NetFoundry vs OpenZiti
NetFoundry
netfoundry.ioOpenZiti
netfoundry.ioSide by side
| Figure | NetFoundry | OpenZiti |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 3 |
| Spec score · Security Service Edge Software | 8.5 (#8) | 7.7 (#15) |
| Compliance | The documentation page lists SOC 2 Type II reports and describes HIPAA eligibility, GDPR and CCPA data processing agreements, and framework guidance. | NetFoundry Self-Hosted offers FIPS-compliant cryptography and controls pre-mapped to NIST 800-53 and 800-207; NetFoundry-Hosted lists a SOC 2 Type II report. |
| Headquarters | Charlotte, North Carolina, United States | Charlotte, North Carolina, United States |
| Intended users | The company describes use cases including governing AI agent, model, and tool access; microsegmenting workloads; and connecting IT, OT, IoT, and APIs. | The page presents OpenZiti for teams securing AI agents and APIs, replacing VPNs, connecting sites, and reaching OT and IoT devices. |
| Support | The commercial self-hosted offer includes 24×7 enterprise support, while OpenZiti lists community support through Discourse, GitHub and documentation. | The self-managed OpenZiti tier provides community support through Discourse, GitHub, and documentation, while NetFoundry Self-Hosted includes 24×7 enterprise support. |
| What it does | NetFoundry provides identity-based zero-trust connectivity for workloads, APIs, applications, devices and sites, designed to work without VPNs or open inbound ports. | OpenZiti is an open-source Zero Trust networking platform that makes services invisible and authorizes connections by identity. |
Plans
NetFoundry
- OpenZitiFree
- NetFoundry CloudPriced on request
- NetFoundry-HostedPriced on request
- NetFoundry Self-HostedPriced on request
- NetFoundry Self-HostedPriced on request
OpenZiti
- OpenZitiFree
- NetFoundry-HostedPriced on request
- NetFoundry Self-HostedPriced on request
In their own words
NetFoundry
NetFoundry provides identity-first zero-trust connectivity for AI, API, and machine-to-machine workloads. Workloads connect outbound without open or listening ports, with access governed by identity and least-privilege policy. Before a connection is established, both endpoints authenticate using mutual X.509 identity. The platform records authentication, authorization, and policy changes, can stream audit events, and exports connection, throughput, and health metrics. It supports external identity providers and documents SCIM for automated identity management; listed SDKs cover Go, C, .NET, Java, Node, and Swift. NetFoundry Cloud offers dedicated controllers and routers deployable on AWS, Azure, Google Cloud, and Oracle Cloud. Self-Hosted can run on customer-owned infrastructure, including on-premises and air-gapped environments. The company describes use cases including governing AI agent, model, and tool access, microsegmenting workloads, and connecting IT, OT, IoT, and APIs. Both listed deployment plans include 24×7 support. Select and Premium support list platform availability SLAs of 99.5% and 99.95%, respectively. Pricing is on request. The documentation lists SOC 2 Type II reports and describes HIPAA eligibility, GDPR and CCPA data processing agreements, and framework guidance.