Bowtie Private Access
bowtie.security
What it is
Bowtie Private Access creates encrypted connections from devices to private resources without routing traffic through intermediary networks. Its Zero Trust policies grant authenticated access according to user or device characteristics. Bowtie Internet Access adds web filtering enforced on the device rather than through a centralized gateway, while its policy engine can unify overlapping networks and segment access. The product uses WireGuard encryption; Bowtie says keys are generated and stored in the customer's environment and traffic does not pass through its cloud. Basic is free for up to 3 users, 2 devices per user, and 2 controllers. Essentials costs $11 a month per user and supports up to 1000 users, 3 devices per user, and 4 controllers. Enterprise pricing is custom. SSO options include Okta and Entra ID, with configurations also described for GitHub, GitLab, SAML, AWS Identity Center, and Google IDP. Essentials includes API access and a Terraform provider; Enterprise adds MDM deployment and SIEM integration. Bowtie supports iOS, Linux, macOS, web, and Windows, with client downloads for Mac, Windows, and Linux.
Spec sheet
- Product
- Bowtie Private Access establishes encrypted connections directly from devices to private resources, without routing traffic through middleman networks.Read 4 Oct 2026 · bowtie.security
- Support
- Essentials includes email and site chat support plus access to a public Slack community; Enterprise includes priority support with an SLA and shared Slack channel.Read 4 Oct 2026 · bowtie.security
- Headquarters
- Santa Clara, California, United StatesRead 28 Sep 2026 · bowtie.security
- Founded
- 2022Read 28 Sep 2026 · bowtie.security
- Automation
- Essentials includes API access and a Terraform provider for automating deployment and integrating with existing tooling.Read 4 Oct 2026 · bowtie.security
- Client platforms
- Bowtie provides client downloads for Mac, Windows, and Linux.Read 4 Oct 2026 · bowtie.security
- Data and keys
- Bowtie says encryption keys are generated and stored in the customer's environment, and traffic does not pass through Bowtie's cloud.Read 4 Oct 2026 · bowtie.security
- Encryption
- The product comparison identifies WireGuard as Bowtie's encryption technology.Read 4 Oct 2026 · bowtie.security
- Enterprise integrations
- Enterprise includes MDM deployment via providers such as Jamf and Kandji, plus SIEM event logging.Read 4 Oct 2026 · bowtie.security
- Internet Access
- Bowtie Internet Access provides web filtering with policy enforcement on the device rather than through a centralized gateway.Read 4 Oct 2026 · bowtie.security
- Limits
- The Basic plan is limited to 3 users, 2 devices per user, and 2 controllers; Essentials is limited to 1000 users, 3 devices per user, and 4 controllers.Read 4 Oct 2026 · bowtie.security
- Network segmentation
- Bowtie says it can unify overlapping networks and segment them through its policy engine.Read 4 Oct 2026 · bowtie.security
- SSO integrations
- The pricing page names Okta and Entra ID as SSO providers, and the SSO documentation describes GitHub, GitLab, SAML, AWS Identity Center, and Google IDP configurations.Read 4 Oct 2026 · bowtie.security
- Zero Trust
- Its access policies allow authenticated access to private resources based on user or device characteristics.Read 4 Oct 2026 · bowtie.security
Plans and prices
Strong points and limits
Strong points
- Encrypted connections use WireGuard
- Keys stay in the customer's environment
- Basic plan includes SSO authentication
- Essentials includes API access and a Terraform provider
- Enterprise includes MDM deployment and SIEM integration
Limits
- Basic is limited to 3 users
- Basic allows 2 devices per user
- Essentials allows 4 controllers
Who it suits
Bowtie suits organizations that need policy-based access to private resources and on-device web filtering. The Basic plan fits deployments within its user, device, and controller limits; larger deployments can consider Essentials or custom-priced Enterprise.
Verdict
Bowtie combines private-resource access with on-device internet filtering and deployment automation on Essentials. Check the plan limits and client-platform downloads against the devices and scale in use.
Where Specifiction places it
- Zero Trust Network Access Software#8 of 428.7