Pomerium
Pomerium is an open-source identity-aware proxy built around BeyondCorp and zero-trust principles. It provides clientless access to internal applications, servers, services, and workloads without requiring VPN client software. Before allowing access, it continually checks user identity, device state, and request context. Pomerium supports HTTP, MCP, SSH, gRPC, TCP, and UDP scenarios, and authenticates through identity providers that support OpenID Connect. It strips authentication cookies before forwarding requests to upstream services, and encrypts sensitive databroker data at rest. Downstream TLS accepts TLS 1.2 as the minimum. Core deployment options include Linux and macOS binaries, packages, Docker images, and source builds; desktop clients are available for Windows, macOS, and Linux. The Personal Free plan lists 10 users, 10 routes, five policies, and two service accounts. Business costs 7.00 USD per month, billed annually, and lists limits of 1,000 users, 100 routes, 100 policies, and 20 service accounts. A free trial is listed. Support options include a community forum, email, a dedicated Slack channel, phone support, and a dedicated customer success manager.
Who it is for
Pomerium suits organizations that need controlled access to internal applications and services without VPN client software. Its plans and deployment options cover personal use as well as business and enterprise environments.
What is good
- Access checks include identity, device state, and request context.
- Supports HTTP, SSH, gRPC, TCP, and UDP scenarios.
- Authenticates with OpenID Connect identity providers.
- Sensitive databroker data is encrypted at rest.
- Free Personal plan lists 10 users.
What to know first
- Business is 7.00 USD per month, billed annually.
- Personal Free is limited to 10 routes.
- Downstream TLS minimum is TLS 1.2.
Verdict
Pomerium provides clientless, identity-aware access with checks on user, device, and request context. Its free plan has defined user and route limits; Business adds higher listed capacities for an annual-billed monthly price.
Pomerium plans and pricing
All plansCompared on business VPN software
- Free plan
- Yes
- Paid from
- $7/user/mo
Best Pomerium alternatives
See all 12
$7/mo8.4 OpenVPN Access Server Free plan AndroidiOSLinuxMacself-hosted 
$7/mo8.3 NetBird Free plan AndroidiOSLinuxMacself-hosted 
€6/mo8.2 Cloudflare Access Free plan AndroidapiiOSLinuxMac 
$7/mo8.2 GoodAccess Free plan AndroidiOSLinuxMacWeb 
$9/mo8.2 Tailscale Free plan AndroidiOSLinuxMacWeb 
$1/mo8.1