Zero trust networking for APIs to IoT, and everything in between

Get simple, secure, low latency networking by embedding zero trust overlay networks inside any app or solution, as code.  The result is end-to-end security, control and visibility across any set of underlay networks, without needing to control the networks or the endpoints.



The world's most used open source zero trust networking platform. Make your apps unreachable from underlay network by embedding secure, app-specific overlays into your apps.
Git the code


Zero trust networking for 100s of millions of sessions per year, from APIs to IoT. Managed NaaS, built on OpenZiti, including hosted global network fabrics.
Start now

NetFoundry is the originator and maintainer of OpenZiti, and provides CloudZiti as hosted NaaS.

App embedded zero trust network overlays for any use case


Extend zero trust networking to APIs, without VPNs. API clients use the Internet, while your API gateways or servers are secured - embed the zero trust trust network overlay in your APIs and close all your inbound firewall ports.

Learn more: Zero trust APIs


Zero trust management and multicloud delivery without open firewall ports or VPNs. Eliminate truck rolls by supporting all protocols, including performance-optimized RDP.  Includes X.509 certificate auth and full mutual TLS (mTLS).

Learn more: Zero trust IoT

Any use case!

Deliver apps via app-embedded (no agent) zero trust Internet overlays. Includes apps, browsers and proxies. Enables you to solve unmanaged devices, B2B, VDI, and multicloud, without touching devices.

Learn more: Zero trust networking use cases

Develop once. Deploy anywhere.

Use the Ziti SDKs to embed multicloud native, zero trust networking into your app. You will extend zero trust Internet overlays into the process space of your apps.

Throw out the VPN and literally close all inbound firewall ports (and enable your customers to). Agentless zero trust networking, built into your application.

Start now
  • “We are committed to protecting our clients’ data. Partnering with NetFoundry isn’t just a way to accomplish this, but the best way.”
    Steve Lindsey
    CIO, Liveview Technologies (LVT)
  • “Businesses can use NetFoundry's Ziti platform to simplify network management, and enable zero trust networking for applications running at the edge on Azure public MEC and Azure regions.”
    Ross Ortega
    VP, Azure for Operators
  • “Integrating our IoT solution with NetFoundry SDKs enables IoT networking without VPNs or proprietary hardware. We can jointly be deployed as software on any IoT device to provide customers with simple solutions.”
    Paul Edrich
    CTO, IMS Evolve
  • “By integrating NetFoundry’s zero trust platform into our IoT and Edge analytics solutions, TOOQ is transforming the retail industry.”
    Ronaldo Moura
  • PliantCloud Alliance Technology Group netfoundry appwan zero trust fintech
    NetFoundry extends the WAN all the way to the application endpoint without CPE, over the Internet. We integrated NetFoundry’s AppWANs into the networking solutions we sell to financial institutions to enable them to meet their strict regulatory and security requirements.
    Chris Williams
    VP at PliantCloud, Alliance Technology Group

Extend Zero Trust overlay networks to any use case via OpenZiti open source zero trust networking, or CloudZiti hosted NaaS:


See how Oracle uses Ziti ZTNA to secure Kubernetes APIs and make Oracle Autonomous Database unreachable from the networks.

Arm and Capgemini

See how Arm, Capgemini and NetFoundry team up to secure connected cars and autonomous vehicles via zero trust networking.


See how Microsoft uses Ziti to connect Azure Private MEC, and why this Microsoft post named NetFoundry as 1 of 4 zero trust networking partners.

Developers: embed zero trust Internet overlays in your apps.

Operators: zero trust networking without VPNs, bastions and firewall management.

Security: close all inbound firewall ports.

OpenZiti - open source Zero trust networking cloudZiti - free trialDemo or briefing