Firezone is a WireGuard-based VPN replacement that implements zero trust network access (ZTNA) for organizations. It allows teams to define access policies for applications, services, and networks, replacing traditional VPN configurations with a simpler policy-driven model. Key aspects of how it works: - Gateways are deployed as lightweight Linux binaries wherever access is needed, configurable via a token - Client apps are available for all major platforms and require no manual configuration - Users and groups sync automatically with an organization's identity provider, streamlining onboarding and offboarding - Access policies support conditional rules based on real-time factors such as device location and time of day - All authorized connections are logged and viewable by user, resource, or policy The project is open source, allowing the codebase to be publicly reviewed. It is backed by Y Combinator and used by hundreds of organizations. Deployment options for gateways include Docker, Kubernetes, Terraform, and Pulumi.