Pangolin

Name: Pangolin
Brand: Pangolin

AI Native

Tailored software for builders, by builders.

Est 2025|Raised $5.2M

LinkedIn 824|Website|Web traffic 58K|FTEs 4|HQ San Francisco, California, US

Published Sep 26, 2026

01Common complaints

1. You require enterprise compliance artifacts upfront (SOC 2 Type II report, ISO certificates, penetration-test attestations) and the vendor cannot provide them quickly. 2. You want a largely hands-off managed edge with minimal operational burden — fully managed ZTNA platforms may be easier to operate. 3. You are highly sensitive to open-source licensing changes and dual-licensing models represent a governance risk. 4. You need a simple development tunnel for occasional exposure — single-purpose tunneling services may be faster to set up. 5. Your primary need is peer-to-peer mesh networking between devices rather than application publishing — a mesh-focused product may be a better fit.

Deal disqualifiers

Organizations that require public SOC 2 or ISO evidence before procurement.
Teams unable to operate networking or proxy infrastructure or lacking on-call coverage.

Documented or observed limitations

Private resource and client-based access features are described as being in beta in GitHub release notes.
License transition and governance have generated community debate; while a community edition remains AGPL-3 per vendor statements, the topic is sensitive.
At least one reported DNS outage affected resource resolution for users under certain configurations, indicating potential external dependencies.

Roadmap signals

The vendor blog indicates plans to add enterprise-grade features aimed at teams concerned with compliance and scale.

02Why they buy

Differentiators supported by sources

Identity-aware tunneled reverse proxy that the vendor positions as an alternative to Cloudflare Tunnel.
WireGuard-based architecture for encrypted connectivity.
Options for self-hosting combined with a cloud control plane, depending on plan and configuration.

Areas where competitors have advantages

Cloudflare: broader enterprise compliance documentation, global edge presence, and procurement familiarity.
Tailscale: simplicity for device and user mesh networking.
ngrok: developer-focused tunneling workflows and polished SaaS ergonomics.

03Field reports

Review platforms (G2, Capterra, TrustRadius)

G2 / Capterra / TrustRadius: No mainstream review profiles were found in the initial searches for Pangolin. This may indicate limited penetration into traditional mid-market procurement channels, or that the product is newer and reviews are concentrated in open-source communities.

Community feedback (representative positive examples)

From community posts about recent releases, users reported ease of setup and improvements for multi-domain support. Several users noted that installation was straightforward and that the service functioned as expected in their environments.

Community posts frequently describe Pangolin as a self-hosted Cloudflare Tunnels alternative, which appears to be a common framing among self-hosters.

Community feedback (representative critical examples)

Community discussion has included concern around licensing changes, indicating that licensing strategy is a notable sensitivity. The vendor posted clarifications following community questions about licensing. Operational reliability concerns appear in community support threads. Users have reported domain or resource resolution failures that were later attributed by the vendor to an upstream DNS outage. This suggests that, depending on configuration, some workflows may depend on vendor-operated DNS or control-plane components.

Why customers choose it (inferred from community discussions)

Desire to reduce reliance on Cloudflare while retaining tunnel and proxy functionality.
Need for identity-aware access control in front of internal applications.
Preference for self-hosting and running a lightweight connector within a private network.

Why some users hesitate or churn (observed themes)

Licensing concerns and commercialization-related worries common in open-source infrastructure projects.
Operational issues such as DNS/service outages and the complexity of troubleshooting distributed components.

Vendor-published growth story (not an independent case study)

The vendor blog provides a timeline and claims of growth (GitHub stars, community members, donors) and describes a seed raise.

Value: The material documents vendor-reported traction points and product maturity milestones.
Limitation: These are vendor-published items and are not independently validated; no methodology is provided for reported deployments, conversion, retention, uptime, or customer outcomes.

Community-sourced anecdotes

Community forum posts function as informal case studies: users describe replacing Cloudflare tunnels or combining a VPS front-end with home servers. These are anecdotal and may overrepresent early or enthusiastic adopters.

04Best fit

Company sizes

Best fit: Small to mid-sized organizations and small infrastructure teams within larger organizations that can operate self-hosted infrastructure.
Likely sweet spot: Technical founders, DevOps/SRE, platform engineering teams, and security engineers.

Industries / verticals

Technology, SaaS, managed service providers, and organizations with distributed networks or edge devices (IoT, field deployments) where inbound exposure is a concern.

Roles and personas

Decision makers: Head of Engineering, DevOps lead, Security lead.
Hands-on users: SRE/DevOps engineers, homelab operators, IT administrators.

Pain points Pangolin addresses

Publishing internal applications without opening firewall ports.
Providing identity-aware access policies and audit logging for internal tools.
Offering a Cloudflare-Tunnel-like experience with options for self-hosting and open-source governance.

05The pitch

What the product does (objective value proposition)

Pangolin is an identity-aware, tunneled reverse proxy and secure access platform that enables teams to expose internal or private services to users without opening inbound ports or requiring public IPs. The product routes traffic through encrypted WireGuard tunnels, applies authentication and authorization at edge nodes, and provides a web-based interface to manage resources, access rules (IP/path/geo), and audit/access logs. The vendor positions Pangolin as a self-hosted alternative to Cloudflare Tunnels and, in newer releases, as an open-source alternative to Twingate-style ZTNA for private resource access.

Target market and positioning

- Primary: Self-hosters, homelabs, SMBs, and infrastructure/security-focused teams that need to publish internal applications without exposing inbound ports. - Secondary: Teams seeking a single interface to manage multi-site ingress and access control with SSO and policy enforcement. - Positioning: Positioned as application delivery combined with zero-trust access control rather than a traditional VPN. The product is designed to reduce exposed attack surface vectors and to centralize access management.

Get a comprehensive analysis of Pangolin including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →