Ivanti Neurons for Zero Trust Access

Overview

Ivanti Neurons for Zero Trust Access gives organizations a way to gate private application access on both user identity and device condition. It is best suited to teams managing employees, contractors, and partners across locations who need granular controls over access to internal resources. The trade-off is a gateway-based architecture and custom pricing, so it calls for deployment planning as well as a sales conversation.

Key features

Access is continuously checked against user identity and device health, with least-privilege policies limiting users to authorized resources. Administrators can score device risk using running processes and applications, quarantine unpatched devices running high-risk apps, and trigger step-up authentication or access restrictions based on user risk. That combination is useful when access decisions need to respond to changing endpoint conditions rather than rely on a one-time login.

Device policies can evaluate antivirus, firewall, location, disk encryption, OS version, missing patches, and other conditions. Authentication supports local credentials, SAML through Azure AD or a custom service, and TOTP; SAML can be primary MFA and TOTP secondary. Applications can include on-premises apps, web pages, network locations, and SaaS services such as Microsoft O365 and Salesforce.

The software-defined perimeter separates control and data planes, while application traffic passes through an nZTA Gateway deployed in a datacenter or virtual private cloud. Gateways remain inaccessible to endpoints until the Controller authorizes them. This provides a tightly controlled access path, but organizations must deploy and operate the gateway infrastructure. Users enroll devices through the Controller, which installs or updates Ivanti Secure Access Client.

Cloud-based centralized management tracks private application access and provides visibility across gateways, users, devices, and activity. Ivanti also cites SOC 2 and ISO/IEC 27001 among its security and compliance resources. The plan includes continuous monitoring, impact analysis, business service views, finding correlation, risk prioritization, remediation workflows, cloud and external asset discovery, and API access. Its endpoint-management capabilities span policy and application management, automated enrollment, remote wipe, kiosk mode, and wired, wireless, VPN, and 802.1X access control. Those capabilities make the offer broad, though the supplied feature set covers more than access control alone.

Pricing

There is no free plan. The Ivanti Neurons for Zero Trust Access plan uses named-user licensing with SaaS delivery and custom pricing through sales. That makes it a fit for organizations evaluating a managed, organization-wide deployment, but less straightforward for buyers who need a public per-seat price or a free tier to start small. No trial, seat cap, or other quota is stated.

Platforms

The product supports Android, iOS, Linux, macOS, self-hosted environments, web, and Windows. Its broader endpoint scope includes mobile devices, desktops, servers, ChromeOS devices, and IoT endpoints, with supported operating systems including Windows, macOS, Linux, ChromeOS, iOS, iPadOS, and Android. Enrollment options include Apple Business Manager, Google Zero-Touch Enrollment, and Windows Autopilot; offline device support is also included.

Who it's for

Organizations securing private applications for a distributed workforce, contractors, or partners are the clearest fit, particularly where device posture should affect access. Teams that cannot accommodate a deployed gateway or want transparent entry-level pricing should look elsewhere.

Pros and cons

• Pros: Access policies continuously weigh identity and device health, including patch status and risky applications, so authorization can reflect endpoint risk.
• Pros: It can publish both internal and SaaS resources, with centralized visibility into users, devices, gateways, and activity.
• Pros: Broad endpoint and access-control coverage includes enrollment, remote wipe, VPN, wired and wireless access, and 802.1X.
• Cons: Application traffic depends on an organization-deployed gateway, adding infrastructure and deployment responsibilities.
• Cons: Custom pricing and no free plan make it harder to assess cost before engaging sales.

Alternatives

For a different security focus, consider Application Security Posture Management Software, Network Access Control Software, Security Ratings Software, Attack Surface Management Software, Unified Endpoint Management Software, or Vulnerability Management Software.

Conviso Platform is a freemium option for buyers focused on application security, with a free tier capped at five contributing developers, five assets, ten users, and two integrations. OWASP DefectDojo suits teams seeking an open-source platform with a free-forever Community Edition and support through OWASP Slack and GitHub. Phoenix Security offers a free tier for up to 1,000 assets, two premium users plus guests, and dashboard reporting. SecurStack has a free tier capped at 500 scan credits per month, three users, and ten projects, with SAST, SCA, and secrets scanning. Strobes ASPM offers a free tier for up to 100 assets and 500 tasks per month. OX Security is a paid option with a broad code and software-supply-chain scanning plan. Foxnode ASPM is a free option. OpenText Managed File Transfer is a paid cloud-managed file-transfer service rather than a zero-trust access product.

Verdict

Choose Ivanti Neurons for Zero Trust Access if your organization needs conditional access that continuously accounts for device health, backed by centralized visibility and broad endpoint controls. Its strongest case is the combination of risk-responsive policy and access to both private and SaaS resources. Look elsewhere if gateway deployment is impractical or you need clear public pricing before committing to an evaluation.