Pomerium enables true zero trust security without getting in the way of workflow or productivity. The end user experience is simple and onboarding has never been easier. It solves all the problems plaguing network administration and security frameworks while being flexible enough for any tool or application. 

As a plus, it’s self-hosted so the Pomerium team *cannot* mess with your instance. SaaS-based Zero trust services must by design decrypt your traffic to provide functionality, meaning you are trusting them as a MITM. We want our traffic, our secrets, our authentication cookies to be protected even from our vendors. Our security is in our hands, using a reliable product. Review collected by and hosted on G2.com.

The lift is higher since you must run the service yourself, but that's what you're signing up for when you want full exclusive control. The deployment can be tricky and I'd love to see improved playbooks/terraform/etc over time, but the Pomerium team can be reached via Slack or Discuss for open source users, and there’s an SLA for enterprise customers (of which ExtraHop is one). Review collected by and hosted on G2.com.