Pricing
Open Source
- Identity based access
- SSO support
- Declarative authorization policy
- Community support
- Apache 2 License
Enterprise (On-prem)
- Everything in Open Source, plus…
- Management UI
- Programmatic API
- Session management
- Self-service, and access controls
- Deployment history & audit logs
- Hierarchical authorization policy
- Premium support
Zero (Managed)
- Everything in Open Source, plus…
- Management UI
- Declarative authorization policy
- Hierarchical authorization policy
- Managed control plane
- Email support
| Open Source | Enterprise | Zero | |
|---|---|---|---|
|
Identity based access
Open Source
Yes
Enterprise
Yes
Zero
Yes
|
Yes
|
Yes
|
Yes
|
|
SSO support
Open Source
Yes
Enterprise
Yes
Zero
Yes
|
Yes
|
Yes
|
Yes
|
|
Web-based, secure application access
Open Source
Yes
Enterprise
Yes
Zero
Yes
|
Yes
|
Yes
|
Yes
|
|
TCP-over-HTTP based, secure server access
Open Source
Yes
Enterprise
Yes
Zero
Yes
|
Yes
|
Yes
|
Yes
|
|
Management UI Centrally view and manage access through an admin console.
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
Admin API For programmatic management.
Open Source
Enterprise
Yes
Zero
No
|
|
Yes
|
No
|
|
Service accounts
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
User impersonation
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
| Team Management & Governance | |||
|
Simple access control criteria Policies can use group, user, domain attributes.
Open Source
Yes
Enterprise
Yes
Zero
Yes
|
Yes
|
Yes
|
Yes
|
|
Comprehensive access control criteria Policies can use user, group, domain, date, time, duration, request context, device context (mTLS), multi-factor auth status and other attributes.
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
Policy builder UI
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
Dynamic authorization policy (using OPA’s policy language rego)
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
Self-service support Application owners are able to self-manage their own apps and services
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
In-console telemetry
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
| Reporting & Compliance | |||
|
Access logs
Open Source
Yes
Enterprise
Yes
Zero
Yes
|
Yes
|
Yes
|
Yes
|
|
Audit logs
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
Audit reports
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
Deployment history
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
Deployment events
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
|
Traffic reports
Open Source
Enterprise
Yes
Zero
Yes
|
|
Yes
|
Yes
|
| Support | |||
|
Community docs, and chat
Open Source
Yes
Enterprise
Yes
Zero
Yes
|
Yes
|
Yes
|
Yes
|
|
Dedicated chat and email support
Open Source
Enterprise
Yes
Zero
|
|
Yes
|
|
|
Phone support
Open Source
Enterprise
Yes
Zero
|
|
Yes
|
|
|
Dedicated customer success manager
Open Source
Enterprise
Yes
Zero
|
|
Yes
|
|
Frequently Asked Questions
Need answers? We are here to help.
Pomerium is an identity-aware proxy that enables secure access to internal applications. Pomerium provides a standardized interface to add access control to applications regardless of whether the application itself has authorization or authentication baked-in. Pomerium gateways both internal and external requests, and can be used in situations where you’d typically reach for a VPN.
You will be billed only for the number of active users who can log in using Pomerium.
We offer a 30-day money-back guarantee. No questions asked.
Yes! Pomerium Open Source is and always will be free. We’re confident you’ll love whichever plan you are on!
No problem. Contact a member of our team, we’ll be glad to help you. support@pomerium.com
