NordLayer

Twingate

Twingate replaces legacy corporate VPNs with a zero-trust network access (ZTNA) model. Instead of putting users on the network, it creates identity-aware, encrypted, peer-to-peer connections directly from a device to the specific resource it needs, whether that is an internal app, a database, a Kubernetes cluster, or an on-prem server, without exposing the rest of the network. Admins deploy Twingate in minutes with no changes to existing infrastructure or DNS, then manage least-privilege access policies from a central dashboard with support for device posture checks, SSO providers like Okta and Entra ID, and infrastructure-as-code via Terraform. It is aimed at distributed engineering and IT teams that want VPN-level access control without VPN-level latency or attack surface.

GoodAccess

GoodAccess is a cloud VPN and Zero Trust Network Access platform built for small and mid-sized businesses that need secure remote access without deploying specialized hardware or hiring dedicated security staff. It centralizes user, device, and policy management in a single web dashboard and layers on features like multi-factor authentication, device posture checks, DNS filtering, and IP whitelisting on top of a standard business VPN. The platform is aimed at companies that need to meet compliance requirements such as ISO 27001, SOC 2, HIPAA, or GDPR while supporting hybrid and remote workforces. It supports apps for Windows, Mac, Linux, iOS, Android, and Chrome OS, and integrates with identity providers like Azure AD, Okta, and Google Workspace, positioning itself as a faster-to-deploy alternative to traditional enterprise VPN appliances.

NetBird

NetBird is an open-source zero trust networking platform that replaces traditional VPN gateways with a WireGuard-based peer-to-peer mesh network, letting devices connect directly to each other instead of routing through a central bottleneck. It enforces least-privilege network segmentation with granular policies and integrates with identity providers like Okta, Google, and Microsoft for SSO and MFA. It checks device security posture such as firewall status, antivirus, geolocation, and MDM/EDR before granting access, logs all configuration changes and connection events with real-time SIEM streaming, and can be deployed as a free managed cloud service or fully self-hosted under its BSD-3 open-source license.

OpenVPN Access Server

OpenVPN Access Server provides a secure, centrally managed VPN that can be deployed on‑premise or in the cloud. It offers a web‑based admin console, LDAP integration, and client‑side software for all major platforms. The free tier allows up to two concurrent connections, while additional users are licensed per connection. It is widely used by small businesses, remote teams, and enterprises needing granular access control and easy scalability.