Skip to content
SPECIFICTION
Get listed

NetFoundry

netfoundry.io

Free plan WebWindowsmacOSLinuxiOSAndroid
Visit netfoundry.io
Spec score 8.8 #16 of 94 in Business VPN Software

What it is

NetFoundry provides identity-first zero-trust connectivity for AI, API, and machine-to-machine workloads. Workloads connect outbound without open or listening ports, with access governed by identity and least-privilege policy. Before a connection is established, both endpoints authenticate using mutual X.509 identity. The platform records authentication, authorization, and policy changes, can stream audit events, and exports connection, throughput, and health metrics. It supports external identity providers and documents SCIM for automated identity management; listed SDKs cover Go, C, .NET, Java, Node, and Swift. NetFoundry Cloud offers dedicated controllers and routers deployable on AWS, Azure, Google Cloud, and Oracle Cloud. Self-Hosted can run on customer-owned infrastructure, including on-premises and air-gapped environments. The company describes use cases including governing AI agent, model, and tool access, microsegmenting workloads, and connecting IT, OT, IoT, and APIs. Both listed deployment plans include 24×7 support. Select and Premium support list platform availability SLAs of 99.5% and 99.95%, respectively. Pricing is on request. The documentation lists SOC 2 Type II reports and describes HIPAA eligibility, GDPR and CCPA data processing agreements, and framework guidance.

Spec sheet

What it does
NetFoundry provides identity-based zero-trust connectivity for workloads, APIs, applications, devices and sites, designed to work without VPNs or open inbound ports.Read 21 Oct 2026 · netfoundry.io
Purpose
NetFoundry provides identity-first zero-trust connectivity for AI, API, and machine-to-machine workloads.Read 7 Oct 2026 · netfoundry.io
Intended users
The company describes use cases including governing AI agent, model, and tool access; microsegmenting workloads; and connecting IT, OT, IoT, and APIs.Read 7 Oct 2026 · netfoundry.io
Platforms
Tunnelers are available for Windows, macOS, Linux, Android, and iOS.Read 7 Oct 2026 · netfoundry.io
Integrations
The platform supports connections to external identity providers and documents SCIM for automated identity management.Read 7 Oct 2026 · netfoundry.io
Compliance
The documentation page lists SOC 2 Type II reports and describes HIPAA eligibility, GDPR and CCPA data processing agreements, and framework guidance.Read 7 Oct 2026 · netfoundry.io
Support
The commercial self-hosted offer includes 24×7 enterprise support, while OpenZiti lists community support through Discourse, GitHub and documentation.Read 21 Oct 2026 · netfoundry.io
Headquarters
Charlotte, North Carolina, United StatesRead 28 Sep 2026 · netfoundry.io
Founded
G2 lists NetFoundry's founding year as 2019.Read 21 Oct 2026 · g2.com
Air-gapped deployment limit
The deployment guide says offline installations currently support single-node K3s, with full Kubernetes support described as forthcoming.Read 21 Oct 2026 · netfoundry.io
API conventions
The documented REST APIs use JSON request and response bodies and authentication tokens delegated to an identity provider.Read 21 Oct 2026 · netfoundry.io
Audit and visibility
NetFoundry records authentication, authorization, and policy changes and can stream audit events and export connection, throughput, and health metrics.Read 7 Oct 2026 · netfoundry.io
Changelog
The self-hosted changelog lists version 2.0.1 dated October 2, 2026, with fixes including restored monitoring panels and improved handling of credentials in logs and support bundles.Read 21 Oct 2026 · netfoundry.io
Cloud deployment
NetFoundry Cloud describes dedicated controllers and routers deployable on AWS, Azure, Google Cloud, and Oracle Cloud.Read 7 Oct 2026 · netfoundry.io
Cloud platforms
The hosted fabric page lists points of presence across AWS, Azure, Google Cloud and Oracle Cloud Infrastructure.Read 21 Oct 2026 · netfoundry.io
Commercial license
NetFoundry describes its self-hosted management suite as licensed; the Apache 2.0 license claim applies to the OpenZiti project.Read 21 Oct 2026 · netfoundry.io
Company headquarters
G2 lists NetFoundry's headquarters as Charlotte, North Carolina, United States.Read 21 Oct 2026 · g2.com
Company legal name
The Google Play listing identifies the developer as NetFoundry Inc.Read 21 Oct 2026 · play.google.com
Connection security
OpenZiti assigns identities to users, devices, services and workloads and authorizes connections before creating a network path.Read 21 Oct 2026 · netfoundry.io
Connectivity model
Workloads connect outbound and have no open or listening ports, with access controlled by identity and least-privilege policy.Read 7 Oct 2026 · netfoundry.io
Cryptography
The self-hosted commercial package advertises FIPS-compliant cryptography and post-quantum-ready encryption.Read 21 Oct 2026 · netfoundry.io
Developer API
The NetFoundry REST API covers console operations such as creating networks, managing identities and services, configuring policies and automating workflows.Read 21 Oct 2026 · netfoundry.io
Documentation depth
The documentation includes API guides and references, integration instructions, identity and policy guides, deployment planning, upgrades and troubleshooting.Read 21 Oct 2026 · netfoundry.io
Encrypted mesh
OpenZiti uses edge routers in an encrypted mesh with smart routing and automatic failover.Read 21 Oct 2026 · netfoundry.io
Encryption
The platform authenticates both endpoints with mutual X.509 identity before a connection is established.Read 7 Oct 2026 · netfoundry.io
Endpoint platforms
The downloads page lists endpoint clients or tunnelers for Windows, macOS, Linux, iOS and Android, plus Docker-based tunneling.Read 21 Oct 2026 · netfoundry.io
Funding and investors
Crunchbase lists three investors, including Cisco Investments and SYN Ventures, and identifies the latest round as Series A; its displayed page obscures the round date and total funding amount.Read 21 Oct 2026 · crunchbase.com
Hosted deployment
NetFoundry operates a dedicated OpenZiti fabric and manages its PKI, upgrades, backups and monitoring for hosted customers.Read 21 Oct 2026 · netfoundry.io
Identity integrations
The console supports SCIM provisioning integrations with Okta, Microsoft Entra ID and Google Workspace.Read 21 Oct 2026 · netfoundry.io
Limit: leadership criticism
One G2 reviewer criticized company leadership and vision; this is an individual company-workplace complaint rather than a recurring product complaint in the displayed reviews.Read 21 Oct 2026 · g2.com
Mobile app function
Ziti Mobile Edge connects apps to services on Ziti networks and uses Android's VPN service to intercept traffic directed to those services.Read 21 Oct 2026 · play.google.com
No inbound exposure
OpenZiti endpoints dial outbound and services can operate without inbound ports or public IP addresses.Read 21 Oct 2026 · netfoundry.io
Notable limit
NetFoundry says some support packages are not available in all regions and advises customers to check with a representative.Read 7 Oct 2026 · support.netfoundry.io
Notable news: AI gateways
On June 2, 2026, NetFoundry announced zero-trust MCP and LLM gateways as an expansion of its AI Enclave solution.Read 21 Oct 2026 · netfoundry.io
Open-source deployment
OpenZiti can be self-hosted and self-managed at no license cost under Apache 2.0.Read 21 Oct 2026 · netfoundry.io
Praise: setup and connectivity
G2 reviewers praise secure connectivity for distributed teams, ease of setup and reduced reliance on traditional VPNs.Read 21 Oct 2026 · g2.com
Pricing availability
The hosted and commercial self-hosted pages direct buyers to contact NetFoundry and do not show numeric prices.Read 21 Oct 2026 · netfoundry.io
Rating on G2
4.0 out of 5 from 8 reviewsRead 21 Oct 2026 · g2.com
Rating on Gartner Peer Insights
4.6 out of 5 from 7 reviewsRead 21 Oct 2026 · gartner.com
Rating on Google Play
5.0 out of 5 from 23 reviewsRead 21 Oct 2026 · play.google.com
SCIM lifecycle
SCIM integrations can create, update and deprovision network identities based on identity-provider group membership and lifecycle changes.Read 21 Oct 2026 · netfoundry.io
SDKs
OpenZiti offers seven language SDKs for embedding secure connectivity into applications.Read 21 Oct 2026 · netfoundry.io
Security and compliance
NetFoundry states that its hosted service has a SOC 2 Type II report and provides pre-mapped evidence to support authorization work.Read 21 Oct 2026 · netfoundry.io
Self-hosted deployment
The commercial self-hosted option provides a licensed management suite for operating an OpenZiti fabric on infrastructure owned by the customer.Read 21 Oct 2026 · netfoundry.io
Self-hosting
NetFoundry Self-Hosted can run on infrastructure the customer owns, including on-premises and air-gapped environments.Read 7 Oct 2026 · netfoundry.io
System requirements
The self-hosted quickstart calls for 4 CPUs, 16 GB RAM and 50 GB storage, with Ubuntu 22.04 or 24.04 listed for air-gapped deployments.Read 21 Oct 2026 · netfoundry.io
Tunnelers
OpenZiti provides tunnelers for applications that cannot be modified to embed an SDK.Read 21 Oct 2026 · netfoundry.io

