Pangolin
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users. observed · 2026-10-14
Health v2 · maintenance only
85/100
- Activity 99
- Release rhythm 85
- Longevity 53
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 0
- age_days: 754
- days_rel: 20
- days_push: 7
- n_releases_24m: 80
Adoption not part of the score
23082 stars · 798 forks observed · 2026-10-14
What it is AI-extracted, prompt v1, taxonomy v1, 2026-10-12, confidence 0.96
Pangolin is an open‑source SASE platform that unifies a WireGuard‑based VPN, zero‑trust reverse proxy, privileged access management, and an identity‑aware AI gateway under a single policy model. It can be self‑hosted or run as a managed cloud service.
Use cases
- Deploy a zero‑trust VPN for remote employees that enforces least‑privilege access.
- Expose internal web applications securely through a reverse‑proxy without exposing the whole network.
- Control access to private AI models using identity‑aware policies and eliminate the need for API keys.
- Replace a legacy VPN and separate reverse‑proxy with a unified, policy‑driven platform.
- Implement privileged access management for critical infrastructure with a single identity source.
When to choose
- You need a unified, open‑source solution that combines networking and security functions.
- Your organization wants to self‑host the control plane for compliance or cost reasons.
- You require zero‑trust access to both traditional workloads and AI workloads.
- You prefer a lightweight, WireGuard‑based connector that can run on any OS or container.
- You want a single policy model for VPN, reverse proxy, PAM, and AI gateway.
When to avoid
- You need a fully managed, vendor‑locked cloud service with no self‑hosting responsibilities.
- Your environment relies heavily on proprietary networking hardware that cannot integrate with WireGuard.
- You lack the operational capacity to maintain and update a self‑hosted security platform.
- You require deep integration with services that are not supported by Pangolin’s connectors or plugins.
Facets
service · maturity active
http-server auth authorization api-gateway security networking artificial-intelligence windows cloud self-hosted zero-trust sase wireguard identity-aware open-source vpn-alternative policy-driven privileged-access-management linux macos android ios docker
6 sources
- readme: https://github.com/fosrl/pangolin · fetched 2026-10-14 · 893348265ebf
- homepage: https://pangolin.net · fetched 2026-09-28 · f965117fe82c
- site_page: https://docs.pangolin.net/ · fetched 2026-09-28 · 45c150bf14ac
- site_page: https://pangolin.net/about · fetched 2026-09-28 · 6de131babd4e
- site_page: https://pangolin.net/pricing · fetched 2026-09-28 · 7b835108ca43
- site_page: https://pangolin.net/faq · fetched 2026-09-28 · 79f039bf196d
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| fosrl/pangolin | main | 85 |
| fosrl/newt | plugin | 89 |
| fosrl/gerbil | backend | 88 |
| fosrl/badger | plugin | 81 |
| fosrl/olm | sdk | 87 |
| fosrl/cli | backend | 84 |
For agents
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem