Open Source Cloudflare Access Alternatives

NetBird transforms network security by combining WireGuard-based overlay networks with Zero Trust Network Access in a unified open source platform. Replace legacy VPNs with a modern, peer-to-peer solution that provides secure connectivity without complex firewall configurations.

Key Features:

• Zero-Config Deployment: Run on any platform in minutes, eliminating firewall configs and open ports
• Granular Access Control: Define policies to limit network access with least privilege principles
• Seamless SSO & MFA: Integrate with Okta, Microsoft, Google, and other identity providers
• Dynamic Posture Checks: Grant access only to devices meeting your security requirements
• Cross-Platform Support: Works on Linux, Windows, macOS, mobile devices, Docker containers, and routers

Enterprise-Ready Security: NetBird enforces device security posture checks, contextual access policies, and detailed activity logging. Stream events to SIEM platforms in real-time while maintaining centralized network management through an intuitive interface.

Open Source Flexibility: Distributed under BSD-3 license, NetBird can be self-hosted on your infrastructure or used via NetBird Cloud. The platform integrates with popular MDM & EDR solutions and provides API automation for network configuration.

Perfect for organizations seeking to modernize their network security with a software-defined networking approach that connects resources directly and securely across clouds and on-premises environments.

Pangolin transforms network security with zero trust network access (ZTNA) that replaces traditional VPNs. The platform provides secure, identity-aware access to applications and infrastructure across on-premises, cloud, and edge environments.

Key features include:

• Direct WireGuard tunnels that install on user devices for secure connections
• Identity and context-aware rules that verify users and devices at every access point
• Easy deployment with connectors that work behind any firewall
• Centralized management of application-level access without complex ACL configurations
• Seamless integration with existing identity providers

The platform checks user identity and device security continuously, reducing risk while maintaining user productivity. Unlike traditional mesh VPNs that require managing access control lists on every node, Pangolin centralizes access management for operational efficiency.

With over 1,000,000+ deployments worldwide, organizations can deploy enterprise-grade zero trust security in days rather than months, eliminating the need for lengthy professional services engagements typical of legacy security solutions.

VoidAuth is an open-source single sign-on provider for self-hosted applications. It sits in front of your apps and handles authentication and user management from one place, for both admins and end users.

• Unified access control: Manage users, groups, and access from a central admin panel.
• Standard protocols: Works as an OpenID Connect (OIDC) provider, a proxy ForwardAuth target, and an LDAP directory server.
• Account security: Supports multi-factor authentication, passkeys, passkey-only accounts, and encryption at rest with a Postgres or SQLite database.
• User onboarding: Invite users or let them self-register, with email verification for password resets.
• Customization: Set your own logo, title, theme color, and email templates.

VoidAuth runs alongside your existing reverse proxy, such as Caddy, Traefik, or nginx, so authentication stays on infrastructure you control.