Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Implementing a default-deny, Zero Trust policy for users accessing applications across any on-premises private network, public cloud, or SaaS setting enhances security. This approach connects users more efficiently and securely than traditional VPNs while offering seamless integration with your existing identity providers and endpoint protection solutions. You can try our Free plan indefinitely for up to 50 users, allowing for specific application access control that prevents lateral movement. Users can easily access the resources they require while being restricted from those they should not reach. Cloudflare remains neutral regarding identity and application types, ensuring the safety of any application, whether SaaS, cloud-based, or on-premises, through your chosen identity provider. Furthermore, prior to access approval, it assesses device posture by checking signals such as Gateway client presence, serial numbers, and mTLS certificates, guaranteeing that only recognized and secure devices can connect to your vital resources. This comprehensive security framework not only streamlines connectivity but also fortifies your organization's defenses against unauthorized access.
Description
ZTXGate represents a cutting-edge Zero Trust Network Access (ZTNA) solution that merges the intuitive experience of a contemporary SaaS control plane with the benefits of on-premises software, including deployment flexibility, data sovereignty, and isolated blast-radius capabilities. Each client utilizes a unique single-tenant instance to ensure optimal security and performance.
The platform facilitates identity federation through OIDC SSO for the administrative portal, featuring a per-provider registry, PKCE implementation, group-to-role mapping, and a local break-glass conversion. It also supports SCIM 2.0 inbound provisioning via a dedicated hardened listener equipped with per-token bearer authentication, CIDR allowlisting, and rate limitations. The system enables cross-protocol identifier linkage to ensure that an OIDC login and a SCIM-provisioned user are recognized as a single identity.
Additionally, ZTXGate offers a pluggable biometric step-up solution that allows for push challenges through its own authenticator (ZTXBAS), as well as Okta Verify Push and Duo Push, all governed by a unified policy field. Resource-specific policies determine the backend in use, while API credentials are securely encrypted at rest.
Furthermore, the platform incorporates MDM and EDR device posture as a crucial element of its policy framework, supporting integrations with Microsoft Intune, Defender, and SentinelOne Singularity to enhance overall security posture and compliance.
API Access
Has API
No
API Access
Has API
No
Integrations
Active Directory
No
Cisco Duo
No
Cloudflare
Yes
Google
No
Google Digital Risk Protection
Yes
Keitaro
Yes
Keycloak
No
Microsoft 365
No
Microsoft Defender for Cloud
No
Microsoft Intune
No
Integrations
Active Directory
Yes
Cisco Duo
Yes
Cloudflare
No
Google
Yes
Google Digital Risk Protection
No
Keitaro
No
Keycloak
Yes
Microsoft 365
Yes
Microsoft Defender for Cloud
Yes
Microsoft Intune
Yes
Pricing Details
$7 per user per month
Free Trial
No
Free Version
Yes
Pricing Details
$4/user/month
Starter — $4 per user / month (annual, self-hosted)
Business — $7 per user / month (annual, self-hosted)
Enterprise — Custom pricing.** Self-hosted or Managed
Business — $7 per user / month (annual, self-hosted)
Enterprise — Custom pricing.** Self-hosted or Managed
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
Yes
iPad App
Yes
Android App
Yes
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Cloudflare
Founded
2009
Country
United States
Website
www.cloudflare.com/products/zero-trust/access/
Vendor Details
Company Name
CoreZT
Founded
2025
Country
United Arab Emirates
Website
www.corezt.com
Product Features
VPN
Anonymous Browsing
No
DNS Leak Protection
No
For Digital Security
No
For Financial Security
No
For Gaming
No
For Streaming
No
Kill Switch
No
Multi-Language
No
Multi-Protocol
No
Peer-to-Peer
No
Policy Management
No
Remote Access
No
Web Inspection
No
White Label
No