Pangolin

Thousands of self-hosted apps can be exploited right now through PHP2Shell. PHP2Shell is the name for two critical bugs in the PHP runtime itself (CVE-2026-109618 and CVE-2026-109619). An attacker with no login can send crafted HTTP requests that crash the server, leak data or, in the worst case, run code on it. Any PHP install facing the web is affected, including WordPress, Magento, custom apps and admin panels. Attacks started before the bugs were made public, and they're still climbing. Patch PHP now (8.5.12, 8.4.27, 8.3.36 or 8.2.35). Then look at which of your apps actually need to be on the public internet. Most admin panels, staging sites and internal tools don't. If attackers can't reach an app, an unauthenticated bug like this one can't touch it. Pangolin lets you take those apps off the internet entirely with an identity-based VPN, or put a login in front of them before any request reaches PHP. Here's how to set it up: https://lnkd.in/ehRTMieA #PHP #Security #SelfHosting #PHP2Shell

Government and regulated teams usually can't roll out AI tools until they can show where prompts go and who sent them. Pangolin gives you a way to show both. You can self-host the whole stack, including in air-gapped environments, so the control plane, logs and model traffic stay on the infrastructure you operate. If you run your own models on vLLM or Ollama, a small connector next to the model server makes a secure connection. Staff sign in with the identity provider you already use, such as Okta or Entra ID, and reach the AI gateway over a WireGuard tunnel after a device check. For audits, Pangolin can log every gateway call with the prompt, the response, the user and the model that answered. You choose how long logs are kept and can stream them to your SIEM. Budgets can cap token spend by role or by user. The same deployment also handles access to internal apps and servers, so you don't need one product for AI and a second one for remote access. Pangolin holds SOC 2 Type 2 and ISO 27001 certifications. https://lnkd.in/dnwyM24W #AI #GovTech #ZeroTrust #Compliance #GovernmentAI

Pangolin 1.24 is now available! This release brings exit nodes and improved desktop apps. Usually Pangolin works as a split tunnel VPN by default. It carries traffic between sites and clients and leaves your public internet traffic alone, for example when you visit Google or Wikipedia. But sometimes you do want Pangolin to carry your public internet traffic, for instance when: - You're on untrusted coffee shop Wi-Fi. - You're abroad and need an online service, such as banking, that only works from your home country. Now in 1.24, make a site an exit node and point other devices at it using an exit node resource. In our brand new re-skinned desktop clients, select the exit resource and your traffic now leaves that remote network. Deploying your own VPN is as easy as that! Read the full release details: https://lnkd.in/g7uaQmej And the docs here: https://lnkd.in/gcSyxX-c #VPN #ZeroTrust #SelfHostedVPN #Pangolin #Networking #Infrastructure

Pangolin 1.23 is now available! This release brings true multi-node high availability to Pangolin, eliminating single points of failure across your entire zero-trust VPN and identity-aware proxy stack. With 1.23, you can run full multi-node enterprise clusters using a shared PostgreSQL and Valkey architecture. We have centralized certificate management and coupled it with real-time authoritative DNS routing to support multiple Pangolin instances. Read the full release details: https://lnkd.in/eWfp8HVf And how we built it here: https://lnkd.in/ev_23eAN #HighAvailability #ZeroTrust #DevOps #SystemDesign #Networking #Infrastructure

Forcing users to install bulky RDP clients or fight with VPNs in 2026 is ridiculous! Rendering RDP directly in the browser is how remote access was always meant to be. Exposing port 3389 to the open web is an invitation for a breach, and pushing client software onto unmanaged contractor laptops is a logistical nightmare. This article and video show how to eliminate client installs entirely using outbound tunneling and identity-aware access rules. Users simply open a URL, sign in through your existing IdP (like Entra ID or Google Workspace), and get a full Windows session - complete with clipboard support and file transfer - directly inside their browser tab, with zero open inbound firewall ports. https://lnkd.in/eEa-TD3w #RemoteAccess #ZeroTrust #CyberSecurity #SysAdmin #DevOps #Infrastructure

Deploying NVIDIA DGX Spark, vLLM, and Ollama gives you total data sovereignty and cost control. But governing remote access to those self-hosted GPU clusters is a massive security headache. Granting blanket VPN access to host networks opens huge attack vectors, while forcing engineers through jump boxes or scattering static API keys creates continuous management debt. This article shows how to use Pangolin to attach outbound tunnels directly to your cluster to replace VPNs and static keys with zero-trust, identity-based SSO governance. https://lnkd.in/egMmHtr5 #AIInfrastructure #vLLM #Ollama #ZeroTrust #DataSovereignty #DevOps #CyberSecurity

Static API keys sitting in ~/.claude/settings.json or local .env files are a huge headache and a major security risk. As engineering teams adopt AI gateways and local coding agents, key sprawl gets out of control really fast. Managing, tracking, and rotating bearer secrets for every person on your team creates continuous logistics debt. It also creates a major security gap when keys inevitably leak or engineers offboard. This article shows how to eliminate virtual API keys for human developers entirely by moving to identity-based SSO access, while reserving scoped budget-capped keys strictly for unattended background jobs. https://lnkd.in/eR_gPgz9 #AIGateway #ZeroTrust #IdentityManagement #DevOps #CyberSecurity #AIInfrastructure

Pangolin 1.22 is now available! This release focuses on making Pangolin the best possible solution for connecting any AI model provider (self-hosted or cloud based) to engineering teams and autonomous agents. Highlights include: desktop client privately connects and authenticates users to models, issue API keys for public gateway endpoints, multi-model routing, session logging, spend budgets, tunnel to self-hosted models, and more! Read the full release notes: https://lnkd.in/eP_tvUSU #AIGateway #IdentityAware #ZeroTrust #Networking

TechEX NA 2026 is a wrap! We had some incredible conversations with engineering leaders, DevOps teams, and IoT innovators about the challenges of securing distributed edge infrastructure. A huge thank you to everyone who stopped by the booth at the San Jose McEnery Convention Center!

We’re heading to TechEx North America 2026! Visit the Pangolin team at booth 303 to see how we’re simplifying secure, scalable remote access, monitoring, and management for the distributed Edge and IoT. Whether you're managing a handful of devices or thousands of remote nodes, we’ll show you how to keep your fleet secure and monitored from anywhere. Booth: 303 Location: San Jose McEnery Convention Center, CA See you there! #TechEx #IoT #EdgeComputing #Pangolin #RemoteAccess