AWS Verified Access vs Forcepoint ZTNA
AWS Verified Access
aws.amazon.com
Forcepoint ZTNA
forcepoint.comSide by side
| Figure | AWS Verified Access | Forcepoint ZTNA |
|---|---|---|
| Price from | $0.20/mo | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | — | Yes |
| Plans published | 3 | 1 |
| Spec score · Zero Trust Network Access Software | 8.8 (#4) | 7.4 (#25) |
| Integrations | AWS IAM Identity Center supports authentication through SAML-based third-party identity providers, and Verified Access can connect directly to custom OpenID Connect-compatible identity providers. | Forcepoint's technology partners page lists AWS, Microsoft, Ping Identity, Okta, VMware, and Splunk among its partners. |
| Purpose | AWS Verified Access provides secure access to corporate applications and resources without a VPN. | Forcepoint ZTNA provides controlled access to private applications from anywhere, across managed and unmanaged devices. |
Plans
AWS Verified Access
- Connectivity ClientFree
- Non-HTTP(S) applications$0.20 a month
- HTTP(S) applications$0.27 a month
In their own words
AWS Verified Access
AWS Verified Access has no write-up on Specifiction yet; its figures are above.
Forcepoint ZTNA
Forcepoint ZTNA provides controlled access to private applications from managed and unmanaged devices, including personal devices and contractor access. Its agentless and agent-based options let users reach internal applications without requiring a VPN service on their device. Administrators can base access policies on user or group, device type or operating system, management status, and location. Agent-based access supports private web applications and non-web protocols, including TCP applications through SmartEdge Agent. The product can proxy private-app traffic and apply inline data loss prevention controls intended to help prevent data leakage and malicious uploads or downloads. Forcepoint cites more than 190 predefined DLP policies and malware scanning for private web apps. Deployment requires a connector in the network hosting internal apps. Agent-based use requires SmartEdge Agent 1.6.1 or newer, and end-user machines must run Windows 10 or newer. Forcepoint says its AWS-based platform provides 99.99% service uptime with no planned downtime. The paid product has pricing on request and no free plan.