Pangolin is the easiest identity-based VPN alternative. Securely connect to internal applications and infrastructure by granting users and groups access to specific resources. Reduce network and access control complexity. It's open-source, based on WireGuard, fast, and handles NAT traversal.
Hey Product Hunt! We started Pangolin because we were frustrated with how complex remote access has become. It actually started as a simple alternative to Cloudflare Tunnels, but we’ve expanded it into a full ZTNA and VPN replacement.
Most tools either put you on a flat "mesh" network where you can see too much, or they're closed-source and slow you down with central gateways. We went with a "resource-centric" model instead: you grant access to specific apps, databases, or SSH servers rather than specific nodes on the network or even the whole network. Since it’s built on WireGuard with P2P hole-punching, your traffic stays direct and fast.
Everything, from the server to the clients, is fully open-source and you can even self-host the whole stack. We’d love to hear what you think and I'm happy to answer any questions!