Pangolin

What is Pangolin?

Pangolin is an open-source, identity-based remote access platform built on WireGuard that enables secure, seamless connectivity to private and public resources. It works like a VPN and a secure proxy that can span multiple networks. With a cloud-native design, you can deploy sites to expose and control your apps, scale automatically, and enjoy zero infra management. Pangolin Cloud provides cloud-hosted deployments with no credit card required to get started.

Pangolin uses identity and context-aware access controls to enforce granular policies while providing secure connectivity across distributed environments. It supports SSO, OIDC, PIN authentication, passwords, and temporary share links, so you can tailor access to each user and resource. At the same time, Pangolin routes traffic over WireGuard tunnels to private networks, enabling seamless connectivity to on premises systems, cloud resources, and edge devices. The result is a unified remote access experience that combines the safety of identity-based controls with the simplicity of a VPN-like tunnel.

Key Features

• Identity-based access control: SSO, OIDC, PIN, passwords, and temporary share links; granular access rules based on user, resource, and context; geoblocking and IP whitelisting; complete access logs for visibility.
• WireGuard powered connectivity: securely tunnels traffic to private networks and public resources; behaves like a VPN and a proxy that spans multiple networks.
• Cloud-native and scalable: deploy sites to expose and control apps; automatic scaling; zero infra management; always up-to-date; Pangolin Cloud available with no credit card required.
• Unified application management: a single dashboard to monitor, configure, and secure services across all your systems, whether you run in the cloud, on-prem, or at the edge.
• Quick start and instant tunneling: create an instant tunnel in seconds to expose a local resource. The Try It Now flow requires no signup to begin testing. The formlike interface accepts protocol, hostname, and port to publish your resource.
• Security, auditing, and compliance: access logs and event history show granted, denied, and blocked attempts; context-aware controls help maintain compliance and reduce risk.
• Ecosystem and community: broad adoption with metrics such as GitHub stars and deployments; active discussions on Discord and Slack help you get answers fast.

How to Use Pangolin

1. Decide how you will deploy: Pangolin Cloud offers a managed cloud option, while you can self-host by installing a site and connecting site connectors to your networks.
2. Install the site connector: deploy the site connector to the networks you want to reach. This step creates a bridge between Pangolin and your resources.
3. Create an instant tunnel: use the instant tunnel feature to expose a local resource. In the interface, specify the protocol (HTTP or HTTPS), the hostname, and the port you want to publish. You can try this flow without signing up to get a feel for how Pangolin works.
4. Manage and secure applications: use the unified dashboard to register resources, apply access policies, and monitor service health across all environments.
5. Enforce identity and access rules: configure SSO and OIDC, PINs, passwords, and temporary share links; apply context-aware rules and geoblocking as needed.
6. Observe and maintain: monitor access logs, view real-time metrics, and ensure services stay up to date with automatic updates when you run Pangolin Cloud.

Use Cases

• Enterprise remote access: give employees secure, identity-based access to internal apps and dashboards from anywhere, without opening broad network access.
• Multi-cloud and hybrid environments: connect AWS VPCs, on-prem networks, and edge devices under a single policy and monitoring plane.
• IoT and edge device management: remotely manage cameras, sensors, and other devices through protected tunnels.
• SaaS provider and customer access: provide customers with secure, controlled access to internal tools and dashboards via SSO or temporary links.
• Temporary collaboration and testing: share isolated resources with contractors or partners for a defined period without exposing your entire network.

FAQ

• What is Pangolin and how does it work? Pangolin is an open-source remote access platform built on WireGuard. It creates secure tunnels between trusted identities and private networks, enabling controlled access to resources across cloud, data center, and edge environments.
• Is Pangolin free or paid? Pangolin is open source and free to self-host. Pangolin Cloud provides a managed option with a no credit card required trial to evaluate the platform.
• Do I need to sign up to try Pangolin? You can create an instant tunnel without signup to see how it works, but full cloud deployments require an account.
• What kind of security does Pangolin provide? It supports identity-based access controls, SSO, OIDC, PIN, and passwords, along with optional temporary share links, geoblocking, and IP whitelisting. Access logs help you audit activity.
• Where can I get help? Pangolin has an active community with GitHub, Discord, and Slack channels for support and collaboration. You can also contact the team to talk about deployments and features.