Firezone
Enterprise-ready zero-trust access platform built on WireGuard®.
Install / Use
/learn @firezone/FirezoneREADME
<p align="center"> <img src="https://img.shields.io/static/v1?logo=github&logoColor=959DA5&label=Test&labelColor=333a41&message=passing&color=3AC358" alt="firezone" /> <!--<a href="https://coveralls.io/github/firezone/firezone?branch=main"> <img src="https://coveralls.io/repos/github/firezone/firezone/badge.svg?branch=main" alt="Coverage Status" /> </a>--> <img alt="GitHub commit activity" src="https://img.shields.io/github/commit-activity/m/firezone/firezone"/> <img alt="GitHub closed issues" src="https://img.shields.io/github/issues-closed/firezone/firezone"/> <a href="https://x.com/intent/follow?screen_name=firezonehq"> <img alt="X (formerly Twitter) Follow" src="https://img.shields.io/badge/Follow-%40firezonehq-black?style=flat&logo=x" /> </a> </p>
Overview
Firezone is an open source platform to securely manage remote access for any-sized organization. Unlike most VPNs, Firezone takes a granular, least-privileged approach to access management with group-based policies that control access to individual applications, entire subnets, and everything in between.
<p align="center"> <img width="1439" alt="architecture" src="https://github.com/firezone/firezone/assets/167144/48cd6a1e-2f3f-4ca7-969a-fc5b33e13d1c"> </p> <!-- TODO: Record new overview video without so many colors so that the gif compressed better. This one (26 MB) was too large. <p align="center"> <img width="1200" alt="Firezone Overview" src="https://www.firezone.dev/images/overview-screencap.gif"> </p> -->Getting Started
Option 1: Cloud (Recommended)
Get started in under 2 minutes with our managed solution.
Sign up free → (No credit card required)
Once you've signed up, follow the instructions in the welcome email to:
- Install the client on your device
- Connect to your first resource
- Configure access policies
Features
Firezone is:
- Fast: Built on WireGuard® to be 3-4 times faster than OpenVPN with sub-10ms latency overhead.
- Scalable: Deploy two or more gateways for automatic load balancing and failover.
- Private: Peer-to-peer, end-to-end encrypted tunnels prevent packets from routing through our infrastructure.
- Secure: Zero attack surface thanks to Firezone's holepunching tech which establishes tunnels on-the-fly at the time of access.
- Open: Our entire product is open-source, allowing anyone to audit the codebase.
- Flexible: Authenticate users via email, Google Workspace, Okta, Entra ID, or OIDC and sync users and groups automatically.
- Simple: Deploy gateways and configure access in minutes with a snappy admin UI.
Firezone is not:
- A tool for creating bi-directional mesh networks
- A full-featured router or firewall
- An IPSec or OpenVPN server
Performance & Security
Performance
<!-- TODO: Add actual performance metrics from testing -->- Throughput: Up to 5 Gbps per connection
- Latency: Hole-punched connections eliminate routing overhead
- Scaling: Need more capacity? Simply add more gateways
- Memory Usage: Lightweight Rust-based data plane requires only a few MB
Security & Compliance
- Encryption: WireGuard® protocol with ChaCha20/Poly1305
- Authentication: Multiple SSO providers supported
- Zero Trust: All connections authenticated and authorized
- Audit Logs: Full activity logging for compliance and monitoring
- Compliance: SOC 2 Type I and II compliant (managed offering)
Comparison with Alternatives
| Feature | Legacy VPN | Firezone | | ------------ | ---------- | ------------ | | Setup Time | Hours | 5 minutes | | Performance | Baseline | 3x faster | | Architecture | Hub-spoke | Peer-to-peer | | Zero Trust | ❌ | ✅ | | Open Source | ❌ | ✅ |
Contents of this repository
This is a monorepo containing the full Firezone product, marketing website, and product documentation, organized as follows:
- elixir: Admin portal and control plane
- rust/: Data plane and internal Rust libraries:
- rust/gateway: Gateway - Tunnel server based on WireGuard and deployed to your infrastructure.
