Pangolin Client vs SEPass

Pangolin is a fully open‑source, zero‑trust connectivity platform that provides encrypted, least‑privileged access to private applications and infrastructure without exposing public IP addresses or opening inbound ports. It works across on‑premise networks, cloud environments, and remote sites, eliminating the complexity and risk of traditional VPNs. Pangolin brings identity to the access layer, allowing you to control access to specific applications, services, or network ranges instead of entire networks. Users authenticate through trusted identity providers and can only reach the resources you explicitly allow, applying Zero Trust principles end‑to‑end. With lightweight site connectors, you can drop Pangolin into any network and instantly make hosts or entire network ranges securely accessible. Add as many networks as you need and connect to multiple sites at the same time, even behind restrictive firewalls or NAT. Pangolin’s internal DNS lets you assign friendly names to resources, so users never have to remember IP addresses. Users can access private web applications through browser‑based, identity‑aware reverse proxies with automatic SSL, routing, and health checks—no client required. For deeper access, Pangolin clients provide fast, reliable connections to SSH, databases, RDP, and private services. Pangolin can be fully self‑hosted for complete control, or you can use Pangolin Cloud for the quickest and easiest setup. With strong security, high performance, and minimal operational overhead, access is fully auditable, MFA can be enforced per resource, and applications require zero code or configuration changes.

SEPass is intended to let a user do three things: 1. Generate a GPG keypair inside your device's Secure Enclave. The private key is created in the enclave and can never leave the device. SE Pass exports the matching GPG public key for you to add to your password store as an additional encryption key. 2. Sync your password store via git to your device. You can clone and refresh over HTTPS (public or token) or SSH (with a separate enclave key for ssh authentication). 3. Browse the password tree and decrypt passwords on demand. Decryption runs in the Secure Enclave, gated by biometrics (Face ID or Touch ID). The clipboard then clears itself automatically after 45 seconds. SE Pass has no account, sends nothing to us (Modiot Labs), and uses no analytics or tracking. It talks only to the git server you configure. It’s intended to be a relatively focused app to enable access to your existing password store on your portable device.