Pomerium is an identity and context-aware access proxy.
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy
A curated collection of awesome resources for the zero-trust security model.
BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.
Terraform module to define a generic Bastion host with parameterized user_data and support for AWS SSM Session Manager for remote access with IAM authentication.
tobab: the poor mans identity aware proxy, easy to use setup for beyondcorp in your homelab
A backend for performing forward authentication with Auth0 using the Traefik reverse proxy.
Official helm charts for Pomerium.
a traefik / nginx companion to create an identity aware proxy like beyondcorp
brink - a lightweight identity aware proxy
An operator for running Pomerium on a Kubernetes cluster.
Identity-Aware Proxy
SNI respecting TLS reverse proxy that supports pluggable authentication
A simple webserver that serves some basic data for Cloudflare ZTA Managed Network usage
kubectx for gcloud — fast, native CLI to switch gcloud configurations with fuzzy pick, auth checks, and no Python cold-start
Zero Trust AWS architecture: identity-aware proxy, microsegmentation, continuous verification, BeyondCorp patterns on AWS
🔧 Manage and monitor your homelab infrastructure efficiently with Model Context Protocol (MCP) servers through Claude Desktop.
Monitor Claude Code, Codex, and Cursor limits at a glance with a sleek edge-panel, plus project-level usage tracking on macOS.
To associate your repository with the beyondcorp topic, visit your repo's landing page and select "manage topics."