- rust/relay: Relay - STUN/TURN server to facilitate holepunching.
- rust/headless-client: Cross-platform CLI client.
- rust/gui-client: Cross-platform GUI client.
- swift/: macOS / iOS clients.
- kotlin/: Android / ChromeOS clients.
- website/: Marketing website and product documentation.
License & Pricing
Open Source (Apache 2.0 + Elastic 2.0)
- ✅ Full source code available for audit
- ✅ Self-hosting allowed (educational/hobby use)
- ✅ Community support via GitHub Discussions
- ⚠️ Production self-hosting not officially supported
Cloud - Usage Based
- ✅ Managed hosting with SLA
- ✅ Production-ready with enterprise support
- ✅ Automatic updates and maintenance
- 💰 Starting free, then per-seat pricing
- View detailed pricing →
Pricing Overview:
- Starter: Free for 6 users with basic features
- Team: $5 / user / month with advanced features
- Enterprise: Custom pricing with directory sync, compliance, priority support
Enterprise Features
- 🗂️ Directory Sync - Sync users and groups from Google Workspace, Okta, or Entra
- 📝 Audit Logs - Complete activity tracking for up to 90 days for compliance
- 🏢 Priority Support - Dedicated Slack channel for your organization
- 🎯 Custom Integrations - Tailored solutions for your infrastructure
Frequently asked questions (FAQ)
Can I self-host Firezone?
Our license won't stop you from self-hosting the entire Firezone product top to bottom, but our internal APIs are changing rapidly so we can't meaningfully support self-hosting Firezone in production at this time.
If you're feeling especially adventurous and want to self-host Firezone for educational or hobby purposes, follow the instructions to spin up a local development environment in CONTRIBUTING.md.
The latest published clients (on App Stores and on
releases) are only guaranteed
to work with the managed version of Firezone and may not work with a self-hosted
portal built from this repository. This is because Apple and Google can
sometimes delay updates to their app stores, and so the latest published version
may not be compatible with the tip of main from this repository.
Therefore, if you're experimenting with self-hosting Firezone, you will probably want to use clients you build and distribute yourself as well.
See the READMEs in the following directories for more information on building each client:
- macOS / iOS: swift/apple
- Android / ChromeOS: kotlin/android
- Windows / Linux: rust/gui-client
How much does it cost?
See our detailed License & Pricing section above for comprehensive pricing information.
<!-- TODO ### Migrating from Other VPNs **Coming from OpenVPN, ZeroTier, or Tailscale?** - [Migrate from OpenVPN →] - [Migrate from ZeroTier →] - [Migrate from Tailscale →] - [General VPN Migration Guide →] **Migration typically involves:** 1. Installing Firezone alongside your current solution 2. Configuring equivalent access policies 3. Testing connectivity with a subset of users 4. Gradually migrating users and decommissioning old infrastructure -->Documentation
Additional documentation on general usage, troubleshooting, and configuration can be found at https://www.firezone.dev/kb.
Join Our Community
Quick Ways to Contribute
- ⭐ Star this repo to show support and stay updated
- 🐛 Report bugs or request features via GitHub Issues
- 💬 Join GitHub Discussions for community support and conversations
For Contributors
- 🎯 Check out help wanted to get started
- 📖 Read our contribution guide for development setup
- 🏗️ See the development environment setup to start coding
- 🔄 Submit a pull request - all contributions welcome!
Recognition: All contributors get credited in our contributors list.
Get Help
Community Support (Free)
- GitHub Discussions - Community Q&A
- GitHub Issues - Bug reports and feature requests
Business Support
- [Contact Sales]
Related Skills
healthcheck
349.0kHost security hardening and risk-tolerance configuration for OpenClaw deployments
node-connect
349.0kDiagnose OpenClaw node connection and pairing failures for Android, iOS, and macOS companion apps
prose
349.0kOpenProse VM skill pack. Activate on any `prose` command, .prose files, or OpenProse mentions; orchestrates multi-agent workflows.
frontend-design
109.4kCreate distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.
