OpenZiti

Spec sheet

What it does

OpenZiti is an open-source Zero Trust networking platform that makes services invisible and authorizes connections by identity.Read 7 Oct 2026 · netfoundry.io

Intended users

The page presents OpenZiti for teams securing AI agents and APIs, replacing VPNs, connecting sites, and reaching OT and IoT devices.Read 7 Oct 2026 · netfoundry.io

Security

The page describes certificate-based identities, mutual authentication, identity-based policy, and end-to-end encryption for connections.Read 7 Oct 2026 · netfoundry.io

Compliance

NetFoundry Self-Hosted offers FIPS-compliant cryptography and controls pre-mapped to NIST 800-53 and 800-207; NetFoundry-Hosted lists a SOC 2 Type II report.Read 7 Oct 2026 · netfoundry.io

Support

The self-managed OpenZiti tier provides community support through Discourse, GitHub, and documentation, while NetFoundry Self-Hosted includes 24×7 enterprise support.Read 7 Oct 2026 · netfoundry.io

License

OpenZiti is free and open source under Apache 2.0, with no license cost to run it in production.Read 7 Oct 2026 · netfoundry.io

Headquarters

Charlotte, North Carolina, United StatesRead 28 Sep 2026 · netfoundry.io

App integration

SDKs let developers embed connectivity in Go, C, C#/.NET, Python, Node.js, Java/Kotlin, and Swift applications.Read 7 Oct 2026 · netfoundry.io

Architecture

A controller manages identity, policy, and network state while edge routers carry sessions over an encrypted mesh with smart routing and automatic failover.Read 7 Oct 2026 · netfoundry.io

Ecosystem

The ecosystem includes the zrok secure sharing platform, a visual Ziti Console, and AI gateways for MCP tool servers and LLM providers.Read 7 Oct 2026 · netfoundry.io

Existing applications

Tunnelers connect existing applications without code changes across Linux, Windows, macOS, iOS, and Android.Read 7 Oct 2026 · netfoundry.io

Hosted service limits

NetFoundry-Hosted advertises a contractual uptime SLA of up to 99.95%.Read 7 Oct 2026 · netfoundry.io

Outbound-only access

Clients and services dial outbound only, so they need no inbound listening ports or publicly reachable endpoints.Read 7 Oct 2026 · netfoundry.io

Plans and prices

Every OpenZiti plan and price →

Where Specifiction places it

• Security Service Edge Software#15 of 237.7