How to Avoid Single-Carrier Lock-In
October 23, 2026
Single-carrier connectivity can make outages, provisioning delays, pricing changes, and security migrations harder to absorb. Learn how an underlay-agnostic zero trust overlay keeps multi-site access portable across broadband, 5G, and cloud backbones.
VLAN Segmentation vs Identity-First Operations
October 23, 2026
Identity-first microsegmentation usually creates fewer day-to-day network changes than NAC and VLAN segmentation. Compare policy maintenance, change tickets, rollback, and multi-cloud operations across OpenZiti, Zscaler, Illumio, and Prisma Access.
SD-WAN vs MPLS: Faster Site and Cloud Connectivity
October 20, 2026
MPLS circuits take weeks to provision. Compare SD-WAN vs MPLS, cloud transit hubs, and identity-based overlays for faster site and cloud connectivity.
How to Segment Agentless OT Devices
October 14, 2026
OT device segmentation without agents or a network redesign. Learn where to enforce identity-based access for PLCs, sensors, and legacy OT.
Identity-Based Access vs. IPsec VPNs
October 6, 2026
Identity-based access control limits connected sites to named services, not subnets. See how it reduces lateral-movement risk compared with IPsec VPNs.
MCP Server Permissions: Per-Tool RBAC
September 29, 2026
Authentication isn’t enough for MCP servers. Learn how to implement per-tool RBAC, validate arguments, and enforce secure authorization for AI workloads.
The Risks of Flat OT and IT Networks
September 29, 2026
Flat IT and OT networks enable lateral movement and increase ransomware risk. Learn the six biggest dangers of unsegmented networks and how to fix them.
Network vs Identity-Based Segmentation
September 25, 2026
Compare network-based and identity-based segmentation. Learn how combining location-based zones with verified identities builds a stronger zero trust architecture.
NetFoundry’s Zero Trust Track Record: 2020–2026
September 17, 2026
How NetFoundry’s zero trust overlay was adopted by AWS, Microsoft, Oracle, IBM, and Siemens from 2020 to 2026 — documented by each company, not by NetFoundry.
MCP Gateway Authentication: Workload Identity vs Shared Secrets
September 14, 2026
Stop using shared API keys for AI agents. Learn how to configure workload identity, SPIFFE, and mTLS for secure, scalable MCP gateway authentication.
Zero Trust for APIs: Secure Access Without a Perimeter
September 9, 2026
Learn how to secure APIs without a perimeter — workload identity, private reachability, deny-by-default policy, and object-level authorization that actually holds.
How to Achieve Zero Inbound Ports
September 9, 2026
A step-by-step guide to zero inbound ports — outbound-only workload identity, authenticate-before-connect policy, and a staged rollout that won’t break production.
You Can’t Out-Patch AI. So Stop Trying to Win That Race.
September 9, 2026
AI has cut disclosure-to-exploit time to hours. See why removing reachability — not faster patching — is now the more durable fix.
CMMC and CUI Compliance Without Rebuilding Your Network
September 9, 2026
See how DIB suppliers secure CUI/ITAR flows across factories, clouds, and partners as identity-defined services — without rebuilding plant infrastructure.
Why AI Content Inspection Can’t See Most of an Agent’s Traffic
September 9, 2026
Most AI agent traffic never reaches a perimeter. See why access governance and content inspection are different layers — and why order matters.
Cutting the Connectivity Tax on DoW Mission Systems
September 9, 2026
How NetFoundry’s identity-first zero trust model cuts the connectivity tax on DoW mission systems — from tactical networks to AI agents.