Cloudflare One vs OpenZiti
Cloudflare One
cloudflare.comOpenZiti
netfoundry.ioSide by side
| Figure | Cloudflare One | OpenZiti |
|---|---|---|
| Price from | $7/mo | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 3 | 3 |
| Spec score · Security Service Edge Software | 8.7 (#4) | 7.7 (#15) |
| Compliance | Cloudflare's SOC 2 Type II report covers security, confidentiality, and availability controls and all Cloudflare plans are in scope. | NetFoundry Self-Hosted offers FIPS-compliant cryptography and controls pre-mapped to NIST 800-53 and 800-207; NetFoundry-Hosted lists a SOC 2 Type II report. |
| Headquarters | San Francisco, CA | Charlotte, North Carolina, United States |
| Support | Free plans include community forums and Discord support, pay-as-you-go plans include chat and ticket support, and contract plans include phone, chat, and ticket support. | The self-managed OpenZiti tier provides community support through Discourse, GitHub, and documentation, while NetFoundry Self-Hosted includes 24×7 enterprise support. |
Plans
Cloudflare One
- Free PlanFree
- Pay-as-you-go$7 a month
- Contract PlanPrice not published
OpenZiti
- OpenZitiFree
- NetFoundry-HostedPriced on request
- NetFoundry Self-HostedPriced on request
In their own words
Cloudflare One
Cloudflare One is a SASE platform for connecting and protecting an organization's workforce, AI agents, and infrastructure. It brings together zero trust access, secure web gateway, CASB, network-as-a-service, firewall-as-a-service, remote browser isolation, DLP, email security, and digital experience monitoring. Internal application access uses identity-first controls and granular rules. DNS and HTTP filtering protects remote users and branch offices, while a private global backbone connects offices, clouds, and datacenters. AI controls provide visibility into generative AI usage, identify unsanctioned tools, secure MCP-server connections, and can assess prompt intent to block sensitive data leakage. Email protection addresses phishing, impersonation, malware, and business email compromise. Management is centralized through a dashboard, API, and Terraform provider. The free plan covers up to 50 users and up to 24 hours of standard log retention, with community forums and Discord support. Pay-as-you-go is $7/user/month, with no user limit and up to 30 days of standard log retention. Contract pricing is not listed.