Updated August 2026
    Actively maintained
    Real momentum
    5.0k

    Pomerium: Maintenance, Licence and Alternatives

    Identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your self-hosted websites to pu

    TL;DR • Pomerium • as of August 2026

    Pomerium is an open-source web servers project, with 5.0k GitHub stars and a health score of 90/100. It committed 586 times in the last twelve months across 12 of those months, and its status is actively maintained. Licence: Apache-2.0. It has real momentum, so treat it as a live competitor rather than a stale repository.

    5.0k
    GitHub stars
    90/100
    Health score
    586
    Commits (12 mo)
    12/12
    Active months

    Maintenance health

    Status Actively maintained — Committed within the last 45 days.
    Last commit 2026-08-14
    Days since last commit 3
    Commits, last 3 months 134
    Commits, last 12 months 586
    Months with activity 12 of 12
    Last release 2026-07-16
    Archived No
    Licence Apache-2.0
    Category Web Servers

    Health score combines commit recency, twelve-month commit volume, months with activity, release recency and archive state. Metadata refreshed August 2026.

    What the licence lets you do

    Apache-2.0

    Permissive (MIT, Apache, BSD): you can fork it, close the source and sell it. Lowest legal friction for a commercial product.

    This matters most when you plan to sell a hosted version. A permissive licence means anyone — including a competitor with more capital — can do the same, so your defensibility has to come from distribution, support or data, not from the code.

    What Pomerium means for your idea

    Contested · 52/100
    Web Servers category →

    Pomerium is shipping code consistently, so a buyer comparing your product will find a maintained free option. Price and position against the total cost of self-hosting it, not against the paid incumbent's list price.

    Winnable, but differentiation is not optional. Pick one underserved segment and be visibly better for it rather than competing feature-for-feature with a free tool.

    Pomerium: common questions

    Is Pomerium still maintained in 2026?

    Actively maintained. Pomerium recorded 586 commits over the last twelve months, with activity in 12 of those months and 134 commits in the last quarter. Last commit: 2026-08-14. Last release: 2026-07-16. Committed within the last 45 days.

    Can I use Pomerium commercially?

    Pomerium is published under Apache-2.0. Permissive (MIT, Apache, BSD): you can fork it, close the source and sell it. Lowest legal friction for a commercial product.

    How crowded is the Web Servers category?

    19 open-source implementations, 14 of them actively maintained, led by Caddy at 75k stars. Saturation score 52/100 — Contested. Several maintained alternatives exist, but no one owns the category.

    Pomerium alternatives in Web Servers

    Caddy

    Web Servers

    75k

    Powerful, enterprise-ready, open source web server with automatic HTTPS.

    Actively maintained
    Real momentum
    Apache-2.0

    NGINX

    Web Servers

    31k

    HTTP and reverse proxy server, mail proxy server, and generic TCP/UDP proxy server.

    Actively maintained
    Real momentum
    BSD-2-Clause

    Pangolin

    Web Servers

    22k

    Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).

    Actively maintained
    Real momentum
    AGPL-3.0

    Competing with free? Check the market first.

    IdeaProof scores your idea against live competitors, market size and 1,000+ documented startup failures in about two minutes.