Skip to content

Pomerium

Network Security

Pomerium is an identity‑ and context‑aware reverse proxy that provides secure, clientless access to internal web apps without a VPN.

Track releases GitHub Website
Go Latest v0.33.0 · 10d ago Security brief →

Features

  • Provides clientless, identity‑aware connections to internal services
  • Eliminates the need for traditional VPN tunnels
  • Enforces continuous verification and auditing of every request

Recent releases

View all 10 releases →
Review required
v0.33.0 Breaking risk
Dependencies

Darwin removal + SDK update + many additions

Open
Upgrade now
v0.32.9 Security relevant
Dependencies

Envoy update + header limit

Open
Upgrade now
v0.32.8 Security relevant
Auth

GHSA security fix

Open
v0.32.6 Breaking risk
Breaking changes
  • exp and nbf claims removed from core/session
Full changelog

What's Changed

Changed

  • core/session: remove exp and nbf by @backport-actions-token[bot] in https://github.com/pomerium/pomerium/pull/6306

Full Changelog: https://github.com/pomerium/pomerium/compare/v0.32.5...v0.32.6

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
4,914
Forks
344
Languages
Go TypeScript JavaScript
View on GitHub Homepage Documentation

Similar tools

Tinyproxy
oauth2-proxy
pangolin
zoraxy
ChromiumFish

Beta — feedback welcome: [email protected]