- Home
- Business VPN Software
- NetFoundry
NetFoundry
NetFoundry · Charlotte, North Carolina, United States · founded 2019
What it is
NetFoundry provides identity-first zero-trust connectivity for AI, API, and machine-to-machine workloads. Workloads connect outbound without open or listening ports, with access governed by identity and least-privilege policy. Before a connection is established, both endpoints authenticate using mutual X.509 identity. The platform records authentication, authorization, and policy changes; it can stream audit events and export connection, throughput, and health metrics. It supports external identity providers and documents SCIM for automated identity management, with SDKs for Go, C, .NET, Java, Node, and Swift. NetFoundry Cloud uses dedicated controllers and routers that can be deployed on AWS, Azure, Google Cloud, and Oracle Cloud. Self-Hosted runs on customer-owned infrastructure, including on-premises and air-gapped environments. Listed use cases include governing AI agent, model, and tool access, microsegmenting workloads, and connecting IT, OT, IoT, and APIs. The platform supports Android, iOS, Linux, macOS, Windows, web, and self-hosted use. Pricing is on request. Support options include Select and Premium, with platform availability SLAs of 99.5% and 99.95%, respectively; some packages are not available in all regions.
For and against
For
- Outbound workload connections avoid open or listening ports.
- Mutual X.509 identity authenticates both endpoints.
- Audit events and connection metrics can be exported.
- Cloud and self-hosted deployment options are listed.
- SDKs are available for six languages.
Against
- Pricing is available on request.
- Some support packages are unavailable in some regions.
The verdict
NetFoundry centers workload connectivity on identity, policy, and audit visibility, with cloud and self-hosted deployment options. Organizations should confirm pricing and regional support availability with a representative.
Who it suits
It is intended for organizations managing connections among AI, API, and machine-to-machine workloads. Its cloud and self-hosted deployment choices may suit teams with managed, customer-owned, on-premises, or air-gapped infrastructure needs.
Plans and prices
OpenZiti
Self-hosted and self-managed · Apache 2.0 · community support
Read 21 Oct 2026 · netfoundry.io
NetFoundry-Hosted
Dedicated OpenZiti fabric · managed PKI, upgrades, backups and monitoring · SLA up to 99.95%
Read 21 Oct 2026 · netfoundry.io
NetFoundry Self-Hosted
Licensed management suite · customer-owned infrastructure · 24×7 enterprise support
Read 21 Oct 2026 · netfoundry.io
NetFoundry Cloud
Dedicated network · managed infrastructure · uptime SLA · 24×7 support
Read 7 Oct 2026 · netfoundry.io
On the record
- Air-gapped deployment limit
- The deployment guide says offline installations currently support single-node K3s, with full Kubernetes support described as forthcoming.netfoundry.io · read 21 Oct 2026
- API conventions
- The documented REST APIs use JSON request and response bodies and authentication tokens delegated to an identity provider.netfoundry.io · read 21 Oct 2026
- Audit and visibility
- NetFoundry records authentication, authorization, and policy changes and can stream audit events and export connection, throughput, and health metrics.netfoundry.io · read 7 Oct 2026
- Changelog
- The self-hosted changelog lists version 2.0.1 dated October 2, 2026, with fixes including restored monitoring panels and improved handling of credentials in logs and support bundles.netfoundry.io · read 21 Oct 2026
- Cloud deployment
- NetFoundry Cloud describes dedicated controllers and routers deployable on AWS, Azure, Google Cloud, and Oracle Cloud.netfoundry.io · read 7 Oct 2026
- Cloud platforms
- The hosted fabric page lists points of presence across AWS, Azure, Google Cloud and Oracle Cloud Infrastructure.netfoundry.io · read 21 Oct 2026
- Commercial license
- NetFoundry describes its self-hosted management suite as licensed; the Apache 2.0 license claim applies to the OpenZiti project.netfoundry.io · read 21 Oct 2026
- Company headquarters
- G2 lists NetFoundry's headquarters as Charlotte, North Carolina, United States.g2.com · read 21 Oct 2026
- Company legal name
- The Google Play listing identifies the developer as NetFoundry Inc.play.google.com · read 21 Oct 2026
- Compliance
- The documentation page lists SOC 2 Type II reports and describes HIPAA eligibility, GDPR and CCPA data processing agreements, and framework guidance.netfoundry.io · read 7 Oct 2026
- Connection security
- OpenZiti assigns identities to users, devices, services and workloads and authorizes connections before creating a network path.netfoundry.io · read 21 Oct 2026
- Connectivity model
- Workloads connect outbound and have no open or listening ports, with access controlled by identity and least-privilege policy.netfoundry.io · read 7 Oct 2026
- Cryptography
- The self-hosted commercial package advertises FIPS-compliant cryptography and post-quantum-ready encryption.netfoundry.io · read 21 Oct 2026
- Developer API
- The NetFoundry REST API covers console operations such as creating networks, managing identities and services, configuring policies and automating workflows.netfoundry.io · read 21 Oct 2026
- Documentation depth
- The documentation includes API guides and references, integration instructions, identity and policy guides, deployment planning, upgrades and troubleshooting.netfoundry.io · read 21 Oct 2026
- Encrypted mesh
- OpenZiti uses edge routers in an encrypted mesh with smart routing and automatic failover.netfoundry.io · read 21 Oct 2026
- Encryption
- The platform authenticates both endpoints with mutual X.509 identity before a connection is established.netfoundry.io · read 7 Oct 2026
- Endpoint platforms
- The downloads page lists endpoint clients or tunnelers for Windows, macOS, Linux, iOS and Android, plus Docker-based tunneling.netfoundry.io · read 21 Oct 2026
