GoodAccess vs Pomerium

GoodAccess combines a cloud business VPN, secure web gateway, and Zero Trust network access in one platform for small and midsize businesses. Its Starter plan provides secure internet access and online threat protection for business teams. Administrators can centrally manage accounts, protected systems, policies, network activity, and security status. Controls include MFA, SSO, device posture checks, access rules, IP restrictions, and network encryption; users can connect up to three devices simultaneously. VPN tunnels use IKEv2/IPSec and OpenVPN, and teams can choose among more than 35 cloud gateway locations. The service supports Windows, macOS, Linux, iOS, Android, ChromeOS, and web access. Identity-provider integrations include Microsoft Entra ID, Okta, Google Workspace, AWS, Azure, Sentinel, Splunk, and CrowdStrike, with SSO and SCIM provisioning. GoodAccess states that data transfer through its Zero Trust Network is unlimited. The free Starter plan is available, paid pricing starts at $7/user/mo with annual billing, and a 14-day trial is offered. Annual billing saves 20 percent.

Pomerium is an open-source identity-aware proxy for controlling access to internal applications, servers, services, and workloads without requiring VPN client software. It checks identity, device state, and request context before granting access, and authenticates through identity providers that support OpenID Connect. Listed access scenarios include HTTP, MCP, SSH, gRPC, TCP, and UDP; supported app protocols also include HTTPS, HTTP/2, HTTP/3, and WebSocket. Pomerium removes its authentication cookies before forwarding requests upstream, and sensitive databroker data is encrypted at rest. Downstream TLS has a minimum of TLS 1.2. Deployment options include Linux and macOS binaries, packages, Docker images, source builds, and desktop clients for Windows, macOS, and Linux. The free Personal plan lists 10 users, 10 routes, five policies, and two service accounts. Business costs $7.00 per month, billed annually, and lists limits of 1,000 users, 100 routes, 100 policies, and 20 service accounts. A free trial is also listed.