firezone/firezone

Health v2 · maintenance only

Flags: no_readme

Adoption not part of the score

9042 stars · 450 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Firezone is an open-source, enterprise-ready zero-trust access platform built on WireGuard that replaces traditional VPNs with granular, policy-based access to apps, services, and networks. It includes a Phoenix/LiveView admin console, Rust-based clients and gateways for all major platforms, and identity provider sync via OIDC or directory integrations.

Use cases

• replace OpenVPN with a faster WireGuard-based VPN
• give contractors least-privilege access to internal services
• securely access a homelab or VPC from anywhere
• sync users and groups from Okta, Entra ID, or Google for automatic onboarding
• restrict access to resources based on device posture or time of day
• deploy gateways with load balancing and failover across clouds

When to choose

• you need zero-trust remote access with per-resource policies instead of flat VPN access
• you want an open-source, self-hostable or managed alternative to Tailscale/Cloudflare Access
• you need native clients across macOS, Windows, Linux, iOS, and Android
• you want identity-provider-driven onboarding and offboarding

When to avoid

• you only need simple full-mesh peer-to-peer networking without policy management
• you require consumer-style anonymous VPN for privacy from your ISP
• you cannot run or manage gateways and prefer a fully turnkey SaaS-only solution

Facets

application · maturity active

vpn security networking auth self-hosted security networking privacy self-hosted windows cross-platform self-hosted zero-trust wireguard ztna remote-access identity-provider-sync oidc network-access-control devops linux macos android ios docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="firezone/firezone")