Firezone
Secure remote access gateway that supports the WireGuard protocol. It offers a Web GUI, 1-line install script, multi-factor auth (MFA), and SSO.
Two self-hosted Remote Access apps, compared on the facts we track: GitHub popularity and activity, license, language, Docker images and a rough hosting estimate.
| Firezone | Pangolin | |
|---|---|---|
| Description | Secure remote access gateway that supports the WireGuard protocol. It offers a Web GUI, 1-line install script, multi-factor auth (MFA), and SSO. | Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale). |
| GitHub stars | 9,166 | 23,315 |
| Forks | – | – |
| Open issues | – | – |
| Commits (12 months) | 3.9k | 5.4k |
| Last activity | 2026-11-05 | 2026-11-04 |
| Latest release | headless-client-1.5.15 (2026-10-29) | 1.26.0 (2026-11-04) |
| Maintenance health | Active | Active |
| License | Apache-2.0 | AGPL-3.0 |
| Language / platform | Elixir, Docker | Docker |
| Docker Hub image | – | – |
| Docker pulls | – | – |
| Est. server size | ~1 GB, 1 vCPU | ~1 GB, 1 vCPU |
| Est. hosting from | $5/mo | $5/mo |
| Categories | Remote Access | Web Servers, Remote Access |
| Links | Website · Source | Website · Source |
Summary: Pangolin leads on GitHub popularity and commit activity. The right choice depends on the features you need — read both project descriptions and docs.
This summary is generated from GitHub, Docker Hub and awesome-selfhosted data as of 2026-11-05. It does not rate features or quality.
Pangolin has more GitHub stars (23,315 vs 9,166 for Firezone, as of 2026-11-05). Stars measure interest, not quality.
Pangolin had more commits over the last 12 months (5,398 vs 3,854). The last recorded activity was 2026-11-05 for Firezone and 2026-11-04 for Pangolin. Releases in the past year: Firezone 10+, Pangolin 10+. Our health labels: Firezone is “Active”, Pangolin is “Active”.
Firezone: Apache-2.0. Pangolin: AGPL-3.0. Firezone's license is permissive; Pangolin's is copyleft (changes you distribute must stay open).
We did not detect a Docker Hub image for either app. The upstream listing mentions Docker as a deployment option for Firezone and Pangolin. Check each project's documentation for install options.
Secure remote access gateway that supports the WireGuard protocol. It offers a Web GUI, 1-line install script, multi-factor auth (MFA), and SSO.
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).
Browse all self-hosted Remote Access apps.