GoodAccess vs NetFoundry
GoodAccess
goodaccess.comNetFoundry
netfoundry.ioSide by side
| Figure | GoodAccess | NetFoundry |
|---|---|---|
| Price from | $9/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 4 | 5 |
| Spec score · Business VPN Software | 9.4 (#4) | 8.8 (#16) |
| Headquarters | Ústí nad Labem, Czech Republic | Charlotte, North Carolina, United States |
| Security integrations | Integrations include Microsoft Entra ID, Okta, Google Workspace, AWS, Azure, Sentinel, Splunk, and CrowdStrike. | The platform supports connections to external identity providers and documents SCIM for automated identity management. |
Plans
GoodAccess
- StarterFree
- Essential$9 a month
- Premium$14 a month
- EnterprisePriced on request
NetFoundry
- OpenZitiFree
- NetFoundry CloudPriced on request
- NetFoundry-HostedPriced on request
- NetFoundry Self-HostedPriced on request
- NetFoundry Self-HostedPriced on request
In their own words
GoodAccess
GoodAccess combines a cloud business VPN, secure web gateway, and Zero Trust network access in one platform for small and midsize businesses. Its Starter plan provides secure internet access and online threat protection for business teams. Administrators can centrally manage accounts, protected systems, policies, network activity, and security status. Controls include MFA, SSO, device posture checks, access rules, IP restrictions, and network encryption; users can connect up to three devices simultaneously. VPN tunnels use IKEv2/IPSec and OpenVPN, and teams can choose among more than 35 cloud gateway locations. The service supports Windows, macOS, Linux, iOS, Android, ChromeOS, and web access. Identity-provider integrations include Microsoft Entra ID, Okta, Google Workspace, AWS, Azure, Sentinel, Splunk, and CrowdStrike, with SSO and SCIM provisioning. GoodAccess states that data transfer through its Zero Trust Network is unlimited. The free Starter plan is available, paid pricing starts at $7/user/mo with annual billing, and a 14-day trial is offered. Annual billing saves 20 percent.
NetFoundry
NetFoundry provides identity-first zero-trust connectivity for AI, API, and machine-to-machine workloads. Workloads connect outbound without open or listening ports, with access governed by identity and least-privilege policy. Before a connection is established, both endpoints authenticate using mutual X.509 identity. The platform records authentication, authorization, and policy changes, can stream audit events, and exports connection, throughput, and health metrics. It supports external identity providers and documents SCIM for automated identity management; listed SDKs cover Go, C, .NET, Java, Node, and Swift. NetFoundry Cloud offers dedicated controllers and routers deployable on AWS, Azure, Google Cloud, and Oracle Cloud. Self-Hosted can run on customer-owned infrastructure, including on-premises and air-gapped environments. The company describes use cases including governing AI agent, model, and tool access, microsegmenting workloads, and connecting IT, OT, IoT, and APIs. Both listed deployment plans include 24×7 support. Select and Premium support list platform availability SLAs of 99.5% and 99.95%, respectively. Pricing is on request. The documentation lists SOC 2 Type II reports and describes HIPAA eligibility, GDPR and CCPA data processing agreements, and framework guidance.