Pangolin is a fully open‑source, zero‑trust connectivity platform that provides encrypted, least‑privileged access to private applications and infrastructure without exposing public IP addresses or opening inbound ports. It works across on‑premise networks, cloud environments, and remote sites, eliminating the complexity and risk of traditional VPNs.

Pangolin brings identity to the access layer, allowing you to control access to specific applications, services, or network ranges instead of entire networks. Users authenticate through trusted identity providers and can only reach the resources you explicitly allow, applying Zero Trust principles end‑to‑end.

With lightweight site connectors, you can drop Pangolin into any network and instantly make hosts or entire network ranges securely accessible. Add as many networks as you need and connect to multiple sites at the same time, even behind restrictive firewalls or NAT. Pangolin’s internal DNS lets you assign friendly names to resources, so users never have to remember IP addresses.

Users can access private web applications through browser‑based, identity‑aware reverse proxies with automatic SSL, routing, and health checks—no client required. For deeper access, Pangolin clients provide fast, reliable connections to SSH, databases, RDP, and private services.

Pangolin can be fully self‑hosted for complete control, or you can use Pangolin Cloud for the quickest and easiest setup. With strong security, high performance, and minimal operational overhead, access is fully auditable, MFA can be enforced per resource, and applications require zero code or configuration changes.