#1
Open-source zero-trust networking platform delivering a WireGuard-based private network with centralized access control, SSO/MFA, and cross-platform clients.
28.7k stars1.6k forkslast commit Actively maintained
10 self-hosted Cisco Secure Client (AnyConnect) alternatives
Enterprise VPN and secure access client that provides encrypted remote connectivity to corporate networks, supports endpoint posture assessment, multi-factor authentication, and policy-based access controls.
Alternatives to Cisco Secure Client (AnyConnect)
#2
Open-source identity-based remote access platform combining WireGuard VPN and tunneled reverse proxy access with granular zero-trust controls.
22.5k stars765 forkslast commit Actively maintained
#3
Secure access platform for servers, Kubernetes, databases, desktops, and web apps with SSO/MFA, short-lived certificates, and full session auditing.
20.9k stars2.1k forksAGPL-3.0last commit Actively maintained
#4
Open-source VPN client for desktop and mobile that can automatically set up a private VPN server and connect using WireGuard, OpenVPN, IKEv2, and obfuscated modes.
14.7k stars1.1k forksGPL-3.0last commit Actively maintained
#5
OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.
14.4k stars3.4k forkslast commit Actively maintained
#6
Firezone is a zero-trust VPN replacement built on WireGuard, providing identity-aware access policies, peer-to-peer encrypted tunnels, and lightweight gateways.
9k stars450 forksApache-2.0last commit Actively maintained
#7
iodine is a DNS tunneling tool that forwards IPv4 traffic through DNS queries and replies, providing a TUN interface to route IP traffic when only DNS is allowed.
8k stars596 forksISClast commit Slowing down
#8
Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.
5k stars350 forksApache-2.0last commit Actively maintained
#9
OPNsense is an open source FreeBSD-based firewall and routing platform with a web GUI, API, VPN, traffic shaping, and security features for networks and homelabs.
4.7k stars983 forksBSD-2-Clauselast commit Actively maintained
#10
Self-hosted web dashboard for WireGuard and AmneziaWG to manage configs, peers, and access with a simple UI and optional 2FA.
3.7k stars452 forksApache-2.0last commit Actively maintained
What replacing Cisco Secure Client (AnyConnect) actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 9 of 10 shipped a commit in the last six months. Licences in this list: AGPL-3.0, GPL-3.0, Apache-2.0, ISC, BSD-2-Clause. In exchange you take on hosting, backups and updates yourself.
Browse everything in Network Security (VPN, Firewall, WAF).
