Skip to main content

GateKey

Zero Trust VPN - Authenticate First, Connect Second

brew tap dye-tech/gatekey && brew install gatekey
๐Ÿ”

Zero Trust Security

Every connection is authenticated and authorized. Short-lived certificates auto-expire, and per-user firewall rules enforce least-privilege access.

๐Ÿ”‘

SSO Integration

Integrate with Okta, Azure AD, Google Workspace, or any OIDC/SAML provider. No separate VPN passwordsโ€”users authenticate with their existing credentials.

๐ŸŒ

Dual Protocol Support

Choose between OpenVPN for maximum compatibility or WireGuard for peak performance. Both protocols use the same zero-trust security model.

๐Ÿ”—

Multi-Gateway

Connect to multiple VPN gateways simultaneously with automatic interface management. Access resources across different networks without reconnecting.

๐Ÿ•ธ๏ธ

Mesh Networking

Hub-and-spoke topology for site-to-site connectivity. Connect remote offices through a central mesh hub with zero-trust access controls.

โ˜ธ๏ธ

Kubernetes Native

Deploy with Helm in minutes. GateKey integrates seamlessly with your Kubernetes infrastructure and can store secrets natively in the cluster.

See It In Action

Connect to your VPN in seconds with the GateKey CLI

Terminal
โ–‹

Quick Start

Get connected in under a minute

# Install the client

$ brew install gatekey

# Configure your server

$ gatekey config init --server https://vpn.company.com

# Login with SSO

$ gatekey login

# Connect to VPN

$ gatekey connect

Architecture

Control plane + Gateway agents with per-identity firewall rules

GATEKEY CONTROL PLANEWeb UI(React)REST API(Go)Embedded CA(PKI)PostgreSQLREST APIOPENVPN GATEWAYOpenVPNServerGatewayAgentnftables Firewall(Per-Identity Rules)WIREGUARD GATEWAYWireGuardServerGatewayAgentnftables Firewall(Per-Identity Rules)