Pangolin

Identity-aware VPN and reverse proxy for zero-trust remote access

Identity-based remote access platform built on WireGuard that combines reverse proxy and VPN capabilities. Pangolin supports clientless browser access for web apps and client-based private-resource access across macOS, iOS, Windows, Linux, and Android, with zero-trust rules, peer-to-peer tunnels, automatic SSL, SSO/OIDC options, and cloud or self-hosted deployment.

Rate

Website

Is this your product? →

About Pangolin

Pangolin is an identity-based remote access platform built around WireGuard that combines reverse proxy and VPN capabilities in one stack. It lets teams expose specific web applications through browser-based access and reach private resources such as SSH, databases, RDP, or network ranges through client-based access. The product is positioned as zero-trust remote access: users authenticate through identity-aware rules and receive access to defined resources rather than blanket network reachability.

Current public materials describe Pangolin version 1.19.2 with platform support across macOS, iOS, Windows, Linux, and Android, plus peer-to-peer tunnels and clientless browser access across on-prem, cloud, and edge environments. The docs describe cloud and self-host deployment paths, while the homepage and repository show roughly 21K+ GitHub stars. License handling should be described carefully: GitHub reports NOASSERTION and the raw license text includes commercial-license language, so it is safer not to frame Pangolin as simply AGPL-only.

Current pricing has moved to a clearer Cloud/Self-Hosted selector with Basic Free, Team at $4 per user per month, Business at $9 per user per month, and Enterprise custom pricing. Pangolin is best for teams that want a managed or self-hosted alternative to combining separate VPN, tunnel, and reverse-proxy systems, especially when browser access, private-resource access, SSO/OIDC, device approvals, audit logging, and enterprise support need to live under one administrative model.

editorial evaluation

Read our Pangolin review (Score: 90)

Detailed hands-on evaluation by the aicoolies editorial team

Read review →

Pricing & Platform Specs

Pricing Summary

Free Community Edition under AGPL-3.0; Enterprise Edition (FCL) is free for homelabbers/individuals and orgs with <$100K gross annual revenue, paid license required for >=$100K revenue.

full pricing breakdown →

Supported Platforms

macOS, iOS, Windows, Linux, Android; cloud and self-hosted; Docker/DigitalOcean-style deployment paths

Explore categories, tags & use cases

Use Cases

Self-Hosted Deployment DevOps Automation Security Auditing

Alternatives

All Pangolin alternatives →

Blacksmith

Run GitHub Actions on faster bare-metal runners with lower Ubuntu per-minute pricing

Blacksmith is a drop-in replacement for GitHub-hosted runners that executes Actions on bare-metal gaming CPUs and source-shaped cache infrastructure. Migration requires a one-line YAML change. Features include colocated warm caches, persistent Docker layer caching on NVMe, CI observability with log search, and Firecracker microVM isolation. SOC 2 Type 2 certified, with Ubuntu x64 pricing at $0.004/min and 3,000 free minutes/month.

freemium

Teleport Beams

Trusted runtime environments for AI agents in production infrastructure

Teleport Beams provides cryptographically verified, policy-gated access for AI agents to interact with production infrastructure including servers, Kubernetes clusters, and databases. Launched at KubeCon EU 2026, Beams extends Teleport's zero-trust access platform with agent-specific runtime controls, audit trails, and policy enforcement to ensure AI agents operate within defined boundaries when deployed in production environments.

freemiumOpen Source

RustFS

High-performance S3-compatible object storage built in Rust

RustFS is an open-source distributed object storage system built entirely in Rust, offering 2.3x faster performance than MinIO for small object payloads. It provides full S3 API compatibility, enabling seamless migration from MinIO, Ceph, and AWS S3 with existing SDKs and CLI tools. Released under Apache 2.0 license, it avoids MinIO's restrictive AGPL terms. Features include distributed architecture, erasure coding, WORM compliance, encryption via RustyVault, and a web management console.

freeOpen Source

Lightpanda

Zig-built headless browser engineered for AI agent workloads

Open-source headless browser written in Zig for AI agents, crawling, and automation. Lightpanda omits graphical rendering, keeps DOM and JavaScript execution, exposes CDP for Puppeteer/Playwright/chromedp, and adds Agent, PandaScript, and MCP workflows. Current public benchmarks claim about 9x faster execution and 16x less memory than Chrome.

freemiumOpen Source

Discover more tools in this category

Related Tools

computed discovery: shared active categories

OpenLIT

OpenTelemetry-native observability for LLM applications with evals and GPU monitoring

OpenLIT is an open-source AI engineering platform that provides OpenTelemetry-native observability for LLM applications. It combines distributed tracing, evaluation, prompt management, a secrets vault, and GPU telemetry in a single self-hostable stack. With 50+ integrations across LLM providers and frameworks, it lets teams monitor AI applications using their existing observability backends like Grafana, Datadog, or Jaeger.

