Pomerium is an open-source identity-aware proxy built around BeyondCorp and zero-trust principles.
Alternatives to Cloudflare Gateway
Cloudflare Gateway combines custom blocklists, SafeSearch controls, filtering schedules and advanced activity reports. Its DNS and network options cover macOS, Windows, Linux, iOS, Android, PAC files, DNS locations, Cloudflare WAN, Cloudflare Mesh and HTML5 browsers. Readers may still look elsewhere for different filtering depth, family controls, self-hosting or pricing structures. Cloudflare Gateway’s free plan has a 50-user limit and shorter retention, while paid use…
Twingate provides zero trust network access that connects users to individual resources through verified identities.
NetBird connects users and machines through encrypted, peer-to-peer networking based on WireGuard.
- 4

Cloudflare Access
Cloudflare Access is a zero trust access solution for self-hosted apps, SaaS applications, and infrastructure.
Free planAndroidiOSWebAPI7.8$7 usage-based - 5

FortiClient
Free planAndroidiOSLinuxmacOS7.8Free plan - 6
NetFoundry
NetFoundry provides identity-first zero-trust connectivity for AI, API, and machine-to-machine workloads.
Free planAndroidiOSWebAPI7.7Free plan - 7

OpenVPN CloudConnexa
OpenVPN CloudConnexa is a cloud-managed networking service for connecting users, devices, and sites through an overlay network.
AndroidiOSWebLinux7.7From $7 a month - 8
Genians ZTNA
Genians ZTNA combines network access control with zero-trust network access for campus, remote, cloud, and hybrid environments.
Free planAndroidiOSWebAPI7.5Free plan - 9
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 10
Boundary
Boundary gives people authenticated, identity-based access to infrastructure without requiring direct access to its underlying network.
Free planWebAPILinuxmacOS7.3Free plan - 11
Bowtie Private Access
Bowtie Private Access creates encrypted connections between devices and private resources without routing traffic through intermediary networks.
Free planiOSWebLinuxmacOS7.3From $11 a month - 12

iboss Cloud
iboss Cloud is a cloud-native Zero Trust SASE platform for enterprise, government, and K-12 education.
AndroidiOSWebAPI7.1 - 13

AWS Verified Access
AWS Verified Access gives remote employees, contractors, and administrators access to corporate applications and infrastructure without a VPN.
Free planWebAPILinuxmacOS7.0From $0.20 a month - 14

Akamai Enterprise Application Access
Akamai Enterprise Application Access is a cloud-delivered zero trust network access service for granting users least-privilege access to private applications.
AndroidiOSWebAPI6.9 - 15
SonicWall Cloud Secure Edge
SonicWall Cloud Secure Edge combines zero-trust access to private resources with internet security controls.
AndroidiOSWebAPI6.9 - 16

Zscaler Private Access
Zscaler Private Access (ZPA) provides zero-trust access to private apps, workloads, and operational technology from users’ devices and locations.
AndroidiOSWebLinux6.9 - 17

Netskope One Private Access
Netskope One Private Access provides zero trust network access to private applications through secure direct connectivity.
AndroidiOSWebAPI6.8 - 18

Symantec IT Management Suite
Symantec IT Management Suite manages, patches, and remediates application and operating system configurations across desktops, laptops, and servers…
WebAPILinuxmacOS6.8 - 19

Diode Collab
Diode Collab combines team messaging, file sharing, and remote access in an app for Android, iOS, Linux, macOS, and Windows.
AndroidiOSLinuxmacOS6.7From $3 a month - 20

Ivanti Neurons for Zero Trust Access
Ivanti Neurons for Zero Trust Access manages access to corporate applications using user and device context.
AndroidiOSWebLinux6.6 - 21
Cloudflare WAN (formerly Magic WAN)
Free planWeb6.4$7 usage-based - 22

Versa Zero Trust Network Access
Versa Zero Trust Network Access connects users to private applications across locations and hosting environments, using least-privilege access and ongoing trust checks.
AndroidiOSWebLinux6.4 - 23

NordLayer Browser
NordLayer Browser is a business browser that gives administrators controls over employee access to company resources.
macOSWindows6.3From $4 a month - 24
Cloudbrink Personal SASE
Cloudbrink Personal SASE combines zero-trust network access with Internet Security for people working in offices, at home or on the road.
WebLinuxmacOSWindows6.2 - 25
Duo Network Gateway
WebLinuxmacOSSelf-hosted6.1From $9 a month - 26
Cyolo Zero Trust Access
Cyolo Zero Trust Access provides remote privileged access and microsegmentation for operational technology (OT) and critical infrastructure.
AndroidiOSWebLinux6.0 - 27
Versa Secure Access
AndroidiOSLinuxmacOS6.0 - 28

Forcepoint ZTNA
Forcepoint ZTNA provides controlled access to private applications from managed and unmanaged devices.
WebmacOSSelf-hostedWindows5.9 - 29
Juniper Security Director
Juniper Security Director centralizes network security policy management for Juniper SRX deployments through a web interface.
WebSelf-hosted5.9 - 305.7

