DefGuard/defguard

View on GitHub

Zero-Trust access management with true WireGuard® 2FA/MFA

Stars: 2.8k
Forks: 115
Open beginner issues: 0
Indexed issues: 302
Avg merge: 1d 4h
Merged PRs (30d): 49

Dominant language: Rust
License: No license data
Last GitHub push: Sep 11, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted

Open All

297 open issues indexed

Device / posture-based ACL rules Open

DefGuard/defguard#3405 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Library for TPM operations Open

DefGuard/defguard#3436 · 0 comments · 0 reactions · 2 assignees · Indexed Sep 15, 2026
Validate OpenAPI spec in CI Open

DefGuard/defguard#3449 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Use mock SMTP to test emails in existing integration tests Open

optional for release

DefGuard/defguard#3458 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Fix unencrypted linux posture CI test Open

optional for release

DefGuard/defguard#3480 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Separate REST API endpoints from Web UI API Open

feature

DefGuard/defguard#3487 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature Request]: Support for CLI-native external MFA. Open

feature

DefGuard/defguard#3499 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add packages for more codenames in APT repository Open

feature

DefGuard/defguard#3505 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add new GRPC method for configuring MFA factors Open

DefGuard/defguard#3509 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
MFA factor configuration wizard for email and TOTP Open

DefGuard/defguard#3510 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Trigger MFA configuration wizard from the location tile Open

DefGuard/defguard#3511 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Allow to trigger enrollment by providing email address Open

DefGuard/defguard#3512 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Run posture checks periodically Open

DefGuard/defguard#3529 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Unclear toggle titles Open

bug

DefGuard/defguard#3530 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Activity log UX improvements Open

release notes

DefGuard/defguard#3539 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Design] mobile login page Open

DefGuard/defguard#3540 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Unable to remove SMTP configuration when remote enrollment for LDAP is enabled Open

bug

DefGuard/defguard#3560 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Show confirmation modal when removing OIDC provider if OIDC is used in any MFA Flows Open

DefGuard/defguard#3564 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Rate-limit VPN MFA proof failures per device (durable, not session-scoped) Open

DefGuard/defguard#3571 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
What should happen to MFA flows when SMTP or OIDC provider are removed Open

DefGuard/defguard#3581 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Button overlaps with steps during animation in MFA Flow Editor Open

DefGuard/defguard#3582 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Configurable VPN MFA session timeout Open

DefGuard/defguard#3583 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Core-side throttling on finish / step_start Open

DefGuard/defguard#3585 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Align OIDC and mobile-approve on a single out-of-band mechanism Open

DefGuard/defguard#3586 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Show disabled MFA factors in MFA flow details view Open

design

DefGuard/defguard#3587 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Authenticate new MFA configuration using a selected already configured factor Open

DefGuard/defguard#3589 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Introduce a separate step-finish RPC Open

DefGuard/defguard#3608 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
[Feature Request]: Directory synchronization Keycloak / Group mappers Open

feature

DefGuard/defguard#3634 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Invalidate session after password reset via edge Open

bug

DefGuard/defguard#3637 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Entra] Display correct error when creating account not included in configuration Open

bug

DefGuard/defguard#3638 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Users from LDAP are not synchronized when their status is "Pending" aka Not enrolled Open

bug

DefGuard/defguard#3639 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Settings option to disable email alerts Open

feature t2

DefGuard/defguard#3645 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Use the configured identity provider name instead of "OpenID" Open

feature t2

DefGuard/defguard#3646 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
MFA-flow assignment to location during the location setup wizard Open

design

DefGuard/defguard#3649 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Always-on machine tunnel created from the user's first enrollment Open

feature t3

DefGuard/defguard#3654 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Configurable timezone for timestamps in notification emails (currently hardcoded to UTC) Open

feature

DefGuard/defguard#3655 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add constraint to MFA Flow name to be unique Open

bug

DefGuard/defguard#3658 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Send gateway commands after DB transaction is commited Open

DefGuard/defguard#3660 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Implement shared logic for computing ACL updates for relevant locations Open

DefGuard/defguard#3661 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
When 2+ gateways are on same instance, one of them becomes disabled after some time Open

bug

DefGuard/defguard#3668 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Expired license state is not presented correctly in the settings Open

bug

DefGuard/defguard#3669 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
LDAP groups created in Active Directory get an auto-generated sAMAccountName Open

feature

DefGuard/defguard#3670 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Find a way to produce SettingsNoSecrets from Settings Open

optional for release

DefGuard/defguard#3673 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[e2e] dev: e2e suite failed Open

e2e release-blocker

DefGuard/defguard#3674 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Add option to authorize and configure methods other than TOTP/EMAIL via the new client mfa flows feature Open

timebox

DefGuard/defguard#3676 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Minor MFA flow assignment tweaks Open

DefGuard/defguard#3677 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Release 2.2-alpha1 Open

DefGuard/defguard#3678 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026

DefGuard/defguard

Get new issues in your inbox