NetFoundry review
Broad hybrid zero-trust connectivity for private applications, networks, and air-gapped environments.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
NetFoundry is an identity-first zero-trust networking platform built on OpenZiti. It connects users, devices, applications, workloads, APIs, and sites through authenticated, encrypted overlay connections instead of exposed inbound ports. Its cloud-managed option suits centrally managed environments, while self-hosted deployment supports on-premises, air-gapped, sovereign, and customer-controlled environments. The platform is aimed at organizations that need private application and network access across hybrid infrastructure, rather than a narrowly focused remote-access tool.
Its strongest fit is technical breadth across connectivity and policy. Identity-based service and access policies can be paired with posture checks covering operating systems, processes, MAC addresses, domains, and MFA. Connector-based access reaches private applications and networks, while endpoint tunnelers, routers, and embedded SDKs support different connection models. NetFoundry covers TCP and UDP, with web, Windows, macOS, Linux, iOS, Android, API, and self-hosted access paths. Microsoft Entra ID and Okta integrations support identity workflows, and REST APIs provide network provisioning and automation.
Operational visibility is another important strength. Network telemetry, events, and management audit logging provide records for administration, while Data Connector supports export to SIEM and analytics platforms. These capabilities make NetFoundry a strong candidate for security teams managing distributed, hybrid, or air-gapped environments that need policy control and operational oversight. The main buying constraint is commercial clarity: pricing requires a sales conversation, and a connector limit is not published. Organizations seeking transparent self-service pricing, a narrower deployment model, or open-source software should consider alternatives. NetFoundry is best suited to teams that value deployment flexibility, private connectivity, and integration depth over simple purchasing.
NetFoundry pros and cons
- Where it wins
- Supports cloud-managed and self-hosted deployment models
- Detailed posture checks plus identity-based access policies
- Telemetry, SIEM export, and REST APIs support operations
- Where it doesn't
- Pricing requires contacting sales
- No published connector limit
- Not open source
NetFoundry fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update