Firezone Blog

Introducing a simpler, faster, and more recognizable logo for Firezone, plus a new brand kit for press and partners.

The Firezone REST API leaves beta. Provision Gateways over the API, filter every list endpoint server-side, manage Group and device pool membership, and disable actors without deleting them.

ICE and WireGuard gave us two opinions on whether a connection was healthy. We removed one of them and built NAT traversal with pure WireGuard.

Learn why Firezone replaced shared Site tokens with single-owner Gateway tokens and how to migrate for zero-downtime rotation and individual revocation.

Windows Client 1.5.13 reads MDM policy from the machine-scoped registry hive instead of the per-user hive. If you manage the Client with Intune or another MDM, learn how to import the updated ADMX template and migrate your policy.

Alice signs in with Google and Okta. Same email address. Different identities. Which one got production access? In this post we answer this question and more by exploring the challenges of multi-provider identity in zero trust applications.

Announcing the new user interface for the Firezone portal, designed to be more intuitive, faster, and more accessible.

Firezone will undergo scheduled maintenance on Saturday, December 6, 2025 from 8:00 PM to 10:00 PM Pacific Time to roll out major improvements to authentication, directory sync, and user and group management. We expect only a few minutes of downtime.

We're making some changes to the way Internet Resources work to improve security and performance. Migrate your Internet Resources by March 15, 2025 to avoid any interruptions.

Firezone's data plane extensively uses the sans-IO design pattern. This post explains why we chose it and how you too can make use of it.

We're making some changes to the way DNS Resources are routed in Firezone. These changes will be coming in Client and Gateway versions 1.1 and later. Continue reading to understand how these changes will affect your network and what you need to do to take advantage of them.

We chose Tauri over other frameworks because it was the fastest way to get the Firezone Client working on Linux and Windows.

Firezone's approach to DNS works a bit differently than one might expect. One question we often get from new users is, "why do my DNS Resources resolve to a different IP address with Firezone enabled?". Great question -- read on to find out.

Firezone 1.0 GA is now available! Also in this update:

• Firezone 1.0 signups are now open
• New Team plan with self-serve billing
• Clients available for Windows, macOS, iOS, Android, and Linux
• Network roaming support

Firezone 1.0.0-pre.9 is released! In this update:

• Windows and Linux betas
• Directory sync for Microsoft Entra ID and Okta
• Improved performance and stability

Happy new year from the Firezone team!

After a long year of building, we're incredibly excited to announce 1.0 beta testing for Apple and Android platforms. Firezone 1.0 is an entirely new product with a brand new architecture that includes many of the features you've been asking for. To summarize just a few:

More enterprises are turning to open source software (OSS) to reduce costs, improve efficiency, and extend their competitive advantage. The core technologies chosen by organizations often persist for decades, so decisions that IT leaders make today are bound to affect their organizations’ ability to function and adapt in the future — whether that’s one year, or 10.

The number of employees working remotely is accelerating, so secure remote access should be a large part of any organization’s cybersecurity strategy. Secure remote access lets remote and hybrid employees work from anywhere in the world, on any device, without compromising your organization’s network, data, and system security.

Firezone comes from humble roots.

When we launched on Hacker News nearly two years ago, we never envisioned Firezone to be more than a simple tool for managing your WireGuard configurations.

Today, I'm excited to announce we've closed the first public issue on our GitHub repository, more than a year after it was originally opened: Containerization support! We're also releasing preliminary support for SAML 2.0 identity providers like Okta and OneLogin.

As the first post on our new blog, we thought it'd be fitting to kick things off with a release announcement. So without further ado, we're excited to announce: Firezone 0.5.0 is here! It's packed with new features, bug fixes, and other improvements — more on that below.