Subcategory research

Zero Trust Network Access (ZTNA) Software

Software for granting secure, identity-aware access to private applications without relying on traditional network perimeter access. Includes VPN replacement and least-privilege application access; excludes network monitoring, endpoint management, and general firewall hardware.

Zero Trust Network Access (ZTNA) Software product list

10 published tools. Filter the complete list below.

#1

Cloudflare Access

Cloudflare Access is a cloud-delivered zero trust network access product for identity- and device-aware access to self-hosted, SaaS, private-network, and non-web applications.

83Strong pick
Pricing
  • Free plan available — see plan limits
  • Paid · Pay-as-you-go · $7 USD · per user · per month · billed annually · Teams over 50 users solving narrow SSE use cases without enterprise support services
  • Custom quote required for some paid plans
  • Per-seat pricing
  • Quote required
  • Free plan — check scope
Best for
  • Small business
  • Mid-market
  • Enterprise
#2

Twingate

Twingate is a cloud-managed zero trust network access service that uses endpoint Clients and outbound Connectors to provide identity- and device-aware access to private, public, cloud, and on-premises Resources.

81Consider
Pricing
  • Free plan available — see plan limits
  • Paid · Home · $15 USD · per month · Non-commercial use; up to 7 users
  • Paid · Teams · $5 USD · per user · per month · Yearly billing · discounted · billed annually
  • Custom quote required for some paid plans
  • Per-seat pricing
  • Quote required
  • Free plan — check scope
Best for
  • Small business
  • Mid-market
  • Enterprise
#6

Akamai Enterprise Application Access

Akamai Enterprise Application Access is a cloud-delivered Zero Trust Network Access service that terminates user sessions in the cloud and brokers least-privilege access to private applications through outbound-only connectors. It supports clientless browser access and EAA Client access, device-posture policy, global edge transport, centralized reporting, SIEM feeds, and APIs while keeping Akamai's internet security, MFA, microsegmentation, WAAP, DDoS protection, browser security, connectors, and services in their proper product or component boundaries.

77Consider
Pricing
  • Custom quote required for some paid plans
  • Quote required
Best for
  • Enterprise
  • Mid-market
#7

Netskope One Private Access

Netskope One Private Access is Netskope's current ZTNA product for direct, policy-controlled access to private applications across data centers, private clouds, public clouds, remote users, campuses, and selected OT and IoT environments. It supports managed-device access through Netskope One Client and clientless browser access, with Publishers connecting application environments to Netskope's cloud service.

77Consider
Pricing
  • Custom quote required for some paid plans
  • Quote required
Best for
  • Enterprise
#8

Zscaler Private Access

Zscaler Private Access is a cloud-delivered ZTNA service that brokers direct connections between authorized users and named private applications without placing users on the network. Current standalone packages cover managed-device access through Client Connector and browser-based access for unmanaged and third-party users, with advanced segmentation, inspection, isolation, resilience, and data controls packaged separately.

77Consider
Pricing
  • Custom quote required for some paid plans
  • Quote required
Best for
  • Enterprise
  • Mid-market