Pangolin is the easiest identity-based VPN alternative. Securely connect to internal applications and infrastructure by granting users and groups access to specific resources. Reduce network and access control complexity. It's open-source, based on WireGuard, fast, and handles NAT traversal.
Hey Product Hunt! We started Pangolin because we were frustrated with how complex remote access has become. It actually started as a simple alternative to Cloudflare Tunnels, but we’ve expanded it into a full ZTNA and VPN replacement.
Most tools either put you on a flat "mesh" network where you can see too much, or they're closed-source and slow you down with central gateways. We went with a "resource-centric" model instead: you grant access to specific apps, databases, or SSH servers rather than specific nodes on the network or even the whole network. Since it’s built on WireGuard with P2P hole-punching, your traffic stays direct and fast.
Everything, from the server to the clients, is fully open-source and you can even self-host the whole stack. We’d love to hear what you think and I'm happy to answer any questions!
Been using Pangolin a few months ago now and it has been amazing. The reverse tunnel proxy is solid obviously, but honestly as an "easy to setup" ingress management and WAF platform (using the crowdsec integration with a few tweaks) it's been sensational.
Hey Milo, that frustration with flat mesh networks where you can see too much is a real security headache. Was there a specific moment where you were setting up remote access and thought why do I have to expose this much just to let someone reach one app?
It's impressive how many features have been added to Pangolin over the last year. Good job.
Pangolin is a very useful tool for publicly hosting services hidden behind secure networks. I have not used the client VPN functionality yet but that would be an interesting replacement for Tailscale for myself.
I'm really happy with Pangolin being open-source and I hope it stays like that, willing to pay for it as I already have.
