<h2 id="vpns-and-network-gateways-that-help-secure-your-cloud">VPNs and network gateways that help secure your cloud</h2>Encrypt, tunnel, and route your network traffic securely using these 1-Click Apps.

OpenVPN Access Server is a self-hosted VPN solution that enables fast, secure remote access with a simple web-based interface. It features end-to-end secure connectivity, granular access control, and Zero Trust capabilities to protect remote users, SaaS apps, and IoT devices.
Access Server includes a built-in local authentication system and support for authentication with Active Directory, PAM, LDAP, RADIUS, SAML, and even a custom Python3 authentication module is possible.
OpenVPN client software runs on Windows, macOS, Linux, Android, iOS, and ChromeOS environments. A user-friendly portal making VPN access and management easy.
Get Technical Support 24/7 and Schedule a Live Demo at <a href="https://openvpn.net" rel="noopener" target="_blank">openvpn.net</a>.

Run your own OpenVPN server with web-based interface.

OpenVPN Access Server

<a href="https://www.utunnel.io/solutions/business-vpn-solution" rel="noopener" target="_blank">UTunnel Access Gateway</a> allows you to run your own ZTNA-based VPN gateway on your DigitalOcean droplet. The Droplet can be of any size based on your requirements. With UTunnel, you can easily <a href="https://www.utunnel.io/integrations/digitalocean-vpn-server" rel="noopener" target="_blank">set up a DigitalOcean VPN server</a> that supports roaming VPN users, site-to-site tunnelling, client device access control, external DNS integration, split tunnelling, and manual VPN connections, all while enforcing zero-trust security principles. 
UTunnel also includes context-aware access policies, identity-based authentication, SSO integration, and multi-factor authentication (MFA), ensuring least-privilege access and secure resource segmentation. For more details, you can check out the <a href="https://www.utunnel.io/utunnel-features-and-benefits" rel="noopener" target="_blank">UTunnel Features</a> page.
UTunnel provides client apps for Windows, macOS, Linux, Android, and iOS, so that you can connect seamlessly to your VPN gateway from all the devices you own. It&#39;s well suited for small-medium businesses and offers monthly billing, no long-term commitments. It also offers a 14-day risk-free trial so that you can test the VPN service before moving on to a paid plan. Your UTunnel access gateway subscription cost is based on the number of users and the chosen plan. You can check <a href="https://www.utunnel.io/vpn-server-pricing-plans" rel="noopener" target="_blank">UTunnel Access Gateway Pricing</a> page for more details on the plans offered.

A robust and user-friendly ZTNA-based Business VPN gateway that seamlessly supports multiple VPN protocols.

UTunnel VPN

KUY.io Konnect™ is a cloud-first VPN access server built on top of the WireGuard® protocol. Built to securely connect your hybrid workforce up to 10x faster,
KUY.io Konnect™ takes care of the management of cryptographic keys, users, devices, as well as the tedious manual setup and configuration of network peers administrators face when deploying KUY.io Konnect™ via the command line.
The modern user interface offers an elegant, and intuitive solution that makes deploying and operating this next-gen VPN technology in your organization painless and quick. With integrations to your email services and synchronization of accounts with LDAP-compatible directories, KUY.io Konnect™ provides enterprise-grade features out-of-the-box.
KUY.io Konnect™ is the ideal solution to provide your employees secure, fast and uncomplicated access to applications and data in the DigitalOcean cloud.

KUY.io Konnect™ is a cloud-first VPN access server built on top of the WireGuard® protocol. The modern user interface offers an elegant and intuitive solution for securing access to your DigitalOcean cloud and internet services. This 1-click marketplace app makes deploying and operating KUY.io Konnect™ VPN access server a breeze.

Konnect VPN Access Server

An on demand, fully configured, ready to use, secure, private, open source VPN.
What&#39;s inside:
<ul>
<li>Pi-hole: network-wide ad blocking</li>
<li>Unbound: validating, recursive, caching DNS resolver</li>
<li>WireGuard: fast, modern, secure VPN tunnel</li>
</ul>
Check out this quick <a href="https://www.youtube.com/watch?v=n-rL02390AI" rel="noopener" target="_blank">video guide</a> on how to create a Pi-hole VPN Droplet.
Provisioning with $4 Droplets is here! Simply select the $4 option via the web UI during creation. If you&#39;re using the API (see below for an example), use the following slug: <code>s-1vcpu-512mb-10gb</code>.

