NetFoundry
NetFoundry provides identity-first zero-trust connectivity for AI, API, and machine-to-machine workloads.
What NetFoundry is
NetFoundry provides identity-first zero-trust connectivity for AI, API, and machine-to-machine workloads. Workloads connect outbound without open or listening ports, and access is governed by identity and least-privilege policy. Before a connection is established, both endpoints authenticate using mutual X.509 identity. The platform records authentication, authorization, and policy changes, can stream audit events, and exports connection, throughput, and health metrics. It supports external identity providers and documents SCIM for automated identity management, with SDKs for Go, C, .NET, Java, Node, and Swift. NetFoundry Cloud provides dedicated controllers and routers deployable on AWS, Azure, Google Cloud, and Oracle Cloud. Self-Hosted runs on customer-owned infrastructure, including on-premises and air-gapped environments. Described use cases include governing AI agent, model, and tool access, microsegmenting workloads, and connecting IT, OT, IoT, and APIs. Pricing is on request. Select and Premium support have platform availability SLAs of 99.5% and 99.95%; some support packages are not available in all regions, so customers are advised to check with a representative.
Good
- Outbound connections avoid open or listening ports.
- Mutual X.509 identity authenticates both endpoints.
- Audit events and connection metrics can be exported.
- Supports cloud and self-hosted deployment.
- SDKs cover six listed languages.
Watch out
- Pricing is available on request.
- Some support packages are not available in all regions.
- Select and Premium have different availability SLAs.
Who it suits
It suits organizations managing connectivity for AI, API, or machine-to-machine workloads, including environments spanning IT, OT, and IoT. Teams can choose managed cloud or customer-managed self-hosted deployment, subject to regional support availability.
Verdict
NetFoundry is built around identity-based access and outbound workload connectivity, with cloud and self-hosted deployment choices. Organizations should confirm pricing and regional support availability with the company.
Plans and prices
From NetFoundry's own pricing page, checked 21 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| OpenZiti | Free | Self-hosted and self-managed · Apache 2.0 · community support |
| NetFoundry Cloud | Priced on request | Dedicated network · managed infrastructure · uptime SLA · 24×7 support |
| NetFoundry-Hosted | Priced on request | Dedicated OpenZiti fabric · managed PKI, upgrades, backups and monitoring · SLA up to 99.95% |
| NetFoundry Self-Hosted | Priced on request | Licensed management suite · customer-owned infrastructure · 24×7 enterprise support |
The facts
Each one read from NetFoundry's own pages, with the date it was checked.
Where it runs
- Air-gapped deployment limit
- The deployment guide says offline installations currently support single-node K3s, with full Kubernetes support described as forthcoming.checked 21 Oct 2026
- Cloud platforms
- The hosted fabric page lists points of presence across AWS, Azure, Google Cloud and Oracle Cloud Infrastructure.checked 21 Oct 2026
- Endpoint platforms
- The downloads page lists endpoint clients or tunnelers for Windows, macOS, Linux, iOS and Android, plus Docker-based tunneling.checked 21 Oct 2026
What it does
- API conventions
- The documented REST APIs use JSON request and response bodies and authentication tokens delegated to an identity provider.checked 21 Oct 2026
- Audit and visibility
- NetFoundry records authentication, authorization, and policy changes and can stream audit events and export connection, throughput, and health metrics.checked 7 Oct 2026
- Changelog
- The self-hosted changelog lists version 2.0.1 dated October 2, 2026, with fixes including restored monitoring panels and improved handling of credentials in logs and support bundles.checked 21 Oct 2026
- Cloud deployment
- NetFoundry Cloud describes dedicated controllers and routers deployable on AWS, Azure, Google Cloud, and Oracle Cloud.checked 7 Oct 2026
- Commercial license
- NetFoundry describes its self-hosted management suite as licensed; the Apache 2.0 license claim applies to the OpenZiti project.checked 21 Oct 2026
- Compliance
- The documentation page lists SOC 2 Type II reports and describes HIPAA eligibility, GDPR and CCPA data processing agreements, and framework guidance.checked 7 Oct 2026
- Connection security
- OpenZiti assigns identities to users, devices, services and workloads and authorizes connections before creating a network path.checked 21 Oct 2026
- Connectivity model
- Workloads connect outbound and have no open or listening ports, with access controlled by identity and least-privilege policy.checked 7 Oct 2026
- Cryptography
- The self-hosted commercial package advertises FIPS-compliant cryptography and post-quantum-ready encryption.checked 21 Oct 2026
- Developer API
- The NetFoundry REST API covers console operations such as creating networks, managing identities and services, configuring policies and automating workflows.checked 21 Oct 2026
- Documentation depth
- The documentation includes API guides and references, integration instructions, identity and policy guides, deployment planning, upgrades and troubleshooting.checked 21 Oct 2026
- Encrypted mesh
- OpenZiti uses edge routers in an encrypted mesh with smart routing and automatic failover.checked 21 Oct 2026
- Encryption
- The platform authenticates both endpoints with mutual X.509 identity before a connection is established.checked 7 Oct 2026
- Funding and investors
- Crunchbase lists three investors, including Cisco Investments and SYN Ventures, and identifies the latest round as Series A; its displayed page obscures the round date and total funding amount.checked 21 Oct 2026
- Hosted deployment
- NetFoundry operates a dedicated OpenZiti fabric and manages its PKI, upgrades, backups and monitoring for hosted customers.checked 21 Oct 2026
- Identity integrations
- The console supports SCIM provisioning integrations with Okta, Microsoft Entra ID and Google Workspace.checked 21 Oct 2026
- Integrations
- The platform supports connections to external identity providers and documents SCIM for automated identity management.checked 7 Oct 2026
The company
- Company headquarters
- G2 lists NetFoundry's headquarters as Charlotte, North Carolina, United States.checked 21 Oct 2026
- Company legal name
- The Google Play listing identifies the developer as NetFoundry Inc.checked 21 Oct 2026
- Founded
- G2 lists NetFoundry's founding year as 2019.checked 21 Oct 2026
- Headquarters
- Charlotte, North Carolina, United Stateschecked 28 Sep 2026
Alternatives to NetFoundry
- 1
Cloudflare Gateway
Free planAndroidiOSWebAPI8.3$7 usage-based - 2
Twingate
Free planAndroidiOSWebAPI8.3From $5 a month - 3
Cato SASE Platform
AndroidiOSWebAPI7.5From $1 a year - 4
Cloudflare One
Free planAndroidiOSWebAPI7.5$7 usage-based - 5
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 6
Check Point Harmony SASE
AndroidiOSWebLinux7.3