# Caddy vs Pomerium

| Attribute | Caddy | Pomerium |
|---|---|---|
| **Vioscale score** | 53.3 (38% (low)) | 77.4 (26% (low)) |
| activity.commits_last_30d | 28 | - |
| adoption.dependent_repos | 2,153 | - |
| adoption.github_stars | 75,225 | - |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"on_prem":true,"self_hosted":true}` |
| description.long | An open-source HTTP server that automatically enables and renews HTTPS certificates for all domains, provides flexible JSON-based configuration with adapters for other formats, and includes a fully-managed internal PKI system for securing internal services and clusters. | Pomerium provides secure access to internal applications through identity and context-based authorization policies. It serves as a centralized gateway that authenticates and authorizes users before granting access, with a self-hosted data plane keeping sensitive information within organizational infrastructure. |
| integrations.count | 14 | 8 |
| integrations.list | `[{"name":"Cloudflare"},{"name":"Google Cloud DNS"},{"name":"TencentCloud DNS"},{"name":"Docker"},{"name":"Kubernetes"},{"name":"Consul"},{"name":"CrowdSec"},{"name":"Umami"},{"name":"Bunny CDN"},{"name":"OAuth 2.0"},{"name":"LDAP"},{"name":"OpenID Connect"},{"name":"SAML"},{"name":"Google Cloud KMS"}]` | `[{"name":"Keycloak"},{"name":"Nextcloud"},{"name":"LetsEncrypt"},{"name":"Kubernetes"},{"name":"Helm"},{"name":"Model Context Protocol (MCP)"},{"name":"ChatGPT"},{"name":"Open Policy Agent"}]` |
| language.primary | Go | - |
| license.spdx | Apache-2.0 | - |
| market.availability | - | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"mac":true,"linux":true,"windows":true}` | `{"cli":true,"web":true}` |
| pricing | `{"type":"open_source","summary":"Open source with optional paid commercial support through sponsorship tiers","freeTier":true,"sourceUrl":"https://caddyserver.com","retrievedAt":"2026-08-19T21:12:25.244Z"}` | `{"type":"subscription","plans":[{"free":true,"name":"Zero","summary":"Free for up to 10 users","features":["Web-based secure application access","Managed control plane","Self-hosted reverse proxy","Unified control plane UI","1 admin user","Automatic TLS certificate issuance with LetsEncrypt"],"components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"description":"For individuals and hobbyists needing secure personal application access","contactSales":false,"includedLimits":{"users":"10"}},{"free":false,"name":"Business","summary":"$7/user/mo billed annually","features":["Web-based secure application access","Self-hosted reverse proxy and data plane","Managed control plane","Custom domain support","5 admin users","20 TLS certificates","Multi-cluster support","Plugin support for third-party user context","Organizational namespaces","Hierarchical authorization policies","Role-based access control (RBAC)","Branded console and error pages","Web UI, CLI, and API access","SSO with OIDC identity providers","JWT support","TCP-over-HTTP and SSH-over-HTTP access","Mutual TLS (mTLS) authentication","Identity provider data sync","Advanced team management","Metrics and reporting","Access and audit logs","Email and Slack support"],"commitment":"annual","components":[{"kind":"per_unit","unit":"user","amount":7,"period":"month","currency":"USD"}],"description":"For teams and companies requiring advanced security and compliance features","contactSales":false,"includedLimits":{"admin_users":"5","tls_certificates":"20","multi_cluster_support":"1000"}},{"free":false,"name":"Enterprise","summary":"Custom pricing available upon request","features":["Fully self-hosted, on-premise deployment","Full Pomerium API access","No usage limits","Dedicated customer support","Dedicated Slack channel","Phone support","Dedicated customer success manager","All Business plan features"],"description":"For large organizations requiring full control and advanced features","contactSales":true}],"summary":"Free tier up to 10 users. Business from $7/user/mo billed annually. Enterprise custom pricing.","currency":"USD","freeTier":true,"sourceUrl":"https://www.pomerium.com/pricing","retrievedAt":"2026-08-19T21:08:30.605Z","startingPrice":{"unit":"user","amount":7,"period":"month","currency":"USD"},"billingPeriods":["month","year"]}` |
| pricing.free_tier | yes | yes |
| pricing.model | commercial | freemium |
| pricing.price_level | free | low |
| pricing.starting_price | - | `{"amount":7,"currency":"USD"}` |
| pricing.transparent | - | yes |
| release.cadence_days | 24 | - |
| release.history | `[{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.11.4","date":"2026-06-03T06:52:22Z","type":"stable","version":"v2.11.4"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.11.3","date":"2026-05-12T15:18:58Z","type":"stable","version":"v2.11.3"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.11.2","date":"2026-03-06T02:43:43Z","type":"stable","version":"v2.11.2"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.11.1","date":"2026-02-23T04:21:44Z","type":"stable","version":"v2.11.1"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.11.0-beta.2","date":"2026-01-06T18:02:07Z","type":"prerelease","version":"v2.11.0-beta.2"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.11.0-beta.1","date":"2025-12-04T20:48:19Z","type":"prerelease","version":"v2.11.0-beta.1"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.10.2","date":"2025-08-23T03:10:31Z","type":"stable","version":"v2.10.2"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.10.1","date":"2025-08-22T16:14:52Z","type":"stable","version":"v2.10.1"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.10.0","date":"2025-04-18T20:46:28Z","type":"stable","version":"v2.10.0"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.10.0-beta.4","date":"2025-03-25T03:33:16Z","type":"prerelease","version":"v2.10.0-beta.4"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.10.0-beta.3","date":"2025-03-24T22:46:51Z","type":"prerelease","version":"v2.10.0-beta.3"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.10.0-beta.2","date":"2025-03-09T13:51:09Z","type":"prerelease","version":"v2.10.0-beta.2"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.10.0-beta.1","date":"2025-03-06T18:23:58Z","type":"prerelease","version":"v2.10.0-beta.1"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.9.1","date":"2025-01-08T15:22:53Z","type":"stable","version":"v2.9.1"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.9.0","date":"2024-12-31T17:34:20Z","type":"stable","version":"v2.9.0"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.9.0-beta.3","date":"2024-11-05T18:32:38Z","type":"prerelease","version":"v2.9.0-beta.3"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.9.0-beta.2","date":"2024-10-02T22:33:58Z","type":"prerelease","version":"v2.9.0-beta.2"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.8.4","date":"2024-06-02T12:24:47Z","type":"stable","version":"v2.8.4"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.8.2","date":"2024-06-02T04:46:25Z","type":"stable","version":"v2.8.2"},{"url":"https://github.com/caddyserver/caddy/releases/tag/v2.8.1","date":"2024-05-30T14:31:22Z","type":"stable","version":"v2.8.1"}]` | - |
| security.gdpr | - | yes |
| security.hipaa | yes | - |
| security.pci | yes | - |
| security.scorecard | 9.2 | - |
| security.vulnerabilities | `{"count":7,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fcaddyserver%2Fcaddy&per_page=100","last_12m":3,"max_severity":"CRITICAL"}` | - |

## Capabilities (Reverse Proxies)

| Capability | Caddy | Pomerium |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Tls termination | - | - |
| Automatic HTTPS acme | - | - |
| HTTP caching | - | - |
| Hot config reload | - | - |
| Clustering ha | - | - |
| Rate limiting | - | - |
| Identity aware proxy | - | - |

*Source: Vioscale. Generated 2026-09-01T17:31:19.832Z. "-" = undocumented, not absent.*