Zero Trust Network Access
Zero Trust Network Access for Mid-Sized Companies
Mid-market companies have a mix of private apps, offices and remote staff, so policy depth and device checks become important.
LeadChange may earn a fee when you request pricing through our site or follow a sponsored link. Rankings never depend on whether a vendor pays us.We may earn a fee.
How we make money
LeadChange may earn a fee when you request pricing through our site or follow a sponsored link. Rankings never depend on whether a vendor pays us.
Research in progress
We have not yet verified which zero trust network access serve this segment. We rank zero trust network access for mid-sized companies once at least 3 products have that evidence; until then, this page sets out what matters and what we evaluate.
What we evaluate
Identity provider integration
Uses identity provider users and groups to drive access policies.
Per-application access
Grants access to specific private apps instead of network segments.
Device posture checks
Checks device health and management status before and during access.
Continuous verification
Re-evaluates sessions and revokes access when context changes.
Hidden applications
Keeps private apps unreachable and invisible to unauthorized users.
Protocol coverage
Supports web, remote desktop, SSH and other app protocols.
Agentless browser access
Lets contractors and unmanaged devices reach web apps without a client.
Session logging
Records who reached which app, from which device and when.
VPN coexistence and migration
Runs alongside an existing VPN for phased migration.
What matters for mid-sized companies
Device posture integration
Access should depend on device health, not only credentials.
Broad protocol coverage
Legacy apps and remote desktop must be included.
Contractor access
Third parties need narrow access without a VPN account.
Phased VPN migration
Moving app by app limits disruption.
How to choose zero trust network access
6 criteria · Requirements by company size · 5 red flags
Start from your private apps and who needs them. List internal web apps, remote desktops, SSH targets, databases and file shares, and which groups of employees, contractors and partners use each one.
In the demo, connect a test identity group, publish one private app and show what happens when a user is removed from the group or their device fails a posture check.
Identity provider integration
Access policies are only as current as the identity data behind them.
Per-application access policies
The point of ZTNA is granting access to specific apps, not to a network segment.
Device posture checks
A valid login from an unmanaged or out-of-date device is still a risk.
Continuous verification and session control
Trust should be re-evaluated when context changes, not only at login.
Protocol and app coverage
Many tools handle web apps well but are weaker for remote desktop, SSH, databases or legacy protocols.
Agent and agentless access
Employees on managed devices and contractors on their own devices need different access paths.
Requirements by company size
Mid-sized companies
- Group-based policies synced from identity
- Device posture checks with device management integration
- Support for remote desktop and SSH as well as web apps
Watch out for
- Posture checks limited to some operating systems
- Running VPN and ZTNA in parallel for too long
- Separate charges for contractor or partner access
Red flags
- Users are placed on a network segment rather than granted access to specific apps
- No integration with your identity provider groups
- Disabling a user does not end active sessions
- No device posture checks
- Little or no session logging
More tools for mid-sized companies
- 401(k) Providers401(k) providers for mid-sized companies
- ACA ComplianceACA compliance for mid-sized companies
- Applicant Tracking SystemsApplicant tracking systems for mid-sized companies
- Background Check ServicesBackground check services for mid-sized companies
- Benefits AdministrationBenefits administration for mid-sized companies
- Call Center Workforce ManagementCall center workforce management for mid-sized companies
- Candidate Sourcing ToolsCandidate sourcing tools for mid-sized companies
- Certified PayrollCertified payroll for mid-sized companies
- COBRA AdministrationCOBRA administration for mid-sized companies
- Compensation ManagementCompensation management for mid-sized companies
Find your fit
By company size
More on zero trust network access
- All zero trust network access, ranked
The full ranking, top picks and how to choose.
- Zero Trust Network Access comparison table
Every product side by side: score, price and verified features.
- Zero Trust Network Access pricing guide
Published list prices, cost by headcount and fees to ask about.
- Zero trust network access for enterprises
The ranking reweighted for enterprises.
- Zero trust network access for small business
The ranking reweighted for small business.
- Zero trust network access for startups
The ranking reweighted for startups.
How we research
A ranking of zero trust network access for mid-sized companies reweights the LeadChange Score: capability coverage 25%, pricing transparency & value 30%, integrations & API 10%, security & compliance 10%, fit & support 15%, and data confidence 10%. Only products with a verified fact showing they serve this segment are listed.
Get a shortlist of zero trust network access for mid-sized companies
Tell us about your team and get a shortlist ranked without regard to who pays us.