Open Source

Cilium

eBPF-based networking, security, and observability for Kubernetes

Cilium is a CNCF Graduated, Apache-2.0 project for Kubernetes networking, security, and observability using eBPF. It can replace kube-proxy, enforce identity-aware L3-L7 network policies, and add Hubble flow observability plus Tetragon runtime-security signals. Current source checks support GKE Dataplane V2 using Cilium/eBPF and Azure CNI Powered by Cilium for AKS.

Open Source

OrbStack

Fast and lightweight Docker Desktop alternative for macOS

OrbStack is a macOS application that replaces Docker Desktop with lightweight container and Linux VM management. Its docs emphasize fast starts, lower CPU and memory overhead, and native macOS integration with menu bar controls, file sharing, and network access to containers by name, with exact gains depending on workload. Supports Docker, Kubernetes, and full Linux VMs.

freemium

Ray

Distributed AI compute engine for scaling Python and ML workloads

Ray is an open-source distributed computing framework built for scaling AI and Python applications from a laptop to thousands of GPUs. It provides libraries for distributed training, hyperparameter tuning, model serving, reinforcement learning, and data processing under a single unified API. Ray's public site highlights OpenAI and other enterprise users. Maintained by Anyscale with Apache-2.0 open-source licensing.

freemiumOpen Source

Act

Run GitHub Actions locally for fast feedback

Act is an open-source tool that runs GitHub Actions workflows locally using Docker containers that match GitHub's execution environment. It provides instant feedback on workflow changes without pushing to a repository, supports matrix builds, secret management, and artifact handling. Act can also replace Makefiles by using workflow files as task definitions, making it useful for both CI/CD development and local task automation across development teams.

Open Source

Clerk

Drop-in authentication for modern JavaScript apps

Clerk is a complete authentication and user management platform for React, Next.js, and modern JavaScript frameworks. It provides pre-built UI for sign-in, sign-up, user profiles, organizations, MFA, passkeys, JWT sessions, webhooks, and billing. The Hobby plan supports up to 50,000 monthly retained users per app, with Pro, Business, and Enterprise tiers for growing teams.

freemium

Side-by-Side Comparisons

Pangolin

XPipe

Pangolin vs xPipe

Secure remote access to private infrastructure is essential for self-hosters, DevOps teams, and distributed organizations. Pangolin combines WireGuard VPN with identity-aware reverse proxy for zero-trust access, while xPipe focuses on connection management and shell access across diverse infrastructure. Both target developers who manage remote servers, but their approaches and architectural models differ significantly.

PangolinXPipe

Community experience

Sources & verification

Pangolin Official Website & Product Documentation

Sources checked: September 5, 2026
Content verified: September 6, 2026

Verification dates are editorial checks. Routine CMS saves and automatic updatedAt timestamps do not advance them.

FAQ

What is Pangolin?

Is Pangolin free?

Pangolin offers a free tier alongside paid plans. Free Community Edition under AGPL-3.0; Enterprise Edition (FCL) is free for homelabbers/individuals and orgs with <$100K gross annual revenue, paid license required for >=$100K revenue.

Is Pangolin still maintained?

Yes — Pangolin is active. Its listing was last verified on September 6, 2026.

What are the best Pangolin alternatives?

The first editor-selected Pangolin alternatives are Blacksmith, Teleport Beams, RustFS, and more.

How does Pangolin score in our review?

The published editorial review lists Pangolin at 90/100 overall across speed, privacy, and developer experience. Check the review's evidence status and test metadata for its verification level.

Pangolin

About Pangolin

Read our Pangolin review (Score: 90)

Pricing & Platform Specs

Pricing Summary

Supported Platforms

Categories

Tags

Use Cases

Alternatives

Blacksmith

Teleport Beams

RustFS