# Pomerium

> Pomerium is a free, open-source app you can self-host in the web servers & reverse proxies category. Identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your self-hosted websites to…. It has 5,026 GitHub stars, is released under the Apache-2.0 license and ships a Docker image.

## Key facts

| Fact | Value |
|---|---|
| Repository | https://github.com/pomerium/pomerium |
| Website | https://www.pomerium.io/ |
| GitHub stars | 5,026 |
| Forks | 359 |
| Open issues | 87 |
| License | Apache-2.0 |
| License type | Open source |
| Language | Go |
| Docker image | Yes |
| Platforms | Go, Docker |
| Categories | Web Servers & Reverse Proxies |
| Commits, last 12 months | 602 |
| Last commit | Oct 5, 2026 |
| Latest release | v0.33.4 (Oct 2, 2026) |
| Created | Jan 1, 2019 |
| Maintenance | Actively maintained |
| Archived | No |

Topics: reverse-proxy, iam, beyondcorp, identity, go, identity-aware-proxy, zero-trust, gateway, pomerium, vpn

## Install

Pomerium ships a Docker image; follow the README at https://github.com/pomerium/pomerium for the image name and environment variables.

Need it installed for you? [appsgit installation help](https://appsgit.com/services/install): a fixed quote by email, single app installs from $79.

## Similar apps in Web Servers & Reverse Proxies

- [Caddy](https://appsgit.com/apps/caddy): Powerful, enterprise-ready, open source web server with automatic HTTPS. (77,243 stars, Apache-2.0, Go, Docker)
- [Traefik](https://appsgit.com/apps/traefik): HTTP reverse proxy and load balancer that makes deploying microservices easy. (65,081 stars, MIT, Go, Docker)
- [Nginx Proxy Manager](https://appsgit.com/apps/nginx-proxy-manager): Docker container for managing Nginx proxy hosts with a simple, powerful interface. (34,325 stars, MIT, TypeScript, Docker)
- [NGINX](https://appsgit.com/apps/nginx): HTTP and reverse proxy server, mail proxy server, and generic TCP/UDP proxy server. (31,800 stars, BSD-2-Clause, C, Docker)
- [Pangolin](https://appsgit.com/apps/pangolin): Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale). (23,015 stars, AGPL-3.0, TypeScript, Docker)
- [SafeLine](https://appsgit.com/apps/safeline): Web application firewall / reverse proxy to protect your web apps from attacks and exploits. (22,706 stars, GPL-3.0, Go, Docker)
- [BunkerWeb](https://appsgit.com/apps/bunkerweb): Next-gen Web Application Firewall (WAF) that will protect your web services. (11,043 stars, AGPL-3.0, Python, Docker)
- [Zoraxy](https://appsgit.com/apps/zoraxy): General purpose HTTP reverse proxy and forwarding tool. (5,510 stars, AGPL-3.0, HTML, Docker)

---

Canonical page: https://appsgit.com/apps/pomerium
Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed nightly.
Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.