Average Ratings 2 Ratings
Average Ratings 0 Ratings
Description
CacheGuard-OS is an open-source Linux-based UTM gateway appliance OS that has been in active development since 2002. It is designed to run on commodity x86 hardware and act as the default route between an internal network and the internet, replacing the ISP-provided router as the traffic checkpoint.
The stack integrates: Squid (web cache and proxy), ClamAV (web antivirus), ModSecurity (WAF), StrongSwan (IPsec/IKEv2 VPN), IPRoute2 (QoS and WAN load balancing), NetFilter (stateful firewall), SSL inspection, and URL filtering. All components are configured through a web-based admin interface rather than directly, making the platform accessible to operators without deep Linux expertise while remaining auditable by those who want to inspect the underlying configuration.
The OS has been open-source since its first release — source ships on every installed appliance. It was recently published publicly on GitHub to make the codebase easier to browse and audit.
Target deployments are small to medium networks — SMBs, schools, and branch offices — where a commercial UTM appliance is overkill on budget but the threat surface is the same. Runs on bare metal or common hypervisors (VMware, VirtualBox, KVM, Hyper-V). No vendor lock-in, no subscription, no licence cost.
GitHub: cacheguard/CacheGuard-OS
Description
Firewalls and security groups play a critical role in safeguarding your cloud infrastructure and the data within it, while also blocking harmful activities from accessing your servers or users. Security groups allow for the straightforward establishment of security policies tailored to individual instances, ensuring virtual firewall protection. You can quickly adapt to your security requirements with various hardware-based firewalls and flexible security group options. It’s essential to maintain a robust layer of defense and to configure your firewalls on demand without disrupting your services, providing the control you need. Single-tenant bare metal servers ensure that resources are exclusively reserved for a single customer, enhancing security by running workloads in a segregated environment. However, it’s crucial to recognize that not all compute servers offer the same level of security; therefore, it's vital to ensure that your chosen solution is genuinely single-tenant and dedicated solely to your organization, guaranteeing complete data isolation and peace of mind. Additionally, regularly reviewing and updating your security measures can further enhance the protection of your cloud resources.
API Access
Has API
API Access
Has API
Integrations
Azure Marketplace
Captain Compliance
IBM Verify Trust
PC Matic
Proxmox VE
QOMPLX
SSOReady
VMware ESXi
VirtualBox
Integrations
Azure Marketplace
Captain Compliance
IBM Verify Trust
PC Matic
Proxmox VE
QOMPLX
SSOReady
VMware ESXi
VirtualBox
Pricing Details
$0
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
CacheGuard Technologies
Founded
2025
Country
France
Website
www.cacheguard.com
Vendor Details
Company Name
IBM
Founded
1911
Country
United States
Website
www.ibm.com/cloud/network-security
Product Features
Network Security
Access Control
Analytics / Reporting
Compliance Reporting
Firewalls
Internet Usage Monitoring
Intrusion Detection System
Threat Response
VPN
Vulnerability Scanning
Web Application Firewalls (WAF)
Access Control / Permissions
Alerts / Notifications
Automate and Orchestrate Security
Automated Attack Detection
DDoS Protection
Dashboard
IP Reputation Checking
Managed Rules
OWASP Protection
Reporting / Analytics
Secure App Delivery
Server Cloaking
Virtual Patching
Zero-Day Attack Prevention
Product Features
Network Security
Access Control
Analytics / Reporting
Compliance Reporting
Firewalls
Internet Usage Monitoring
Intrusion Detection System
Threat Response
VPN
Vulnerability Scanning