Defguard is an enterprise VPN server built on WireGuard, with integrated two-factor authentication, single sign-on and identity management. It is intended for organisations that want to manage remote access themselves. The product is delivered as software that the customer installs and operates; the vendor's website describes a self-hosted architecture and links to a live demo. The core code is published on GitHub under the GNU Affero General Public License, while the enterprise components fall under a separate licence in the same repository.
Defguard is developed in Poland by defguard sp. z o.o., a Polish limited liability company. The website does not name a parent company. Because the server runs on the customer's own systems, keys, metadata and network traffic can remain within the organisation rather than with a third-party cloud provider. For a European organisation this makes Defguard a sovereignty-relevant option for VPN access, provided the organisation operates the server itself and checks the terms of any support contract.