Zero-trust access and business VPN

Zero-trust access services and business VPNs let a team reach private servers, cloud networks and internal apps from laptops and phones without opening them to the internet. Users sign in with the company identity provider, and access rules decide who reaches which resource. IT and engineering teams use them to replace a legacy VPN concentrator, to connect offices and clouds, or to give contractors narrow access. They differ in how traffic flows (direct device-to-device mesh, connectors inside each network, or vendor gateways), whether they bill per user or per device, and which plan carries SCIM, device posture integrations, flow logs or a HIPAA agreement.

We compare them on the same six indicators, read from each vendor's pricing, trust, legal, help center and developer pages:

• Pricing clarity: whether the plan you need has a published price, can be bought online and on more than one billing term, and whether the pages leave prices out or contradict each other.
• Price for 25 users: the monthly cost for 25 users with 2 devices each reaching 10 servers, with identity-provider sign-in, group-based access rules and an admin audit log, on the cheapest plan that covers it, shown as a cost per user with the arithmetic; 0 when the pages cannot price it.
• Free plan and trial: a permanent free plan and whether it may be used commercially, how many users it allows, and the length of a trial.
• Access controls: sign-in with Okta or Entra ID, SCIM, group or port rules, device posture with MDM or EDR tools, site-to-site connectors and DNS filtering, and on which plan each one sits.
• Visibility and exit: an admin audit log, network flow logs and their retention, SIEM streaming, an admin API or Terraform, policy as code, and parts you can run yourself.
• Compliance and data: the vendor's own SOC 2 Type II and ISO 27001, a HIPAA agreement, a GDPR DPA, EU data storage, admin-console single sign-on and a published subprocessor list.

Connection speed, latency and uptime depend on where and how a team connects, so we do not score them. Each review says which pages it was written from and when. Where we have run a product hands-on, the evidence is on its page.