All 77 Dependencies
Every package DefGuard depends on, ranked by repo health score.
Defguard is a self-hosted secure remote access platform that brings WireGuard VPN, identity and access management, multi-factor authentication, and network access control together in a single deployable solution. Unlike traditional VPNs that bolt on MFA as an afterthought at the web interface, Defguard enforces authentication at the WireGuard connection handshake itself — meaning a stolen credential alone cannot establish a tunnel.
Built in Rust for performance and memory safety, the platform is organized around three discrete components: a Core that manages identity, authentication, and policy; an Edge proxy that provides a hardened public-facing entry point; and a Gateway that enforces network access rules on protected infrastructure. This separation means the management plane never needs direct internet exposure, substantially reducing the attack surface.
The platform integrates natively with existing identity infrastructure — Google, Microsoft Entra ID, Okta, JumpCloud, Keycloak, and any OIDC-compliant provider — while also offering its own built-in OIDC server for SSO across internal applications. LDAP and Active Directory synchronization keeps user accounts and group memberships in sync bidirectionally. YubiKey FIDO2 provisioning, SSH and GPG key management, and a self-service enrollment portal round out the identity surface.
Defguard is designed for organizations that need the auditability and control of self-hosting without accepting weaker security guarantees. It publishes SBOMs, penetration test reports, and architecture decision records, and holds ISO 27001 certification for the enterprise tier.
