Defguard

defguard is a comprehensive remote access solution that brings true zero-trust security to WireGuard VPN. The platform stands out with its mandatory Multi-Factor Authentication (MFA) for every VPN connection, ensuring maximum security.

Key features include:

• Built-in OpenID Connect SSO with identity provider synchronization
• Remote self-service onboarding and management
• High availability with active-active gateways
• YubiKey hardware key management
• Beautiful and functional UI for both admins and users
• IPv6 support
• Flexible deployment options (packages, docker, Kubernetes, Terraform)

The solution has been thoroughly audited by ISEC security researchers and is trusted by companies like Prusa Research, Hostinger, and others. Being open-source and on-premise, defguard helps protect sensitive data while providing enterprise-grade features without vendor lock-in.