Life & fun · alternatives · 2026
24 alternatives to Tobab, a poor mans identity aware proxy. “BeyondCorp” for selfhosters
tobab: the poor mans identity aware proxy, easy to use setup for beyondcorp in your homelab - gnur/tobab
Tobab is an identity-aware proxy designed for self-hosted environments, inspired by BeyondCorp security principles. It enables users to control access to internal applications based on identity and device information… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Tobab, a poor mans identity aware proxy. “BeyondCorp” for selfhosters launched in 2020; newer entries below may have overtaken it.
- 1
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go. - ory/oathkeeper
2018 · github.com · its alternatives →
- 2
- 3
A totally proof-of-concept FoundationDB based network block device backend - dividuum/fdb-nbd
2018 · github.com · its alternatives →
- 4
A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon
2017 · github.com · its alternatives →
- 5
Proxy4u▲93Fast residential proxies for smooth web scraping - Proxy4u
2024 · proxy4u.com · its alternatives →
- 6
Hey HN! This is Adil, Salman and Jose and and we’re behind archgw [1]. An intelligent proxy server designed as an edge and AI gateway for agents - one that natively know how to handle prompts, not just network traffic. We’ve made several sweeping changes so sharing the project again. A bit of background on why we’ve built this project. Building AI agent demos is easy, but to create something production-ready there is a lot of repeat low-level plumbing work that everyone is doing. You’re applying guardrails to make sure unsafe or off-topic requests don’t get through. You’re clarifying vague…
2025 · github.com · its alternatives →
- 7
A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML config file. - ytkoka/impersonate-proxy
Aug 2026 · github.com · its alternatives →
- 8
Your agent team, on your machine. Open-source harness for multi-user Claude agents. - yaodub/cast
Jun 2026 · github.com · its alternatives →
- 9
grpc microservices with mutual TLS and token authentication in Go - 3n21c0/hello-auth-grpc
2017 · github.com · its alternatives →
- 10
The only way to go fast is full YOLO mode in your coding agent. I've got the local sandbox figured out (pro tip: Incus VMs work great) but I wanted to keep my agents from doing things like inadvertently blowing up my cloud services or chasing a prompt to POST to some random website. I struggle most with this on my side projects where my permission model isn't quite as robust as it is at the office. I started with a firewall on the Incus container but every time the agent needed access to something new, I was poking more holes in it - and it didn't differentiate between HTTP verbs. I've been…
Jul 2026 · trollbridge.dev · its alternatives →
- 11
At my last company, we connected Claude Code and Cursor to almost all our internal services via MCP. It made the team incredibly fast, but we hit a wall: permissions. If you give an agent "Read Only" access, it can’t actually fix anything. If you give it "Write" access, it’s only a matter of time before a hallucination or a bad prompt results in a deleted database or a nuked production bucket. We had a few "close calls" that convinced us that simply reducing IAM permissions makes agents useless. I built Armour (https://github.com/fuushyn/armour) to solve this. It’s a…
Jan 2026 · github.com · its alternatives →
- 12
An experimental AntiBot, AntiCrawl reverse proxy for serving simple static content. - pulkitsharma07/OnlyHumans-Proxy
2024 · github.com · its alternatives →
- 13
Hi HN, I'd like to share a small Go utility I wrote called prxy. The idea was born out of my frustration with accessing my self-hosted services when I'm on the go. I use WireGuard to connect to my homelab, but I really dislike sending all my computer's traffic through my home network — it slows things down and is inconvenient. I wanted proper application-level split-tunneling. A tool I love, wireproxy, got me most of the way there by creating an HTTP proxy from a WireGuard peer. This is perfect for apps that let you configure a proxy. The problem was the other 10%: apps that don't. Think of…
2025 · github.com · its alternatives →
- 14
Needed this in my own work, anonymizing PII/PHI and decided to build this because presidio didn't really cut it for our use-case. Try it and maybe let me know if you have any feedback :)
2025 · github.com · its alternatives →
- 15
ProxyOrb▲3Free Web Site Proxy Browser & Website Unblocker
Dec 2025 · proxyorb.com · its alternatives →
- 16AO
AuthWeb is a minimalist web-based tool for generating secure TOTP tokens and passwords. Built with privacy and security in mind, all computations are performed client-side with no data storage. Key features: - Generate TOTP tokens with QR code support - Configurable password generator (single/batch mode) - Zero data collection or storage - Clean, responsive UI built with Tailwind CSS - Self-hostable and open source under MIT license The project aims to provide a reliable alternative to proprietary authenticator apps while maintaining simplicity and user privacy. QR codes are generated…
2024 · auth.web.id · its alternatives →
- 17
Inspektor is a protocol-aware proxy that is used to enforce access policies👮 - inspektor-dev/inspektor
2022 · github.com · its alternatives →
- 18
Bemobs▲11Protect your campaigns from spies, bots & bad traffic
2025 · bemobs.com · its alternatives →
- 19
Native macos https proxy for devs and redteamers
Dec 2025 · 7co.cc · its alternatives →
- 20
- 21
Securely connect web apps and AI agents to local devices
Sep 2026 · pbxz.io · its alternatives →
- 22
⏰ 🔥 A proxy to simulate network and system condition
2016 · slothebat99.co · its alternatives →
- 23BX
Hi HN, I’m the founder of https://b2v.xyz, a service that protects organizations against impersonation attacks. The problem I’m trying to solve stems from the following observation: while end-user authentication methods are becoming more advanced as cybersecurity evolves, organizations aren't experiencing the same improvements when we reverse the roles, i.e. when organizations authenticate themselves to their users. This imbalance leaves a gap in secure communications that B2V aims to close. Bad actors have countless ways to pose as trusted entities — through phishing, smishing,…
2024 · get.b2v.xyz · its alternatives →
- 24PA
TL;DR: We are building a new Agentic Access Gateway in Pomerium to safely let AI agents (like GPT-based deep researchers, scripts or assistants) access internal apps and resources on your behalf – with fine-grained, just-in-time authorization for every action. It's open source (GitHub link below) and we're looking for feedback and early access users. What is Pomerium? For those unfamiliar, Pomerium is an open-source identity-aware proxy (a "zero trust" access gateway). It sits in front of your internal apps and APIs, continually verifying identity and context on every request. The problem:…
2025 · its alternatives →
Also compare
- Oathkeeper – Cloud-Native Identity and Access Proxy alternatives
- Proxyman alternatives
- A proof-of-concept FoundationDB based network block device backend alternatives
- A Go Library for Better Access Control alternatives
- Proxy4u alternatives
- ArchGW – An intelligent edge and service proxy for agents alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →