Easy to deploy. User friendly from the client POV especially for the tech-sassy people.

Pomerium enables true zero trust security without getting in the way of workflow or productivity. The end user experience is simple and onboarding has never been easier. It solves all the problems plaguing network administration and security frameworks while being flexible enough for any tool or application.  As a plus, it’s self-hosted so the Pomerium team *cannot* mess with your instance. SaaS-based Zero trust services must by design decrypt your traffic to provide functionality, meaning you are trusting them as a MITM. We want our traffic, our secrets, our authentication cookies to be protected even from our vendors. Our security is in our hands, using a reliable product.

Pomerium config makes it easy to manage fine-grained access control whilst using a central identity provider. I like the fact that there are a few places to configure the whole deployment.