What is NetFoundry?
NetFoundry was founded by the inventors and maintainers of OpenZiti, an open-source zero-trust networking project, and sells a commercial platform built on it. The product delivers what NetFoundry calls "Identity-First Reachability" - cryptographic identity verification before any network path is established - to eliminate open inbound ports, VPNs, and firewall rule changes. Use cases include site-to-site connectivity, OT/IoT and API security, vulnerability cloaking for unpatched assets, and securing AI agent traffic.
Read the full overview
Sources checked 27 September 2026: official website, OpenZiti GitHub.
NetFoundryNetwork SecurityZero-trust overlay networking built on the open-source OpenZiti project.
Key capabilities
- Zero-trust overlay: Outbound-only, identity-verified connectivity with no open inbound ports.
- OpenZiti foundation: Built on the open-source project NetFoundry created and still maintains.
- Use-case coverage: Site-to-site networking, OT/IoT security, API security, and AI-agent traffic control.
Because public pricing isn't listed, confirm current commercial terms directly, and clarify which capabilities require the paid NetFoundry platform versus what's available by self-hosting OpenZiti directly.
“Zero-trust overlay networking built on the open-source OpenZiti project.”
Technical details
- Access
- See vendor
- Source model
- Commercial
- Founded
- 2017
- Pricing model
- Freemium
- API
- Available
- Website
- netfoundry.io ↗
- GitHub
- Source repository ↗
What to verify
Start from the users, systems and operating responsibilities the tool needs to support.
- Confirm current features, licensing and support terms.
- Validate deployment, data location and access control.
- Test integrations, exports and recovery workflows.
Reviews of NetFoundry
No published reviews yet.
Loading review form…
