{"name":"Defguard: Zero-Trust Access Management with WireGuard 2FA/MFA","description":"Defguard is an open-source, enterprise-grade VPN solution built with Rust, offering zero-trust access management. It uniquely provides multi-factor authentication for WireGuard VPN connections, integrating with various SSO providers or its built-in SSO. This platform aims to simplify the secure management of complex VPN networks with advanced features like ACLs, YubiKey provisioning, and real-time client synchronization.","github":"https://github.com/DefGuard/defguard","url":"https://osrepos.com/repo/defguard-defguard","source":"osrepos.com","sourceDescription":"This repository profile is provided by osrepos.com, an open source repository discovery platform.","repositoryProfile":"https://osrepos.com/repo/defguard-defguard","generatedFor":"open source discovery and AI-assisted research","markdown":"https://osrepos.com/repo/defguard-defguard.md","json":"https://osrepos.com/repo/defguard-defguard.json","topics":["authentication","multifactor-authentication","vpn","wireguard","security","openid-connect","rust","access-management"],"keywords":["authentication","multifactor-authentication","vpn","wireguard","security","openid-connect","rust","access-management"],"stars":null,"summary":"Defguard is an open-source, enterprise-grade VPN solution built with Rust, offering zero-trust access management. It uniquely provides multi-factor authentication for WireGuard VPN connections, integrating with various SSO providers or its built-in SSO. This platform aims to simplify the secure management of complex VPN networks with advanced features like ACLs, YubiKey provisioning, and real-time client synchronization.","content":"## Introduction\nDefguard is an enterprise-grade, open-source VPN solution written in Rust, designed for zero-trust access management. It stands out by offering the world's only multi-factor authentication (MFA) for WireGuard VPN connections, supporting both its built-in SSO and external OpenID Connect providers like Google, Microsoft, or Active Directory. This robust platform simplifies the secure management of complex VPN networks.\n\n## Installation\nGetting started with Defguard is straightforward, especially using Docker. A one-line install script automates the setup process, making it quick to deploy your own instance.\n\nbash\ncurl --proto '=https' --tlsv1.2 -sSf -L https://raw.githubusercontent.com/DefGuard/deployment/main/docker-compose/setup.sh -O && bash setup.sh\n\n\nFor more detailed instructions and options, refer to the [official documentation](https://docs.defguard.net/getting-started/one-line-install).\n\n## Examples\nDefguard offers flexible deployment options to suit various environments. Beyond the quick Docker setup, you can deploy it using:\n\n*   [Docker Compose](https://docs.defguard.net/deployment-strategies/docker-compose)\n*   [Kubernetes](https://docs.defguard.net/deployment-strategies/kubernetes)\n\nThe platform also includes a feature-rich [desktop client](https://github.com/DefGuard/client) that supports 2FA/MFA, automatic real-time synchronization of settings, and the ability to manage multiple WireGuard tunnels.\n\n## Why Use Defguard\nDefguard provides a comprehensive security platform with several compelling advantages. Its unique WireGuard VPN with true 2FA/MFA ensures high security, unlike solutions that only offer 2FA for application access. It includes integrated SSO based on OpenID Connect, ACLs/Firewall Management, and secure remote user enrollment. Built with Rust, it prioritizes speed, security, and portability, making it an enterprise-ready solution for managing complex VPN infrastructures with high availability and robust access control. The project also emphasizes transparency with public penetration test reports and daily SBOM CVE scans.\n\n## Links\n*   [Website](https://defguard.net)\n*   [Getting Started](https://docs.defguard.net/#what-is-defguard)\n*   [Features](https://github.com/defguard/defguard#features)\n*   [Roadmap](https://github.com/orgs/defguard/projects/5)\n*   [Documentation](https://docs.defguard.net/)\n*   [Community Support](https://github.com/DefGuard/defguard/discussions/new/choose)","metrics":{"detailViews":3,"githubClicks":7},"dates":{"published":null,"modified":"2026-03-18T00:37:28.000Z"}}