#12 in Identity & Access ManagementUpdated 2026-08

Pangolin

by Pangolin · Open-source zero trust remote access built on WireGuard

51.1 — BenchRank score out of 100

Homepage
Pricing page

Visit website See full Identity & Access Management ranking

Overview

Pangolin is an open-source remote access platform based on WireGuard that gives users identity-based access to specific applications and infrastructure. People connect over peer-to-peer tunnels or clientless browser sessions across on-prem, cloud and edge sites, via a connector deployed behind an existing firewall. It is offered as cloud or self-hosted.

Best for: IT/OT, IoT and engineering teams needing identity-based remote access to infrastructure
Pricing: Free Basic plan for up to 5 users, then $4/user/month for Team and $9/user/month for Business, with custom Enterprise pricing.
Runs on: WebiOSAndroidmacOSWindowsSelf-hosted

Strengths and trade-offs

Strengths

Open-source and built on WireGuard
Clientless browser access as well as peer-to-peer tunnels
Clients for macOS, iOS, Windows, Linux and Android
Free tier for up to 5 users, no credit card required

Trade-offs

Free tier caps at 5 users, 5 sites and 15 resources
External IDPs, RBAC and audit logging need the paid Team plan
SSH management and device approvals only on the $9 Business plan
SIEM log streaming and SCIM are Enterprise-only, priced on request

Pricing

Published plans from Pangolin’s own pricing page, in USD. Usage charges and add-ons may apply on top.

Pangolin pricing tiers, monthly rates in USD
Plan	Monthly	Includes
Basic	—per user	Up to 5 users, 5 sites, 5 domains Custom domains and web-based proxy resources Private resources, clients and peer-to-peer connections 15 public and 15 private resources
Team	$4per user	External identity providers (IDPs) and multiple roles per user Audit logging and device posture Security policy enforcement Up to 50 users, 50 sites, 150 resources
Business	$9per user	Multiple organisations (up to 5) and IDP user auto provisioning SSH management and device approvals Custom branding Up to 250 users, 250 sites, 750 resources
Enterprise	Contact sales	Custom limits on users, sites and resources Log streaming (SIEM) and SCIM user lifecycle management Premium relay nodes Priority support and SLA

How this score is made up

Each dimension is scored out of 100 and combined into the headline score using fixed weights.

MCP support: 0 out of 100
API quality: 0 out of 100
Documentation: 65 out of 100
Agent friendliness: 75 out of 100
Pricing transparency: 100 out of 100
Changelog: 100 out of 100
Marketing site structure: 60 out of 100
Operational trust: 90 out of 100

Measured, but not part of the score

Useful to know, but not a mark for or against the product — so these do not affect the ranking.

Openness: 55 out of 100
Maintenance: 100 out of 100

This doesn’t look right — report a problem with Pangolin’s score

Alternatives in Identity & Access Management

Ranked 1
75.9 — BenchRank score out of 100
Ory
Ory · API-first identity and access management, self-hosted or managed
Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Ranked 2
73.8 — BenchRank score out of 100
Logto
Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy
Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Ranked 3
73.1 — BenchRank score out of 100
Hexclave
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.