An on demand open source VPN focused on privacy and security

Pi-hole VPN

SPR (Secure Programmable Router) lets users run a hardened, secure, open source VPN.
Run a self-hosted VPN, DNS &amp; other services to filter &amp; redirect traffic, block ads, <a href="https://www.supernetworks.org/pages/blog/first-blog-post" rel="noopener" target="_blank">and more</a>.
<img src="https://www.supernetworks.org/assets/img/screenshot-light.png" alt="SPR Image"/>
Block Ads, filter DNS and keep track of your devices - all with a <a href="https://www.supernetworks.org/pages/docs/apis/overview" rel="noopener" target="_blank">documented API</a> allowing programmatic control of your network.
<img src="https://www.supernetworks.org/pages/assets/images/sprbus-cli-476cc4f905e635d16c3fdcc0041fc30a.gif" alt="SPR API"/>
The droplet will update to the latest stable version of SPR when creating the instance.

<h2 id="easily-add-authentication-and-authorization-features-to-your-applications">Easily add authentication and authorization features to your applications</h2>Simplify access control and authorization for your users and for the apps that your engineering team supports.

With 1Password Business, you can automate many common administrative tasks using the 1Password SCIM bridge. It uses the System for Cross-domain Identity Management (SCIM) protocol to connect 1Password with your existing identity provider, like Azure Active Directory or Okta, so you can:
<ul>
<li>create users and groups (including automated account confirmation),</li>
<li>grant and revoke access to groups,</li>
<li>and suspend deprovisioned users</li>
</ul>
With this 1-Click App, you’ll quickly set up and deploy the SCIM bridge on a cluster in your own environment, so the encryption keys for your account are only available to you and no one else. To set up and deploy the SCIM bridge, you’ll need:
<ul>
<li>administrative access in 1Password Business</li>
<li>this 1-Click App with publicly accessible static LoadBalancer IP address</li>
<li>a DNS record to allow for encrypted (HTTPS) communication to the SCIM bridge</li>
</ul>

Integrate 1Password with your identity provider for automatic provisioning

1Password SCIM bridge

<a rel="noopener" target="_blank" href="https://www.cossacklabs.com/acra/">Acra encryption suite</a> — data protection in distributed applications, web and mobile apps that use PostgreSQL/MySQL RDBMS.
Acra provides selective encryption, multi-layered access control, SQL firewall (SQL injections prevention), database leakage prevention, and intrusion detection capabilities in a convenient, developer-friendly package. See the full list of features in <a rel="noopener" target="_blank" href="https://github.com/cossacklabs/acra">Acra repository</a>.
Acra's cryptographic design ensures that no secret (password, key, etc.) leaked from the application or database will be sufficient for decryption of the protected data chunks that originate from it.
Acra minimises the attack surface, detects unauthorised behaviour, and prevents the leakage, informing operators of the incident underway. Acra provides a solid foundation for encryption-demanding regulations. As an additional configuration for better security, Acra supports client-side encryption (using client-side AcraWriter libraries).
AcraServer is a network service that works as a database proxy: it transparently sits between your application and the database and silently listens to all the traffic coming to and from the database. AcraServer monitors the incoming SQL requests and blocks the unwanted ones using the built-in configurable SQL firewall. On receiving SQL queries, AcraServer parses each query, encrypts the desired values into AcraStructs (special cryptographic containers), and passes the modified queries to the database and the database response – back to the client application.
When the client application wants to read the data, it sends a read query to the database (via AcraServer). Upon retrieving the database response, AcraServer tries to detect AcraStructs, decrypts them, and returns the decrypted data to the application.

Database encryption and intrusion prevention for PgSQL and MySQL (including DigitalOcean-managed Postgres)

Acra

Secure your network with a VPN, protect your database, and more, with this selection of 1-Click Apps.

Focus on building great things, while you use these 1-Click Apps to build your business.

These 1-Click Apps make it simple to deploy and manage your clients' infrastructure. Save time and resources, while reducing headaches and passing the value onto your clients.

Apps for agencies and website development shops

Work more effectively from home or remotely with these 1-Click Apps.

Work more effectively from home or remotely

Stop spending hours editing YAML and Helm charts. Instead, use these popular, preconfigured solutions to add apps to your Kubernetes cluster in minutes instead of days.

1-Click Apps for managing Kubernetes environments

Stay focused on teaching and learning, instead of managing infrastructure. 

1-Click Apps for students and educational institutions

SaaS Add-Ons make your DigitalOcean infrastructure better! Check out the full list of SaaS Add-Ons here!  

New Feature Alert: Introducing Software License Subscriptions on DigitalOcean Marketplace!

We now support Droplet 1-Click updates via API. See documentation for the details

Check out Tabnine, the AI coding assistant that accelerates & simplifies software development.

Find a Solution

Security and VPN

VPNs and network gateways that help secure your cloud

Easily add authentication and authorization features to your applications