designed to be fully self-hosted without external dependencies, keeping organizational data on-premises. Defguard was developed by a team with over 15 years of experience in deep-tech software development, including work on secure infrastructure platforms, enterprise multi-factor authentication systems, and mission-critical backend systems. The platform targets organizations seeking privacy-focused, self-hosted alternatives to cloud-based access management solutions and closed-source enterprise deployments. The company positions itself as an on-premises and open-source alternative similar to how GitLab serves as an alternative to GitHub, focusing on enabling organizations to implement security and privacy measures while maintaining full control over their infrastructure and data.