defguard

Enterprise Open Source SSO & VPN.
This is a mirror account of our official Mastodon:

[defguard @defguard_net]

🚀 Defguard 2.0 Alpha 2 is out!

✅ Quick Setup Wizard & OVA
✅ High Availability
✅ Firewall management
✅ Static IP assignment

Nearly feature-complete. Beta + 1.x migration wizard coming soon.

👉 https://t.co/kIKls5Ftwr

#WireGuard #OpenSource #VPN

[defguard @defguard_net]

Early user testing now open for Defguard 2.0 Alpha!

Highlights in this release includes reversed core gateway model, redesigned UI, built in mTLS CA, guided deployment and much more.

Release notes & details: https://t.co/770hdfsz1J

Video guide: https://t.co/ZOz0I0A3yi

[defguard @defguard_net]

Defguard v1.6.0 released !

🖥️ Windows Pre-logon & Always-on WireGuard with Service Locations
🚀 Zero-touch Enrollment
⚙️ Enterprise-ready clients - WireGuardNT on Windows & native Swift on macOS
🌐 Manual MTU configuration

https://t.co/BHcLp9nY1K

#WireGuard #EnterpriseVPN

[defguard @defguard_net]

[4/4]: We broke down the mechanics (TCP meltdown, DTLS fallback, mobility issues) in our new article.
If you are ready to see what a modern, WireGuard-based alternative looks like in practice, read the full guide here: https://t.co/Iud8yt1hAZ

#WireGuard #VPN #SelfHosted

[defguard @defguard_net]

[1/4]: Do you face a “slow and unstable SSL VPN” problem? 🐌
It’s likely not a configuration issue. Legacy SSL VPNs end up carrying TCP traffic inside a TLS/TCP tunnel, leading to the infamous "TCP Meltdown." 👇

[defguard @defguard_net]

[3/4]: These are transport-level behaviors, not bugs.
Defguard delivers the solution: we combine stateless WireGuard® transport with the Identity, MFA, and Access Control layers you need. No more “VPN is slow” tickets.

[defguard @defguard_net]

If you build critical infrastructure, don't rent your security. Own it.
Kudos to the co-authors for mapping the region!
Read the full report: https://t.co/41B7yUQk8d

[defguard @defguard_net]

Defguard listed in Dealroom's "Tough Tech" report as "Startup to Watch"!
The report maps mission-critical defence innovations on the NATO Eastern Flank.
It defines "Tough Tech" as technologies that "can't fail." 🧵[1/3]

[defguard @defguard_net]

[2/3] We believe that in tough times, the only infrastructure that truly never fails is the one you can fully control.
We were recognized for:
🔹 European Data Sovereignty
🔹 Privacy & Control
🔹 Trust through Open Source

[defguard @defguard_net]

Running FortiWeb? Recommended steps:
• Update to 8.0.2+
• Restrict access to management interfaces
• Review logs for unexpected administrative activity

Full Rapid7 analysis: https://t.co/BUnTF5KXKA [6/6]

[defguard @defguard_net]

⚠️ New FortiWeb CVE: Rapid7 & Defused disclosed CVE-2025-64446, a path traversal issue in FortiWeb.

In versions ≤8.0.1 it exposed management-related endpoints without authentication, enabling admin account creation. 8.0.2+ returns 403. Exploitation seen since October. 🧵[1/6]

[defguard @defguard_net]

This is not about patch speed. It’s about isolating internet-facing components from those storing sensitive data. [5/6]

[defguard @defguard_net]

We also built MFA directly into the WireGuard® connection flow, where authentication must happen before the session begins.

📷 Watch the full conversation here: https://t.co/VxqI5AdNdF [3/3]

[defguard @defguard_net]

This is why we build Defguard around transparency and verification.

You can inspect how the system works, and we openly publish third-party pentest reports so nothing is a black box. [2/3]

[defguard @defguard_net]

Our founder Robert joined the Hard2Beat podcast with Maciej Zawadziński to highlight something simple in enterprise security.

People build software, people make mistakes. And that's normal.

The real risk begins when systems hide those mistakes instead of exposing them [1/3]🧵

[defguard @defguard_net]

We also built MFA directly into the WireGuard® connection flow, where authentication must happen before the session begins.

🎧 Watch the full conversation here: https://t.co/2l81pQ0nQl [3/2]

[defguard @defguard_net]

This is why we build Defguard around transparency and verification.

You can inspect how the system works, and we openly publish third-party pentest reports so nothing is a black box. [2/3]