Pangolin

Name: Pangolin
Brand: Pangolin

AI Native

Tailored software for builders, by builders.

Est 2025|Raised $5.2M

LinkedIn 824|Web traffic 58K|FTEs 4|HQ San Francisco, California, US

MarketsPrivileged Access Management (PAM)Security Service Edge (SSE)

01Competitive Landscape

Narrative analysis

- Pangolin provides an open-source alternative for teams that prioritize control-plane ownership and self-hosting. For organizations willing to operate a control plane, Pangolin can be attractive for homelab, SMB, and technical teams. - Twingate and other managed vendors tend to be preferable where organizations prioritize turnkey managed services, clearer pricing, and enterprise procurement readiness. - Cloudflare Zero Trust is typically more appropriate for buyers seeking a broad, integrated suite with an extensive global edge network and additional security services.

Market share / adoption trends

No independent analyst market share figures were located for Pangolin. Community engagement signals (e.g., repository activity and forum discussion) indicate notable community interest.

	Pangolin (official product site)	Twingate	Cloudflare Zero Trust
Starting Price	Not clearly published in accessed sources; hosted option offers a free entry tier and self-host available	Starter: publicly listed pricing for non-commercial/individual tiers; Teams and enterprise tiers with published per-user pricing	Free tier is publicly referenced; paid tiers vary and enterprise pricing typically requires plan selection
Best For	Self-hosted identity-aware access and tunneled reverse proxy; suitable for homelab to SMB and hybrid/edge networks	Managed ZTNA replacing VPN for teams wanting a managed SaaS experience	Organizations seeking a broad Zero Trust platform (Access, SWG, etc.) integrated with a global edge network
Key Strength	Open-source with self-host option; combines reverse proxy and private access with WireGuard-based tunnels	Polished UI, managed service, commercial support and clearer per-user pricing	Broad feature set and integration with Cloudflare's global edge and security services
Key Weakness	Enterprise compliance artifacts not clearly documented publicly; operator burden for self-hosting and some reported setup issues	Not typically positioned as a self-hosted control plane; may be limiting for organizations that require full control-plane ownership	Potential vendor lock-in and complex SKU/feature matrix; some advanced features may be enterprise-only

01Competitive Landscape

Narrative analysis

Pangolin provides an open-source alternative for teams that prioritize control-plane ownership and self-hosting. For organizations willing to operate a control plane, Pangolin can be attractive for homelab, SMB, and technical teams.
Twingate and other managed vendors tend to be preferable where organizations prioritize turnkey managed services, clearer pricing, and enterprise procurement readiness.
Cloudflare Zero Trust is typically more appropriate for buyers seeking a broad, integrated suite with an extensive global edge network and additional security services.

Market share / adoption trends

No independent analyst market share figures were located for Pangolin. Community engagement signals (e.g., repository activity and forum discussion) indicate notable community interest.

	Pangolin (official product site)	Twingate	Cloudflare Zero Trust
Starting Price	Not clearly published in accessed sources; hosted option offers a free entry tier and self-host available	Starter: publicly listed pricing for non-commercial/individual tiers; Teams and enterprise tiers with published per-user pricing	Free tier is publicly referenced; paid tiers vary and enterprise pricing typically requires plan selection
Best For	Self-hosted identity-aware access and tunneled reverse proxy; suitable for homelab to SMB and hybrid/edge networks	Managed ZTNA replacing VPN for teams wanting a managed SaaS experience	Organizations seeking a broad Zero Trust platform (Access, SWG, etc.) integrated with a global edge network
Key Strength	Open-source with self-host option; combines reverse proxy and private access with WireGuard-based tunnels	Polished UI, managed service, commercial support and clearer per-user pricing	Broad feature set and integration with Cloudflare's global edge and security services
Key Weakness	Enterprise compliance artifacts not clearly documented publicly; operator burden for self-hosting and some reported setup issues	Not typically positioned as a self-hosted control plane; may be limiting for organizations that require full control-plane ownership	Potential vendor lock-in and complex SKU/feature matrix; some advanced features may be enterprise-only