Pangolin | Articles - News, Guides, and Insights

News & Articles

Stay up to date with the latest news, guides, and insights in the zero trust access industry by reading Pangolin’s articles.

All Product Guides Engineering

Latest

Meta

Remote PLC/SCADA Access Without Open Ports

A practical way to handle remote PLC/SCADA access without open ports: keep the SCADA interface private, keep PLC access off the public internet, and reserve deeper connectivity for engineering workflows.

Remote Access for Tridium Niagara Without Open Ports

A simpler way to handle Tridium Niagara remote access: keep Niagara private, put the web UI behind an authenticated front door, and stop using broad network access for every user.

Pangolin 1.17 - Full RBAC, Site Provisioning Keys, Log Streaming

Pangolin 1.17 brings a wave of quality-of-life improvements that strengthen existing functionality around roles, identity providers, site provisioning, logging, and more. Let's dig in!

What is an Identity-Aware Proxy (IAP)?

This article explains what an identity-aware proxy is, how it differs from reverse proxies, VPNs, and ZTNA, and where it fits in modern Zero Trust access. It also looks at how Pangolin supports this pattern for private web applications and broader private-resource access.

Getting Started with Pangolin SSH - Same-Host Setup with Newt

Learn how to get started with Pangolin SSH by setting up secure same-host access on a server running Newt, using private resource access, identity-based controls, and short-lived SSH certificates.

Learn how ZTNA works, why it differs from VPN-based remote access, and how identity, device posture, and policy combine to protect private applications.

What is a Tunneled Reverse Proxy? Architecture, Benefits, and Enterprise Use Cases

A tunneled reverse proxy lets enterprises securely publish private applications through outbound tunnels, without exposing internal networks or relying on broad VPN access.

Pangolin for MSPs - Simple, Secure Remote Access for Every Customer

Pangolin helps MSPs replace VPN sprawl with a multi-tenant, identity-based remote access platform built to scale across client environments.

Modernizing Enterprise SSH Access

Pangolin modernizes enterprise SSH access by shifting from legacy, key-based methods to a comprehensive, identity-driven private access model, reducing operational complexity and strengthening security.

Comparison - Pangolin vs. WireGuard

While WireGuard is a superb, high-performance Layer 3 tunnel protocol, Pangolin is a full remote access platform built on WireGuard, integrating identity management, policy, and automation.

Comparison - Pangolin vs. Teleport

Pangolin is a network-first Zero Trust Access Platform built to secure the entire enterprise workforce including the engineering team, while Teleport is a protocol-first access broker focused on engineering infrastructure sessions.

How Pangolin Works

Pangolin is a zero-trust access platform that provides secure, identity-centric access to applications and infrastructure - without opening firewall ports or deploying traditional VPNs. Let's walk through how the system works.

Comparison - Twingate vs. NetBird

How Twingate and NetBird are solving different problems in modern remote access.

February 23, 2026

Comparison - Pangolin vs. Zscaler

How a self-hostable open-source access platform and an enterprise cloud security suite differ in architecture, traffic routing, deployment, and fit.

Pangolin 1.16 - Certificate Based SSH

Managing SSH keys across teams is a nightmare. With version 1.16, Pangolin eliminates that pain entirely with certificate-based SSH authentication, just-in-time user provisioning via PAM, and terminal access that just works.

February 27, 2026

How Pangolin Punches Through NATs and Firewalls

A deep dive into how Pangolin establishes direct peer-to-peer connections through NAT devices and firewalls without opening ports.

February 26, 2026

No items found.

Remote PLC/SCADA Access Without Open Ports

A practical way to handle remote PLC/SCADA access without open ports: keep the SCADA interface private, keep PLC access off the public internet, and reserve deeper connectivity for engineering workflows.

Remote Access for Tridium Niagara Without Open Ports

A simpler way to handle Tridium Niagara remote access: keep Niagara private, put the web UI behind an authenticated front door, and stop using broad network access for every user.

Self-hosted Remote Nodes - What Are They, and Why Do They Exist?

Learn about our new remote node self-hosted offering, which combines the best of self-hosted and cloud solutions.

August 29, 2025

How to Geo-block with Pangolin

Learn how to use the rules engine to enable geo-blocking for your resources.

August 29, 2025

Health Checks and Load Balancing on Targets for Resources

How to set up health checks and load balancing targets for resources.

