Zero Trust Network Access
Zero Trust Network Access for Enterprises
Enterprises run many apps across data centers and clouds, so scale, availability and integration with a broader security architecture set the requirements.
LeadChange may earn a fee when you request pricing through our site or follow a sponsored link. Rankings never depend on whether a vendor pays us.We may earn a fee.
How we make money
LeadChange may earn a fee when you request pricing through our site or follow a sponsored link. Rankings never depend on whether a vendor pays us.
Research in progress
We have not yet verified which zero trust network access serve this segment. We rank zero trust network access for enterprises once at least 3 products have that evidence; until then, this page sets out what matters and what we evaluate.
What we evaluate
Identity provider integration
Uses identity provider users and groups to drive access policies.
Per-application access
Grants access to specific private apps instead of network segments.
Device posture checks
Checks device health and management status before and during access.
Continuous verification
Re-evaluates sessions and revokes access when context changes.
Hidden applications
Keeps private apps unreachable and invisible to unauthorized users.
Protocol coverage
Supports web, remote desktop, SSH and other app protocols.
Agentless browser access
Lets contractors and unmanaged devices reach web apps without a client.
Session logging
Records who reached which app, from which device and when.
VPN coexistence and migration
Runs alongside an existing VPN for phased migration.
What matters for enterprises
Global performance and high availability
Users in many regions depend on the access path.
Fine-grained policy management
Many apps and groups need precise, reviewable rules.
Integration with security monitoring
Access events feed detection and investigations.
Data residency options
Traffic handling may need to stay in chosen regions.
How to choose zero trust network access
6 criteria · Requirements by company size · 5 red flags
Start from your private apps and who needs them. List internal web apps, remote desktops, SSH targets, databases and file shares, and which groups of employees, contractors and partners use each one.
In the demo, connect a test identity group, publish one private app and show what happens when a user is removed from the group or their device fails a posture check.
Identity provider integration
Access policies are only as current as the identity data behind them.
Per-application access policies
The point of ZTNA is granting access to specific apps, not to a network segment.
Device posture checks
A valid login from an unmanaged or out-of-date device is still a risk.
Continuous verification and session control
Trust should be re-evaluated when context changes, not only at login.
Protocol and app coverage
Many tools handle web apps well but are weaker for remote desktop, SSH, databases or legacy protocols.
Agent and agentless access
Employees on managed devices and contractors on their own devices need different access paths.
Requirements by company size
Enterprises
- Global points of presence and high availability
- Fine-grained policies across many apps and data centers
- Integration with security monitoring and a broader secure access platform
Watch out for
- Legacy apps and protocols that do not fit the model
- Data residency and traffic inspection requirements
- Long migrations from several existing VPNs
Red flags
- Users are placed on a network segment rather than granted access to specific apps
- No integration with your identity provider groups
- Disabling a user does not end active sessions
- No device posture checks
- Little or no session logging
More tools for enterprises
- 401(k) Providers401(k) providers for enterprises
- ACA ComplianceACA compliance for enterprises
- Applicant Tracking SystemsApplicant tracking systems for enterprises
- Background Check ServicesBackground check services for enterprises
- Benefits AdministrationBenefits administration for enterprises
- Call Center Workforce ManagementCall center workforce management for enterprises
- Candidate Sourcing ToolsCandidate sourcing tools for enterprises
- Certified PayrollCertified payroll for enterprises
- COBRA AdministrationCOBRA administration for enterprises
- Compensation ManagementCompensation management for enterprises
Find your fit
By company size
More on zero trust network access
- All zero trust network access, ranked
The full ranking, top picks and how to choose.
- Zero Trust Network Access comparison table
Every product side by side: score, price and verified features.
- Zero Trust Network Access pricing guide
Published list prices, cost by headcount and fees to ask about.
- Zero trust network access for mid-sized companies
The ranking reweighted for mid-sized companies.
- Zero trust network access for small business
The ranking reweighted for small business.
- Zero trust network access for startups
The ranking reweighted for startups.
How we research
A ranking of zero trust network access for enterprises reweights the LeadChange Score: capability coverage 30%, pricing transparency & value 10%, integrations & API 20%, security & compliance 25%, fit & support 5%, and data confidence 10%. Only products with a verified fact showing they serve this segment are listed.
Get a shortlist of zero trust network access for enterprises
Tell us about your team and get a shortlist ranked without regard to who pays us.