What it does
Defguard combines self-hosted WireGuard VPN management with identity integration and multifactor authentication for connections.
Defguard addresses a gap between a WireGuard tunnel and an organization's login policy. Its product page describes enforcing MFA on VPN connections and choosing internal or external SSO per location. Administrators can manage multiple gateways while keeping the platform on their own infrastructure. Begin with the existing identity provider and the gateway boundary, then decide how users enroll their devices. The VPN and identity components form one integrated product here.
Strengths
- Per-connection MFA options
- Self-hosted identity and gateway management
Best for
- Organizations adding MFA to managed WireGuard access
Sources
- Defguard | Self-Hosted Enterprise WireGuard® VPN Platform (Oct 26, 2026)