defguard - Cybersecurity Tool

Tool Icon

defguard

defguard - enterprise open-source SSO&VPN - the only open-source solution with real WireGuard® MFA/2FA & integrated OpenID Connect SSO

Founded by: Robert Olejnik

You can use defguard to set up an enterprise VPN that adds multi-factor authentication directly at the WireGuard protocol level. It combines VPN access with identity management through built-in SSO, integrates with external identity providers like Google and Microsoft, and includes user enrollment with biometric authentication. You can self-host everything, manage users and devices, and get real-time visibility into connections.

Integrations

Microsoft Azure AD, JumpCloud, Keycloak, Zitadel, LDAP, Active Directory, Microsoft Entra ID

Use Cases

Secure remote access for distributed teams
Replace legacy VPN appliances like FortiGate
Integrate VPN with existing Microsoft or Google identity systems
Create zero-trust network architecture
Manage user device access with biometric authentication
Audit VPN connections for compliance reporting

Standout Features

Multi-factor authentication at WireGuard protocol level
Built-in OpenID Connect identity provider
One-click desktop client enrollment
QR code mobile configuration
Real-time config updates
Biometric authentication support

Tasks it helps with

Configure WireGuard VPN with multi-factor authentication
Set up SSO integration with external identity providers
Enroll users with biometric authentication
Generate QR codes for mobile device setup
Monitor VPN connections in real-time
Create user groups and access policies

Who is it for?

IT Security Specialist, Network Administrator, DevOps Engineer, CTO, Systems Analyst, Cloud Solutions Architect, IT Project Manager, Cybersecurity Analyst

Overall Web Sentiment

People love it

Time to value

Moderate Setup (1-3 hours)

Tutorials

defguard, VPN, WireGuard, MFA, multi-factor authentication, SSO, zero trust, identity provider, OpenID Connect, LDAP, Active Directory, biometric authentication, protocol-level security, enterprise VPN, self-hosted
Reviews

Compare

1Password

1Password

Ghostery

Ghostery

Lastpass

Lastpass

Shade

Shade

Cribl

Cribl

Privacera

Privacera