Boundary
Boundary: A flexible, open-source access layer for infrastructure teams that need least-privilege control. Ranked #11 of 39 in Zero Trust Network Access Software by our editors (8.2/10); pricing: Free plan; best for teams wanting open-source infrastructure access.
At a glance
- Editor score8.2 / 10
- PricingFree plan
- Best forTeams wanting open-source infrastructure access
- Free planYes
- Access methodsBoth
- Founded2020 · San Francisco, California, United States
- Facts checked21 Sep 2026
Where it wins
- Open-source deployment with managed and self-managed options
- Least-privilege access, credential brokering, and session controls
- Supports TCP, SSH, RDP, cloud discovery, and automation workflows
Where it doesn't
- Narrower scope than broad endpoint-access suites
- Device posture checks are outside its listed focus
- Usage-based pricing requires plan and consumption review
Our verdict on Boundary
Boundary provides identity-based, least-privilege access to servers, databases, applications, Kubernetes clusters, and other private infrastructure. It is suited to infrastructure, platform, and security teams that need to control access without exposing the underlying network. Users authenticate through OIDC or LDAP identity providers, while role-based authorization and time-limited proxy access govern connections. Boundary supports HCP Boundary as a managed service, Boundary Enterprise as a self-managed deployment, and an open-source project for teams that want deployment flexibility.
Pricing is usage-based across the published HCP Boundary Standard and HCP Boundary Plus plans. Each edition has tiers for the first 1-5 users and the next 6-20 users, with the Standard and Plus editions separating the available plan levels. The platform also fits environments built around HashiCorp Vault, AWS, Microsoft Azure, Google Cloud Platform, OIDC identity providers, LDAP, and Terraform. Terraform, CLI, API, and desktop-client workflows give automation-focused teams several ways to administer and operate access. Web, Windows, macOS, Linux, API, and self-hosted deployment options extend that fit across managed and custom environments.
Boundary’s standout capability is its combination of credential brokering, private-endpoint proxying, cloud target discovery, and session oversight. It supports TCP, SSH, and RDP targets, with monitoring, logging, termination, and optional SSH and RDP recording and playback. These controls can support operational review and compliance workflows, while SIEM export is part of the category profile. The trade-off is focus: Boundary centers on infrastructure access and does not present the broader device-posture scope of endpoint-oriented zero trust suites. Choose it for open-source infrastructure access and automation; choose an alternative if device posture is a primary requirement.
Your product? Our editors can test Boundary in depth and publish a review, labelled as paid · from $149/mo →
Boundary pricing
All 4 Boundary plans and prices →
Boundary fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Not verified |
| Deployment model | Hybrid |
| Access methods | Both |
| Device posture checks | Not verified |
| Private app connectors | Not verified |
| Supported app protocols | TCP, SSH, RDP |
| SIEM log export | Yes |
| Session recording | Yes |
| Deployment | Cloud, Self-hosted, Desktop, Browser extension |
| Platforms | Web, Windows, macOS, Linux |
| Support | Community, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 7 integrations: HashiCorp Vault, AWS, Microsoft Azure, Google Cloud Platform, OIDC identity providers, LDAP … |
| Pricing | Free plan (source) |
| Website | developer.hashicorp.com |
| Facts checked | 21 Sep 2026 |
Boundary integrations
Boundary lists 7 integrations on its own site.
- HashiCorp Vault
- AWS
- Microsoft Azure
- Google Cloud Platform
- OIDC identity providers
- LDAP
- Terraform
Alternatives to Boundary
- Cloudflare AccessBroad cloud ZTNA coverage with a free plan, clientless access, and device posture checks.9.3
- Zscaler Private AccessA broad ZTNA platform for enterprises needing application-level and privileged access controls.9.1
- Akamai Enterprise Application AccessA deep hybrid ZTNA service for complex private-app environments, with contact-sales pricing.9.0
See all Boundary alternatives →
Also Ranked In
Boundary is ranked in 2 of our directories.
Used Boundary? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Boundary for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Boundary is listed in our Zero Trust Network Access Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/boundary/"><img src="https://www.itechguides.com/best/badge/boundary.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update