defguard

Founded by Robert Olejnik

defguard - enterprise open-source SSO&VPN - the only open-source solution with real WireGuard® MFA/2FA & integrated OpenID Connect SSO

Cost

Free

Rating

★ People love it

Time to value

Moderate Setup (1-3 hours)

You can use defguard to set up an enterprise VPN that adds multi-factor authentication directly at the WireGuard protocol level. It combines VPN access with identity management through built-in SSO, integrates with external identity providers like Google and Microsoft, and includes user enrollment with biometric authentication. You can self-host everything, manage users and devices, and get real-time visibility into connections.

What defguard does

Configure WireGuard VPN with multi-factor authenticationSet up SSO integration with external identity providersEnroll users with biometric authenticationGenerate QR codes for mobile device setupMonitor VPN connections in real-timeCreate user groups and access policiesDeploy VPN gateways on multiple serversAudit user access and connection logsMulti-factor authentication at WireGuard protocol levelBuilt-in OpenID Connect identity providerOne-click desktop client enrollmentQR code mobile configurationReal-time config updatesBiometric authentication supportSelf-hosted with no cloud dependenciesISO 27001 certified