Pangolin serves as an open-source platform designed for identity-aware tunneled reverse-proxying, which allows users to securely expose applications from any location without the need to open inbound ports or set up a conventional VPN. It employs a distributed system consisting of globally positioned nodes that facilitate traffic routing through encrypted WireGuard tunnels, making it possible for devices behind NATs or firewalls to publicly host applications via a centralized dashboard. This unified dashboard enables users to manage various sites and resources throughout their infrastructure while also allowing for the definition of detailed access-control rules, including options such as SSO, OIDC, PINs, geolocation, and IP restrictions, along with monitoring real-time health and usage statistics. The platform accommodates both self-hosting options, available in Community or Enterprise editions, and a managed cloud service, functioning by deploying a lightweight agent on each site while the central control server manages ingress, traffic routing, authentication, and failover processes. Additionally, Pangolin’s architecture fosters a secure and efficient environment for developers and IT teams aiming to streamline application exposure and maintain robust security protocols.