August 29, 2025

Pangolin Single Sign-On with Google, Microsoft, and OAuth2/OIDC Identity Providers

You can now log in to Pangolin with your existing identity provider - including Google, Microsoft, and any OAuth2/OIDC compatible IdP.

February 17, 2026

Declarative Configuration with YAML and Docker Labels

Pangolin Blueprints let you manage resources as code with YAML or Docker labels, making configurations automated, consistent, and scalable.

September 23, 2025

Pangolin 1.17 - Full RBAC, Site Provisioning Keys, Log Streaming

Pangolin 1.17 brings a wave of quality-of-life improvements that strengthen existing functionality around roles, identity providers, site provisioning, logging, and more. Let's dig in!

Pangolin for MSPs - Simple, Secure Remote Access for Every Customer

Pangolin helps MSPs replace VPN sprawl with a multi-tenant, identity-based remote access platform built to scale across client environments.

Modernizing Enterprise SSH Access

Pangolin modernizes enterprise SSH access by shifting from legacy, key-based methods to a comprehensive, identity-driven private access model, reducing operational complexity and strengthening security.

Comparison - Pangolin vs. WireGuard

While WireGuard is a superb, high-performance Layer 3 tunnel protocol, Pangolin is a full remote access platform built on WireGuard, integrating identity management, policy, and automation.

Comparison - Pangolin vs. Teleport

Pangolin is a network-first Zero Trust Access Platform built to secure the entire enterprise workforce including the engineering team, while Teleport is a protocol-first access broker focused on engineering infrastructure sessions.

How Pangolin Works

Pangolin is a zero-trust access platform that provides secure, identity-centric access to applications and infrastructure - without opening firewall ports or deploying traditional VPNs. Let's walk through how the system works.

Comparison - Twingate vs. NetBird

How Twingate and NetBird are solving different problems in modern remote access.

February 23, 2026

Comparison - Pangolin vs. Zscaler

How a self-hostable open-source access platform and an enterprise cloud security suite differ in architecture, traffic routing, deployment, and fit.

Pangolin 1.16 - Certificate Based SSH

Managing SSH keys across teams is a nightmare. With version 1.16, Pangolin eliminates that pain entirely with certificate-based SSH authentication, just-in-time user provisioning via PAM, and terminal access that just works.

February 27, 2026

Comparison - Pangolin vs. Cloudflare One

How an open-source, self-hostable remote access platform compares to Cloudflare One (ZTNA, WARP, Access, and Tunnel).

February 23, 2026

Comparison - Pangolin vs. Pomerium

How an identity-based remote access platform and an identity-aware reverse proxy differ in scope, layer, and deployment.

February 23, 2026

Comparison - Twingate vs. Tailscale

How Twingate and Tailscale are solving different problems in modern remote access.

February 23, 2026

Comparison - Pangolin vs. Twingate

How two identity-based remote access platforms differ in architecture, web access, and deployment options.

February 3, 2026

Comparison - Pangolin vs. NetBird

A comparison of two WireGuard-powered remote access solutions and their differences in architecture, permissions, and use cases.

January 30, 2026

Pangolin 1.15 - iOS and Android Apps, Device Approvals and Posture

One year ago, we launched Pangolin as an open-source alternative to Cloudflare Tunnels. Today, with version 1.15, we celebrate our first anniversary with iOS and Android apps, device fingerprinting, posture tracking, and more.

January 23, 2026

Comparison - Pangolin vs. Tailscale

How two WireGuard-based tools for remote access differ in design, access control, and fit.

January 27, 2026

What is an Identity-Aware Proxy (IAP)?

This article explains what an identity-aware proxy is, how it differs from reverse proxies, VPNs, and ZTNA, and where it fits in modern Zero Trust access. It also looks at how Pangolin supports this pattern for private web applications and broader private-resource access.

Learn how ZTNA works, why it differs from VPN-based remote access, and how identity, device posture, and policy combine to protect private applications.

What is a Tunneled Reverse Proxy? Architecture, Benefits, and Enterprise Use Cases

A tunneled reverse proxy lets enterprises securely publish private applications through outbound tunnels, without exposing internal networks or relying on broad VPN access.

How Pangolin Punches Through NATs and Firewalls

A deep dive into how Pangolin establishes direct peer-to-peer connections through NAT devices and firewalls without opening ports.

February 26, 2026

Pangolin Cloud is Now Available in Europe

We've deployed dedicated points of presence in the EU for our European cloud users.

September 4, 2025