defguard - enterprise open-source SSO&VPN - the only open-source solution with real WireGuard® MFA/2FA & integrated OpenID Connect SSO
Founded by: Robert Olejnik
You can use defguard to set up an enterprise VPN that adds multi-factor authentication directly at the WireGuard protocol level. It combines VPN access with identity management through built-in SSO, integrates with external identity providers like Google and Microsoft, and includes user enrollment with biometric authentication. You can self-host everything, manage users and devices, and get real-time visibility into connections.