Network Security · Core
ZTNA / Secure Remote Access
Per-app zero-trust access replacing legacy VPN.
10 options listedTypical cost: $36-$144/user/yrPROTECT (PR)
Overview
ZTNA brokers identity- and context-aware access to individual applications instead of full network tunnels. It reduces lateral movement risk versus traditional VPN and underlies remote/hybrid work. Sold per user, usually within SSE suites. Open-source mesh-VPN options cover smaller or self-hosted needs.
Replace exposed VPN early; cuts remote-access attack surface.
Advantages
- Zscaler ZPA mature
- Cloudflare Access simple with generous tier
- reduces lateral movement vs VPN
- Tailscale/Netbird cheap and self-hostable.
Trade-offs
- Best value locked inside a full SSE suite
- app-by-app onboarding effort
- legacy thick-client apps are harder to broker.
Vendors & tools in this area
TeleportOpen source
Identity-based zero-trust access to servers, Kubernetes, databases, and cloud consoles — no VPN tunnel, short-lived certs instead of standing credentials.
Visit site →