Pomerium vs Versa Zero Trust Network Access

Pomerium is an open-source identity-aware proxy for controlling access to internal applications, servers, services, and workloads without requiring VPN client software. It checks identity, device state, and request context before granting access, and authenticates through identity providers that support OpenID Connect. Listed access scenarios include HTTP, MCP, SSH, gRPC, TCP, and UDP; supported app protocols also include HTTPS, HTTP/2, HTTP/3, and WebSocket. Pomerium removes its authentication cookies before forwarding requests upstream, and sensitive databroker data is encrypted at rest. Downstream TLS has a minimum of TLS 1.2. Deployment options include Linux and macOS binaries, packages, Docker images, source builds, and desktop clients for Windows, macOS, and Linux. The free Personal plan lists 10 users, 10 routes, five policies, and two service accounts. Business costs $7.00 per month, billed annually, and lists limits of 1,000 users, 100 routes, 100 policies, and 20 service accounts. A free trial is also listed.

Versa Zero Trust Network Access connects users to private applications across locations and hosting environments. It applies least-privilege access and ongoing trust evaluation, with application-specific policies for users or groups informed by behavior, context, device posture, and activity. Versa presents the service as a VPN replacement for remote and on-premises users. Adaptive micro-segmentation divides a LAN into smaller segments to contain risky users and devices and limit lateral threat movement. Secure Private Access is cloud-managed and cloud-delivered, connecting distributed users to applications in enterprise data centers and private or public clouds. Listed identity integrations include Active Directory, Okta, LDAP, RADIUS, and SAML, with MFA options including Microsoft Authenticator, Google Authenticator, and Duo. The Professional tier includes clientless access to private resources and portal access for HTTP(S) applications. The service provides real-time and historical visibility into users, applications, and networks. Versa lists Android, iOS, Linux, macOS, web, and Windows platforms. Pricing is on request, and no free plan is listed.