Ivanti Neurons for Zero Trust Access

Overview

Ivanti Neurons for Zero Trust Access controls access to private applications using user identity and device condition. It is aimed at organizations securing employees, contractors, and partners who connect from different locations. Its fine-grained access decisions are a strong fit for that job, but the gateway architecture and custom pricing call for planning before rollout.

Key features

Policies continually check identity and device health, then restrict each user to authorized resources. Device risk scoring considers running processes and applications; administrators can quarantine unpatched devices running high-risk software or respond to user risk with step-up authentication and access restrictions. This gives security teams ways to adapt access as endpoint conditions change, though it also makes policy design and response choices important.

Device checks can evaluate antivirus, firewall, location, disk encryption, operating system version, missing patches, and other conditions. Authentication supports local login, SAML through Azure AD or a custom service, and TOTP. SAML can serve as a primary MFA method and TOTP as a secondary one. The product can publish on-premises applications, web pages, network locations, and SaaS resources such as Microsoft O365 and Salesforce.

Its software-defined perimeter separates control and data planes. Application traffic passes through an nZTA Gateway deployed in a datacenter or virtual private cloud; client endpoints cannot reach the gateway until the Controller authorizes them. Users enroll devices through the Controller, which installs or updates Ivanti Secure Access Client. That architecture provides centralized visibility into private-app access, gateways, users, devices, and activity, but organizations must plan where to run gateways and how enrollment fits their environment.

The broader feature set also covers hybrid discovery and deployment, continuous monitoring, impact analysis, service views, finding correlation, risk prioritization, remediation workflows, external and cloud asset discovery, and API access. Endpoint management capabilities include automated enrollment, policy management, application management, remote wipe, managed app catalog, kiosk mode, and third-party patching. Access controls include wired, wireless, VPN, and 802.1X support. Passwordless options include device identity, certificates, FIDO2 keys, passkeys, QR codes, push notifications, one-time passcodes, and biometrics. This breadth may suit organizations consolidating endpoint and access controls, although it extends beyond the product’s private-application access purpose.

Pricing

Ivanti Neurons for Zero Trust Access is paid software with custom pricing. The named-user license is delivered as SaaS, and pricing is available by contacting sales. There is no free plan, so organizations must obtain a quote to assess cost against their user count and deployment needs.

Platforms

Supported platforms include Android, iOS, Linux, macOS, self-hosted environments, web, and Windows. The product’s listed operating-system coverage also includes ChromeOS and iPadOS, alongside Windows, macOS, Linux, iOS, and Android. Gateway deployment is available in a datacenter or virtual private cloud.

Who it's for

This is best suited to organizations that need to protect private applications for employees, contractors, and partners across locations, and want access decisions to account for device posture as well as identity. It is less compelling for buyers seeking a low-friction, transparently priced service without gateway deployment planning.

Pros and cons

Pros: Continuous identity and device checks can apply least-privilege access, with risk-based quarantine, step-up authentication, or restrictions.

Pros: Broad device checks and support for on-premises, network, web, and SaaS applications cover varied access environments.

Pros: Centralized visibility and remediation options give administrators a view across gateways, users, devices, and activity.

Cons: Traffic must pass through an organization-deployed nZTA Gateway, adding deployment and enrollment considerations.

Cons: Custom pricing and no free plan make cost evaluation dependent on a sales quote.

Alternatives

For application security posture management rather than private-application access, compare OWASP DefectDojo, which has a free, open-source Community Edition, or Strobes ASPM, whose free plan covers up to 100 assets and 500 tasks per month. Arnica Secrets Security is another freemium option, with a free plan that includes weekly reports and multiple code and secrets scans.

OX Security offers paid code-security plans spanning SAST, SCA, secrets and PII, SBOM, infrastructure-as-code, CI/CD, container scanning, and IDE and CLI tools. SecurStack has a free plan with 500 scan credits per month for three users and ten projects. Conviso Platform offers a free tier capped at five contributing developers, five assets, ten users, and two integrations.

Phoenix Security has a free plan for up to 1,000 assets, two premium users plus guests, and dashboard reporting. apPosture API Security is a paid alternative with an Essentials plan covering SAST, SCA, secrets, infrastructure-as-code, and containers.

For adjacent categories, browse Application Security Posture Management Software, Network Access Control Software, Security Ratings Software, Application Dependency Mapping Software, Vulnerability Management Software, and Attack Surface Management Software.

Verdict

Choose Ivanti Neurons for Zero Trust Access if your organization needs identity- and device-aware controls for private applications, backed by centralized visibility and risk-driven responses. Look elsewhere if gateway deployment planning or quote-based pricing is a poor fit for your requirements.