Alternatives to SoftEther VPN
SoftEther VPN ranks #23 in Identity & Access Management with a BenchRank score of 27.4/100. These are the 32 other identity & access management tools we rank, best first. Rank numbers show each tool's position in the full Identity & Access Management ranking.
Ranked 1
75.9 — BenchRank score out of 100Ory
Ory · API-first identity and access management, self-hosted or managed
Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Ranked 2
73.8 — BenchRank score out of 100Logto
Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy
Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Ranked 3
73.1 — BenchRank score out of 100Hexclave
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.
Ranked 4
70.7 — BenchRank score out of 100Better Auth
Better Auth · TypeScript authentication framework that runs inside your own app
Best for: TypeScript teams who want authentication defined in code rather than in a hosted provider's dashboard
Ranked 5
68.6 — BenchRank score out of 100Hanko
Hanko · Open-source authentication and user management with passkeys
Best for: Developer teams wanting open-source passkey and MFA authentication with EU hosting or self-hosting
Ranked 6
67.3 — BenchRank score out of 100Cerbos
Cerbos · Externalised policy-based authorization for applications, services and AI agents
Best for: Engineering teams moving fine-grained permissions out of application code and into central policy
Ranked 7
59.5 — BenchRank score out of 100Have I Been Pwned
Have I Been Pwned · Data breach search and notification service
Best for: Security teams, developers and MSPs checking whether emails or domains appear in known breaches.
Ranked 8
57.4 — BenchRank score out of 100Vault
HashiCorp Vault · Secrets management and encryption as a service via UI, CLI or HTTP API
Best for: Security and platform teams storing secrets, issuing database credentials and encrypting data
Ranked 9
55.9 — BenchRank score out of 100Authgear
Authgear · Managed CIAM with social login, MFA, passkeys and SAML SSO
Best for: Developer teams adding customer login, MFA and SSO to consumer or B2B apps without per-user pricing.
Ranked 10
54.9 — BenchRank score out of 100NetBird
Netbird · WireGuard-based overlay network with zero trust access control
Best for: IT and engineering teams replacing legacy VPNs with identity-based access across cloud and on-prem
Ranked 11
53.6 — BenchRank score out of 100ZITADEL
Zitadel · Open-source identity infrastructure, self-hosted or cloud
Best for: Developers building multi-tenant apps who want self-hosted or cloud identity infrastructure.
Ranked 12
51.1 — BenchRank score out of 100Pangolin
Pangolin · Open-source zero trust remote access built on WireGuard
Best for: IT/OT, IoT and engineering teams needing identity-based remote access to infrastructure
Ranked 13
48.7 — BenchRank score out of 100SuperTokens
SuperTokens · Open source user authentication, self-hosted or managed
Best for: Development teams wanting self-hosted or managed authentication they can customise and control.
Ranked 14
47.1 — BenchRank score out of 100Clever
Clever · Identity platform for schools covering rostering, single sign-on and MFA
Best for: Schools and districts wanting one rostering and single sign-on integration across classroom apps
Ranked 15
46.5 — BenchRank score out of 100Permify
Permify · Open-source, Zanzibar-inspired fine-grained authorisation service
Best for: Engineering teams that want centralised fine-grained authorisation instead of permissions in app code
Ranked 16
46.4 — BenchRank score out of 100Firezone
FireZone · Open-source zero trust access built on WireGuard
Best for: Teams replacing a VPN with policy-based zero trust access built on WireGuard
Ranked 17
45.9 — BenchRank score out of 100authentik
Authentik · Self-hosted open source identity provider for single sign-on
Best for: Teams that want to self-host single sign-on and keep identity data off third-party services.
Ranked 18
45 — BenchRank score out of 100JumpServer
JumpServer · Open-source privileged access management for SSH, RDP, databases and Kubernetes
Best for: DevOps and IT teams wanting self-hosted privileged access control for SSH, RDP, database and K8s assets
Ranked 19
42.9 — BenchRank score out of 100Keycloak
Keycloak · Open source identity and access management with single sign-on
Best for: Teams self-hosting single sign-on and user management for their own applications and services.
Ranked 20
41 — BenchRank score out of 100Defguard
Defguard · Self-hosted WireGuard VPN with connection-level MFA and identity management
Best for: Teams self-hosting a WireGuard VPN that needs connection-level MFA and SSO, LDAP or AD integration.
Ranked 21
38.9 — BenchRank score out of 100OpenVPN
OpenVPN · Self-hosted or cloud-delivered zero trust VPN for business remote access
Best for: Businesses that want a self-hosted remote-access VPN priced per simultaneous connection
Ranked 22
35.7 — BenchRank score out of 100Cisco Umbrella
Cisco Umbrella · Cloud-delivered DNS-layer security for enterprise networks
Best for: Enterprises wanting DNS-layer filtering that extends into a wider cloud security service edge
Ranked 24
26.4 — BenchRank score out of 100LogMeIn Hamachi
LogMeIn Hamachi · Hosted VPN for LAN-like networks across distributed machines
Best for: Small teams and gamers needing LAN-like access between scattered machines without firewall changes
Ranked 25
25.5 — BenchRank score out of 100MobaXterm
MobaXterm · Windows terminal with an embedded X server and tabbed SSH client
Best for: Windows users needing SSH, RDP, VNC and an X server for remote Unix work in one application.
Ranked 26
24.7 — BenchRank score out of 100Radmin VPN
Radmin VPN · Free virtual LAN for connecting computers behind firewalls
Best for: Distributed teams, remote workers and LAN gamers linking Windows PCs that sit behind firewalls
Ranked 27
23.4 — BenchRank score out of 100Berbix
Berbix · GavangTV phát bóng đá trực tuyến hôm nay, xem trực tiếp bóng đá Gà Vàng TV tốc độ cao, không quảng cáo ở các giải đấu hàng đầu cùng BLV chất lượng.
Best for:
Ranked 28
22.5 — BenchRank score out of 100Werbot
Werbot · Single sign-on for sharing and auditing server access
Best for: Teams sharing SSH access to dedicated, VPS or cloud servers who need audited, limited access
Ranked 29
20.5 — BenchRank score out of 100mRemoteNG
mRemoteNG · Open-source tabbed remote connections manager for Windows
Best for: Windows admins who need one tabbed manager for RDP, VNC, SSH and HTTP/S sessions
Ranked 30
15.7 — BenchRank score out of 100OpenSSH
OpenSSH · SSH suite for encrypted remote login, file transfer and tunnelling
Best for: Administrators needing encrypted remote login, file transfer and tunnelling over SSH
Ranked 31
15 — BenchRank score out of 100FreeOTP
FreeOTP · Two-factor authentication app built on the HOTP and TOTP standards
Best for: Teams that already run a HOTP/TOTP server and need a free two-factor token app for staff
Ranked 32
14.5 — BenchRank score out of 100WireGuard
WireGuard · VPN tunnel built on public-key peer configuration over UDP
Best for: Sysadmins and developers who need encrypted IP tunnels between servers, containers and devices.
Ranked 33
12.7 — BenchRank score out of 100Warrant
Warrant · Decommissioned authorisation service, now WorkOS FGA
Best for: Nobody new — existing Warrant users who need to migrate to WorkOS FGA.






