Plans and prices

OpenZiti Free Self-hosted and self-managed · Apache 2.0 · community support Read 21 Oct 2026 · netfoundry.io
NetFoundry Cloud Priced on request Dedicated network · managed infrastructure · uptime SLA · 24×7 support Read 7 Oct 2026 · netfoundry.io
NetFoundry-Hosted Priced on request Dedicated OpenZiti fabric · managed PKI, upgrades, backups and monitoring · SLA up to 99.95% Read 21 Oct 2026 · netfoundry.io
NetFoundry Self-Hosted Priced on request Customer-managed infrastructure · on-premises, air-gapped, or cloud deployment · 24×7 support Read 7 Oct 2026 · netfoundry.io
NetFoundry Self-Hosted Priced on request Licensed management suite · customer-owned infrastructure · 24×7 enterprise support Read 21 Oct 2026 · netfoundry.io

Every NetFoundry plan and price →

Strong points and limits

Strong points

  • Outbound connections avoid open or listening ports.
  • Mutual X.509 identity authenticates both endpoints.
  • Audit events and connection metrics can be exported.
  • Cloud and self-hosted deployment options are listed.

Limits

  • Pricing is available on request.
  • Some support packages are not available in all regions.
  • Support SLAs differ by Select and Premium package.

Who it suits

NetFoundry is intended for organizations governing access among AI agents, models, tools, APIs, and other workloads. Its Cloud and Self-Hosted options address managed and customer-owned infrastructure, including air-gapped environments.

Verdict

NetFoundry specifies identity-based access controls, audit capabilities, and managed or customer-run deployment choices. Pricing requires a request, and support package availability may vary by region.

Where Specifiction places it

Alternatives to NetFoundryAll alternatives →