OpenZiti vs Prisma Access
OpenZiti
netfoundry.ioPrisma Access
paloaltonetworks.comSide by side
| Figure | OpenZiti | Prisma Access |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 3 | 2 |
| Spec score · Security Service Edge Software | 7.7 (#15) | 8.3 (#9) |
| Headquarters | Charlotte, North Carolina, United States | Santa Clara, California, United States |
| What it does | OpenZiti is an open-source Zero Trust networking platform that makes services invisible and authorizes connections by identity. | Prisma Access is a cloud-delivered security service for protecting users, applications, devices and data across remote and branch locations. |
Plans
OpenZiti
- OpenZitiFree
- NetFoundry-HostedPriced on request
- NetFoundry Self-HostedPriced on request
In their own words
Prisma Access
Prisma Access is a cloud-delivered security solution for users, applications, devices, and data across office, branch, and remote locations. It provides least-privileged application access and is designed to reduce reliance on traditional VPNs. Secure Web Gateway protection addresses web threats, while CASB capabilities provide SaaS visibility, inline and API-based controls, and contextual policies for sensitive data. Firewall as a Service adds threat prevention, application control, and Zero Trust policies. Prisma Agent connects users to organizational networks, SaaS applications, and the internet while extending security policies to their devices. The agent supports Windows, macOS, Linux, iOS, and Android, with requirements varying by platform. Authentication integrations include Cloud Identity Engine, SAML, TACACS+, RADIUS, LDAP, Kerberos, MFA, and local database authentication. Administrators use Panorama or Strata Cloud Manager, but must select the interface before setup because it cannot later be changed. Insights APIs monitor deployment health and performance. The service is paid, has no free plan, and pricing is on request.