Use cases
Inventory
Find every tool, owner, seat, and cost.
Savings
Catch waste, overlap, and renewals early.
Access
Onboard and offboard across your stack.
Context
Map how people, tools, spend, and agents connect.
For
Founders
Protect runway by seeing every tool and cost.
Engineering
Control AI usage, access, and provider spend.
Finance
Reconcile software spend and find waste.
Operations
Keep inventory, access, and renewals current.
Resources & company
Resources
Guides and practical software insights.
Manifesto
Why software operations need a new model.
Press
Company news and media resources.
Partners
Build and grow with ELI.
IntegrationsStacksTools
Talk to a humanDiscover my stack
IntegrationsStacksTools
Discover my stackTalk to a human

Company

  • Home
  • Manifesto
  • Talk to us
  • Partners

Help

  • Terms of service
  • Privacy policy
  • Docs

Product

  • Inventory
  • Savings
  • Access
  • Context

For teams

  • Founders
  • Engineering
  • Finance
  • Operations

Explore

  • Integrations
  • Tools
  • Stacks
  • Startup credits
  • Articles

Socials

  • LinkedIn
  • Instagram
  • TikTok
  • YouTube
Enterprise Layer Intelligence
Categories/Cybersecurity/defguard
defguard

defguard

Founded by Robert Olejnik

Manage self-hosted WireGuard VPN connections with multi-factor authentication and identity provider integrations

Pricing model

Free

Rating

★ People love it

Time to value

Moderate Setup (1-3 hours)

You can use Defguard to set up and manage a self-hosted WireGuard VPN across your company's infrastructure. It lets you enforce multi-factor authentication on every VPN connection using email, TOTP, or external identity providers like Google Workspace, Okta, and Microsoft Entra ID. You can also configure zero-trust firewall rules across Linux and BSD gateways, validate device security posture before allowing access, and synchronize user directories via LDAP or Active Directory. Everything runs on your own servers without external cloud dependencies.

What defguard does

Deploy WireGuard VPN gateways using Docker or native system packagesConfigure connection-level multi-factor authentication policiesSync user directories and groups from LDAP or Active DirectoryDefine firewall access control lists for specific remote teamsSet up device health and posture validation checksStream connection and administrative logs to an external SIEMConfigure high availability failover across multiple VPN edge nodesEnforce multi-factor authentication directly on WireGuard connection handshakesIntegrate with external identity providers including Google Workspace, Okta, and Entra IDManage zero-trust firewall rules and access control lists across gateways from one dashboardValidate device compliance and operating system health before granting network accessMaintain full data sovereignty with a completely self-hosted control plane and data planeAutomate user onboarding and synchronization through LDAP and Active DirectoryDeploy active-active high availability configurations for mission-critical edge gateways

Pricing breakdown

Pricing model: Free

Tutorials & Demos

Frequently asked

Google WorkspaceGoogle WorkspaceMicrosoft Entra IDMicrosoft Entra IDOktaOktaJumpCloudJumpCloudDockerDocker

Want a tailored answer?

See whether defguard fits your stack.

Techbible weighs defguard against what you already pay for, your team shape, and the work that's actually happening. Free to start.

Side by side

Compare defguard

Search the catalog or pick a similar tool to compare pricing, features, and fit.

Or pick from similar tools

More in Cybersecurity

All tools →
Abnormal AI

Abnormal AI

Stop phishing attacks, account takeovers, and social engineering across enterprise email and identity environments

ACAIA

ACAIA

Provides cloud-native for financial companies like banks and insurance

Accountable HQ

Accountable HQ

Manage HIPAA compliance, complete risk assessments, train staff, and organize business associate agreements

Acronis

Acronis

Protect systems from cyber threats and automate routine data backups across corporate endpoints

ADAM Aerospace

ADAM Aerospace

Verify and secure critical mission data across defense and space operations

Addigy

Addigy

Manage, monitor, and secure Apple devices across multiple organizations in real time

Adversa AI

Adversa AI

Monitor and block dangerous actions taken by coding agents in real time

Agency

Agency

Manage compliance programs and prepare for security audits

Defguard, WireGuard, VPN, enterprise VPN, self-hosted VPN, zero trust, multi-factor authentication, 2FA, MFA, identity management, LDAP, Active Directory, firewall management, network security, device posture