Defguard vs NetFoundry

Defguard has no write-up on Specifiction yet; its figures are above.

NetFoundry provides identity-first zero-trust connectivity for AI, API, and machine-to-machine workloads. Workloads connect outbound without open or listening ports, with access governed by identity and least-privilege policy. Before a connection is established, both endpoints authenticate using mutual X.509 identity. The platform records authentication, authorization, and policy changes, can stream audit events, and exports connection, throughput, and health metrics. It supports external identity providers and documents SCIM for automated identity management; listed SDKs cover Go, C, .NET, Java, Node, and Swift. NetFoundry Cloud offers dedicated controllers and routers deployable on AWS, Azure, Google Cloud, and Oracle Cloud. Self-Hosted can run on customer-owned infrastructure, including on-premises and air-gapped environments. The company describes use cases including governing AI agent, model, and tool access, microsegmenting workloads, and connecting IT, OT, IoT, and APIs. Both listed deployment plans include 24×7 support. Select and Premium support list platform availability SLAs of 99.5% and 99.95%, respectively. Pricing is on request. The documentation lists SOC 2 Type II reports and describes HIPAA eligibility, GDPR and CCPA data processing agreements, and framework guidance.