compare
Defguard vs Headscale
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Defguard | Headscale |
|---|---|---|
| Language | Rust | Go |
| Licence | Other | BSD-3-Clause |
| Stars | 2.9k | 44k |
| Latest | v2.1.1 | v0.29.4 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 31 days between releases | about 20 days between releases |
| Active contributors | 7 commit authors on the default branch in the last 90 days | 20 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Tailscale. Alternatives to Tailscale →
PartialDefguardWireGuard VPN with MFA and a built-in OpenID provider; clients connect through gateways rather than a mesh.
PartialHeadscaleA self-hosted Tailscale control server, used with the official Tailscale clients, for a single tailnet.
Defguard
- v2.1.12026-10-05This is a patch release for v2.1 that includes the following fixes:
- v2.2.0-alpha12026-09-21> [!WARNING]pre-release
- v2.1.02026-09-04🎉 Welcome to Defguard 2.1 🎉
- v2.1.0-beta12026-08-13🎉 Welcome to Defguard 2.1 Beta 1 🎉pre-release
- v2.0.32026-08-04This is a patch for the major 2.0 release.
Headscale
- v0.29.42026-09-23Minimum supported Tailscale client version: v1.80.0
- v0.29.32026-07-29Minimum supported Tailscale client version: v1.80.0
- v0.29.22026-07-01Fix map generation serializing on the policy lock, so a mass reconnect on autogroup:self, via or relay policies no long…
- v0.29.12026-06-18Minimum supported Tailscale client version: v1.80.0
- v0.29.02026-06-17Minimum supported Tailscale client version: v1.80.0
Defguard
✓ signed The latest release, v2.1.1, carries a signature GitHub verified.
Loading the security report
Headscale
unsigned The latest release, v0.29.4, carries no signature GitHub could verify.
Loading the security report