What Pomerium does

Pomerium is a private cybersecurity company that provides zero-trust, identity-aware proxy software for application access. Its core product is a Layer 7 reverse proxy built on the open-source Envoy proxy, augmented with built-in single sign-on, policy-as-code authorization in YAML, cryptographically signed JWTs, and centralized request auditing. The platform integrates with OIDC-compliant identity providers (including LDAP and file-based options) and supports infrastructure-as-code deployment via a Terraform provider. Use cases span VPN replacement for distributed teams, secure Kubernetes ingress, and an emerging Agentic Gateway capability for governing AI-agent traffic.

The company operates a three-tier commercial model: a free Open Source edition for technical homelab users, a Pomerium Zero tier free for the first 10 users and $7 per user per month thereafter for small teams, and an Enterprise tier with custom pricing for large organizations requiring advanced security controls and SOC 2 Type II attested deployments. Distribution combines a product-led growth motion through self-serve onboarding at console.pomerium.app with a community-led motion via the open-source codebase, GitHub, and a discussion forum, supplemented by direct enterprise sales for larger accounts.

Pomerium is headquartered in the United States (the firmographic record lists Solana Beach while a news source places the headquarters in Los Angeles), employs 11-50 people, and is led by founder and CEO Robert DeSimone. The company has raised approximately $17.5 million in venture funding to date, most notably a $13.75 million Series A in June 2024 led by Benchmark with participation from Bain Capital, Haystack, SNR, and individual investor Oleg Rogynskyy, which coincided with the launch of Pomerium Zero.

Name

Pomerium

Legal name

Pomerium

Website

https://pomerium.io

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Pomerium provides a zero-trust, identity-aware reverse proxy that delivers built-in SSO and policy-based authorization for application access. It serves homelab users, distributed teams, DevOps/Kubernetes users, and large enterprises via open-source, self-serve, and Enterprise tiers.

Ownership category

akta.pro rank

Product category

Zero Trust Access / Identity-Aware Proxy Software

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Access Management & Policy Enforcement (Zero Trust) (BPAMAEAH)

akta.pro secondary industries

Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI), Container & Kubernetes Application Security (HDADACAE)

Keywords

• Zero trust access
• Identity-aware proxy
• Reverse proxy software
• VPN replacement
• Application access control

Headquarters

HQ city

Solana Beach

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Enterprise SaaS Subscription: Enterprise tier with advanced features and security controls for large enterprises, priced per user/month with annual billing through sales contact
2. Business Tier Subscription: Zero tier business plan starting at $7/user/month for teams and small businesses managing routes beyond the free 10-user limit
3. Open Source: Free open-source version for highly technical homelab users, providing community support

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

Pomerium is a zero trust, identity-aware proxy and Layer 7 reverse proxy built on Envoy that authenticates, authorizes, monitors, and secures user access to applications without requiring a VPN. The platform enforces YAML-style policy-as-code on every request, integrates with OIDC-compliant identity providers, and issues cryptographically-signed JWTs for upstream access. It is offered as an open-source core product and through the managed Pomerium Zero and Enterprise tiers for on-premise and hosted deployments.

Product overview

Pomerium offers a unified zero trust access platform built around an identity-aware proxy architecture. The core offering is the open-source Pomerium proxy (also known as Pomerium Core), which functions as a Layer 7 reverse proxy providing authentication, authorization via YAML-style policy-as-code, and centralized request auditing. In June 2024, the company launched Pomerium Zero as a new security platform tier offering both on-premise and hosted deployment options for web application access without corporate VPNs. The product lineup spans three tiers: a free Open Source edition for technical homelab users, a Zero tier (free for up to 10 users, then $7/user/month) for homelabs, internal teams, and small businesses, and an Enterprise tier for large enterprises requiring advanced security controls.

Differentiator

Problem solved

Functional benefit

Products and services

• Pomerium (Core / Open Source) Open-source Layer 7 reverse proxy and identity-aware proxy that provides authentication, authorization via YAML-style policy-as-code, and centralized auditing for every request. Built on Envoy proxy and integrates with OIDC-compliant identity providers. Targeted at technical homelab users and self-hosters.
• Pomerium Zero Security platform launched June 2024 offering on-premise and hosted deployment options for web application access without a corporate VPN. Provides application-centric zero trust security, free for up to 10 users with Business plan pricing starting at $7/user/month beyond that threshold.
• Pomerium Enterprise Enterprise tier of the Pomerium platform providing advanced security controls and features for large organizations and highly sensitive deployments. Sold via direct sales contact with custom annual pricing and SOC 2 Type II compliance.

Segments4 records

Ideal customer profiles3 records

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

Feature8 records

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Tailscale: Tailscale provides zero-config WireGuard-based mesh networking for secure access to resources, often positioned as a VPN replacement. It targets a similar developer-led community motion and overlapping use cases around distributed team and homelab access, making it one of Pomerium's closest comparables in stage and audience.
• Teleport: Teleport provides identity-aware access for infrastructure, Kubernetes, SSH, and database resources. It overlaps with Pomerium's Kubernetes ingress and identity-aware proxy use cases and targets a similar DevOps/infra buyer.
• Banyan Security: Banyan Security provides a zero trust remote access platform aimed at replacing VPN for enterprise employees. It is a direct ZTNA peer to Pomerium, particularly for the enterprise segment.
• ngrok: ngrok provides secure ingress and tunneling to expose local services publicly, used by developers for similar homelab and SaaS-style reverse-proxy needs. It overlaps with Pomerium's developer-led ingress use cases even though its security model is less identity-centric.
• Twingate: Twingate delivers a zero trust network access solution that replaces VPN for distributed workforce access, targeting enterprises and technical teams. It is a direct competitive peer to Pomerium in the ZTNA / clientless access category with a similar business-model posture.

Broad incumbents

• Zscaler Private Access (ZPA): Zscaler's ZPA is an enterprise-grade ZTNA service as part of the broader Zscaler Zero Trust Exchange platform. It competes with Pomerium's enterprise pitch but at substantially larger scale and as part of a broader SASE portfolio.
• Okta: Okta is a leading identity and access management platform that Pomerium integrates with via OIDC. As a broad incumbent in identity, Okta is both a partner and a competitor as it expands into workforce identity and zero trust access.
• Cloudflare Access (Cloudflare Zero Trust): Cloudflare offers a free, broadly bundled zero trust application access product as part of its larger networking and security platform. It directly competes with Pomerium's identity-aware proxy proposition, but with significantly broader scale and a free tier that pressures Pomerium's monetization.
• Cloudflare Tunnel: Cloudflare Tunnel provides outbound-only secure connectivity for self-hosted applications, frequently used alongside Pomerium by users (e.g., 'I use cloudflared + Pomerium'). It is a partial substitute in the secure-access stack and is bundled into the broader Cloudflare platform.
• Google BeyondCorp Enterprise: Google's BeyondCorp Enterprise delivers zero trust application access as part of Google Cloud. It overlaps with Pomerium's value proposition at the enterprise tier and represents the kind of bundled incumbent offering that could constrain standalone ZTNA vendors.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/pomerium_io
• GitHubgithub.com/pomerium
• YouTubeyoutube.com/@pomerium_io
• LinkedInlinkedin.com/company/pomerium-inc

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds2 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Pomerium