# Defguard: Zero-Trust Access Management with WireGuard 2FA/MFA

This repository profile is provided by osrepos.com, an open source repository discovery platform.

Source: osrepos.com
Repository profile: https://osrepos.com/repo/defguard-defguard
Generated for open source discovery and AI-assisted research.

Defguard is an open-source, enterprise-grade VPN solution built with Rust, offering zero-trust access management. It uniquely provides multi-factor authentication for WireGuard VPN connections, integrating with various SSO providers or its built-in SSO. This platform aims to simplify the secure management of complex VPN networks with advanced features like ACLs, YubiKey provisioning, and real-time client synchronization.

GitHub: https://github.com/DefGuard/defguard
OSRepos URL: https://osrepos.com/repo/defguard-defguard

## Summary

Defguard is an open-source, enterprise-grade VPN solution built with Rust, offering zero-trust access management. It uniquely provides multi-factor authentication for WireGuard VPN connections, integrating with various SSO providers or its built-in SSO. This platform aims to simplify the secure management of complex VPN networks with advanced features like ACLs, YubiKey provisioning, and real-time client synchronization.

## Topics

- authentication
- multifactor-authentication
- vpn
- wireguard
- security
- openid-connect
- rust
- access-management

## Repository Information

Last analyzed by OSRepos: Wed Mar 18 2026 00:37:28 GMT+0000 (Western European Standard Time)
Detail views: 3
GitHub clicks: 7

## Safety Notice

OSRepos shares public repositories for knowledge and discovery only. Review source code, dependencies, licenses, and security implications before running or installing anything.

## Content

## Introduction
Defguard is an enterprise-grade, open-source VPN solution written in Rust, designed for zero-trust access management. It stands out by offering the world's only multi-factor authentication (MFA) for WireGuard VPN connections, supporting both its built-in SSO and external OpenID Connect providers like Google, Microsoft, or Active Directory. This robust platform simplifies the secure management of complex VPN networks.

## Installation
Getting started with Defguard is straightforward, especially using Docker. A one-line install script automates the setup process, making it quick to deploy your own instance.

bash
curl --proto '=https' --tlsv1.2 -sSf -L https://raw.githubusercontent.com/DefGuard/deployment/main/docker-compose/setup.sh -O && bash setup.sh


For more detailed instructions and options, refer to the [official documentation](https://docs.defguard.net/getting-started/one-line-install).

## Examples
Defguard offers flexible deployment options to suit various environments. Beyond the quick Docker setup, you can deploy it using:

*   [Docker Compose](https://docs.defguard.net/deployment-strategies/docker-compose)
*   [Kubernetes](https://docs.defguard.net/deployment-strategies/kubernetes)

The platform also includes a feature-rich [desktop client](https://github.com/DefGuard/client) that supports 2FA/MFA, automatic real-time synchronization of settings, and the ability to manage multiple WireGuard tunnels.

## Why Use Defguard
Defguard provides a comprehensive security platform with several compelling advantages. Its unique WireGuard VPN with true 2FA/MFA ensures high security, unlike solutions that only offer 2FA for application access. It includes integrated SSO based on OpenID Connect, ACLs/Firewall Management, and secure remote user enrollment. Built with Rust, it prioritizes speed, security, and portability, making it an enterprise-ready solution for managing complex VPN infrastructures with high availability and robust access control. The project also emphasizes transparency with public penetration test reports and daily SBOM CVE scans.

## Links
*   [Website](https://defguard.net)
*   [Getting Started](https://docs.defguard.net/#what-is-defguard)
*   [Features](https://github.com/defguard/defguard#features)
*   [Roadmap](https://github.com/orgs/defguard/projects/5)
*   [Documentation](https://docs.defguard.net/)
*   [Community Support](https://github.com/DefGuard/defguard/discussions/new/choose)