Self-hosted secure remote access

Firezone is an open-source VPN and firewall server built on WireGuard® to be stable, performant, and lightweight. Deploy in minutes on your own infrastructure.

Deploy Now

Not sure if Firezone is right for your business? Schedule a demo.

Install Firezone

Set up in minutes using our one-line install script:

sudo -E bash -c "$(curl -fsSL https://github.com/firezone/firezone/raw/master/scripts/install.sh)"

Copy script

Copied!

Paste that into a Linux shell prompt.

Review the source of the script here.

A modern alternative to legacy VPNs and firewalls

Simple to manage

Manage your network using the intuitive web GUI

Firezone is built to be self-serve. The Web GUI, CLI utility, and in-depth documentation makes management painless for admins.

User-friendly web GUI
Deploy in minutes in Linux using our one-liner
REST API and Terraform provider (coming soon)

Self-host anywhere

No vendor lock-in. Take ownership of your network.

Firezone runs on your infrastructure. There's no need to risk breaches by sending data to third parties or to waste time on compliance checks.

Supports Ubuntu, CentOS, Debian, Fedora, OpenSUSE or any recent Linux kernel (5.0+).
Runs unprivileged. HTTPS enforced. Encrypted cookies.
Packaged with Chef Omnibus. No external dependencies.

Built on WireGuard®

Faster speeds on the same hardware

Firezone uses WireGuard®, a simple, fast and modern VPN protocol that utilizes state-of-the-art cryptography.

Simpler and leaner than other VPN protocols like IPsec / IKEv2 and OpenVPN.
Up to 4x to 6x faster than OpenVPN (benchmark stats.)
High throughput and low latency.

Authenticate with your identity provider and enforce MFA

Only allow connections from authenticated users and automatically disable access for employees who have left. Firezone integrates with any OIDC compatible identity provider for single sign-on (SSO).

View documentation

How Firezone works

Use Firezone to manage secure access to your servers, computers, and cloud infrastructure. Firezone requires minimal configuration and is quick to deploy.

Download Firezone to a supported Linux host with access to your protected resources.
Install the official WireGuard client on the user devices you wish to access these protected resources.
Using the Firezone Web UI, add device configs to your WireGuard clients to grant them access.

View documentation