Dev tools · alternatives · 2026
24 alternatives to Wag, MFA and Enrollment for WireGuard
Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptographically it leaves a lot to be desired when it comes to enrollment and end user device security. Obviously instead of using an off the shelf solution like tailscale, I decided to reinvent the wheel which has honestly been quite fun with learning about eBPF, and recently clustering and HA with etcd! The most recent version (in the docker container) contains about 6 months of very new work bringing it all from sqlite3…
Wag is a multi-factor authentication and enrollment system built on top of WireGuard. It addresses gaps in WireGuard's device security and enrollment processes by adding MFA capabilities and streamlined device… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Wag, MFA and Enrollment for WireGuard launched in 2024; newer entries below may have overtaken it.
- 1
WireHub is a side project I've been working on, on and off, for close to a year now. It's made with django and minimal javascript. It's a hosted WireGuard config generator/manager, that you can invite others to join your networks and manage their own configs/devices. It's still very much a beta, maybe an mvp, but I just wanted to get some early from the community. Thanks!
2023 · wirehub.org · its alternatives →
- 2
The easiest way to run WireGuard VPN + Web-based Admin UI. - wg-easy/README.md at master · WeeJeWel/wg-easy
2021 · github.com · its alternatives →
- 3
My elderly parents are behind a 5G connection in rural areas, and I help them manage their network from overseas. I found a reasonably priced 5G router that can do external antennas required for it to work, but the only reasonable ways to get access to it is either through OpenVPN or WireGuard, the latter of which is much more lightweight and preferred with the memory constraints of the device. The problem with WireGuard is that it requires handling key management oneself, and configuring the keys to every device you want to access it from. It also doesn't play nicely together with other…
2025 · github.com · its alternatives →
- 4
eBPF is an amazing technology that allows safely running user-supplied functions at pretty much arbitrary probe points in a kernel/user space context. Much has been written about how amazing this feature is for kernel observability. But as someone who writes user space code, what I find even more amazing is the support for tracing arbitrary user space programs, with no code changes and low overhead. However, doing in-depth analysis can get complicated and time-consuming. My goal with wachy was to make this debugging significantly easier/faster to use, by displaying traces in a TUI…
2022 · rubrikinc.github.io · its alternatives →
- 5
- 6
Contribute to logimaxx/wg-admin development by creating an account on GitHub.
Sep 2026 · github.com · its alternatives →
- 7
Wafer Pass▲116Hi HN, I’m Emilio. We’re launching the Wafer extension for the popular IDEs (VS Code, Cursor and Antigravity). Wafer exists to make performance engineers more efficient. Most of the work perf engs do is extracting signal and turning it into the next experiment. You spend hours per kernel doing interpretation and bookkeeping: which counters matter, what changed, what hypothesis you’re testing, what to try next. Wafer is building an environment where profiling, compiler analysis, and docs are first-class context in your workflow, so iteration is cheap. long-term, that same structured context…
Apr 2026 · wafer.ai · its alternatives →
- 8
A Virtual FIDO2 USB Device. Contribute to bulwarkid/virtual-fido development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 9OS
2024 · defguard.net · its alternatives →
- 10
- 11TY
Hi HN, Some misbehaving networks drop WireGuard packets either by accident or on purpose. Commonly the latter is done with simple DPI rules that block the handshake initiation [1], but it could be applied to other message types as well. We thought it would be great if there was tool for folks to use as a quick litmus test to see if this happening for them, without having to configure a client to send data through a random, functional WireGuard tunnel to an untrusted remote host. So we built probe.sh. How it works: - The probe.sh web app is an Elixir Phoenix app that spawns a few gen_udp…
2024 · probe.sh · its alternatives →
- 12
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2024 · github.com · its alternatives →
- 13
Zero-Trust access management with true WireGuard® 2FA/MFA - DefGuard/defguard
2023 · github.com · its alternatives →
- 14
Hey HN! This is Adil, Salman and Jose and and we’re behind archgw [1]. An intelligent proxy server designed as an edge and AI gateway for agents - one that natively know how to handle prompts, not just network traffic. We’ve made several sweeping changes so sharing the project again. A bit of background on why we’ve built this project. Building AI agent demos is easy, but to create something production-ready there is a lot of repeat low-level plumbing work that everyone is doing. You’re applying guardrails to make sure unsafe or off-topic requests don’t get through. You’re clarifying vague…
2025 · github.com · its alternatives →
- 15
FAST command to manage a centralised wireguard VPN. Think wg-quick but quicker: key generation + address allocation. - naggie/dsnet
2020 · github.com · its alternatives →
- 16
WireEdit▲68A Full Stack WYSIWYG Editor for Network Packets
2014 · omnipacket.com · its alternatives →
- 17
WGE▲5A high-performance web application firewall (WAF) library based on C++ - stone-rhino/wge
Nov 2025 · github.com · its alternatives →
- 18
- 19
2022 · github.com · its alternatives →
- 20
Hey HN, There’s been a lot of interest recently in meta-harnesses, loops, and multi-agent orchestration. Obviously, there are already a lot of good tools: Conductor, cmux, the native Codex / Claude Code apps, etc. For my own use cases, I’ve felt that the orchestration layer tends to feel overengineered. I mostly wanted a simple local harness (i.e Pi) for running and tracking CLI agents with the ability to hop in (via tmux). Relaymux is my opinionated attempt at that. A few design principles: - The frontend is just Telegram / iMessage / CLI. If I want more visibility, I hop…
Jun 2026 · github.com · its alternatives →
- 21SA
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…
Feb 2026 · ghostklan.com · its alternatives →
- 22
Hi HN, I wanted to give my family, who are scattered all over the world, a simple and private way to connect. The commercial options didn't quite fit, and the open-source tools I found were a bit too barebones and not friendly enough for non-technical users. My main goal was to build something completely self-service. I wanted my family to be able to manage their own devices without my help, so I could set it up once and then stay out of it. This led me to build LeiaGuard, a self-hostable UI for WireGuard built with Next.js. To make it truly easy for everyone, the interface is available in…
2025 · github.com · its alternatives →
- 23
Hi everyone! k8s-insider is a CLI tool to manage VPN networks and access Kubernetes workload and service resources directly through a WireGuard tunnel. It started as a simple Helm chart with a linuxserver/wireguard-like container image but, possibly due to my neurodivergence getting the better of me, evolved into a toolbox that, depending on the cluster configuration, can more or less automagically configure multiple networks with dynamic IP assignments and netpol-limited access to the cluster. I’ve found it to be a perfect middle ground between juggling multiple port-forwards and…
2023 · github.com · its alternatives →
- 24MW
So I got so involved in setting up AdWords, tracking down WP security bloggers, etc. that I forgot to post it here and get you all to check it out and offer suggestions. It's only been out for a couple weeks or so though, so this still qualifies as "launch window", I guess. Check it out here: http://www.panic-press.com/ Promo code "show-hn" for a free month to try it out. It has 100 uses, so it shouldn't run out, but if it does, let me know.
2012 · panic-press.com · its alternatives →
Also compare
- WireHub – easily create and share WireGuard networks alternatives
- Wg-easy] Easy to setup, all-in-one WireGuard and Management Web UI alternatives
- TailGuard – Bridge your WireGuard router into Tailscale via a container alternatives
- Wachy – A UI for eBPF-based performance debugging alternatives
- WAGSI alternatives
- Wg-admin – web UI for an existing WireGuard host alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →