Pritunl Zero is an open source BeyondCorp server providing zero trust security for web applications without the use of a VPN.
Authentication
Pritunl Zero is implemented as a proxy between the user and the protected web service running on the internal network. When the user visits the domain for the web service for the first time they will be directed to a login page. Once authenticated all requests will be proxied to the internal web service until the users session ends. The user can close or open the page in a new tab without needing to login again.
Single Sign On
Pritunl Zero allows users to authenticate with a username/password or any of the supported single sign-on providers. Multiple providers can be configured on the same server and the user can choose which to authenticate with at the login page. Currently Google, OneLogin, Okta and Azure are supported. More providers will be added in future releases.
User Polices
User polices allow controlling where and how a user can access a service. Polices can be added to disable a user account if a login is attempted from a foreign country or control which web browsers can be used.
Certificate Management
The certificate management in the web console makes creating and managing SSL certificates simple. Built in LetsEncrypt with multi-domain support allows creating certificates without any additional configuration.
Temporary Users
Users can be configured to automatically expire at a set date. This allows giving someone temporary secure access to an internal service without exposing the internal network on a VPN or needing to modify firewalls.
Request Logging
An ElasticSearch server can be configured in the settings to log all user requests including the data of JSON requests. Each request sent to an internal service will be logged to the ElasticSearch server for auditing and monitoring. An interface for viewing the requests will be added to the Pritunl Zero web console in a future release.
Documentation
The documentation contains a getting started tutorial and more information about Pritunl Zero.
Follow Pritunl on Twitter | Find us on GitHub | Subscribe to our mailing list