Zero Trust Tools
Zero Trust security solutions for implementing never trust, always verify architectures with secure access service edge (SASE).
Browse 218 zero trust tools
FEATURED
USE CASES
Sandboxed browser in a VM to block malware, keyloggers & Trojans.
Fully managed SASE solution replacing on-prem firewalls, VPNs, and MPLS.
Cloud-based SD-WAN/SASE platform for service providers with security & mgmt.
ZTNA solution providing identity-based, continuous-verification network access control.
Secure isolated browser app for protected online banking sessions.
MSP-focused browser security platform with DNS filtering & DLP.
Browser defense platform to detect, isolate, and block web-based threats.
Chrome extension providing real-time browser security via sandboxing and AI.
Neural network-based zero-day phishing & malvertising detection via global sensor network.
Machine identity & zero-trust access mgmt platform for cyber-physical systems.
Secure remote access service for NHS staff without VPN tokens or passwords
Browser security platform for monitoring, controlling & protecting web activity
Remote access security platform verifying physical user presence via cryptography
Managed SASE platform combining SD-WAN and cloud security for SMEs
Prevents automated attacks on web apps and APIs by blocking bots and fraud tools
Identity-based zero trust network connectivity platform built on OpenZiti
Software-based zero trust network security with process-level control & E2EE
Enterprise browser isolation platform for preventing human error-based attacks
Enterprise browser security platform for any browser with GenAI protection
Cloud-based SASE platform combining SWG, CASB, ZTNA, and DLP capabilities
Secure platform for compartmentalized data and compute control
Zero Trust network access solution using outbound-only encrypted connections
Identity-aware network security integrating CrowdStrike endpoint risk scores
Zero Trust Specializations
218 tools across 5 specializations · 4 free, 214 commercial
Remote Browser Isolation
Remote Browser Isolation tools that isolate browser sessions, tabs and content.
Secure Access Service Edge
Secure Access Service Edge (SASE) Platforms that integrate SD-WAN and security service edge capabilities from single vendors.
Secure Enterprise Browsers
Enterprise-grade secure browsers with built-in security controls, data protection, and threat prevention capabilities.
Zero Trust Tools FAQ
Common questions about Zero Trust tools, selection guides, pricing, and comparisons.
Zero trust is a security model based on the principle of "never trust, always verify." Instead of trusting devices inside a network perimeter, zero trust requires continuous verification of every user, device, and connection before granting access to any resource. Key components include identity verification, device health checks, least-privilege access, microsegmentation, and continuous monitoring.
VPNs grant users full network access once connected, creating a flat network where a compromised device can reach everything. ZTNA (Zero Trust Network Access) grants access only to specific applications based on user identity, device posture, and context, hiding all other resources. ZTNA provides better security, better performance (no backhauling), and better user experience than traditional VPNs.
SASE (Secure Access Service Edge) combines networking (SD-WAN) and security (ZTNA, CASB, SWG, FWaaS) into a unified cloud-delivered service. It implements zero trust principles for network access while also providing network optimization. SSE (Security Service Edge) is the security-only portion of SASE without the SD-WAN component. SASE is one way to implement zero trust, particularly for distributed workforces.
Secure enterprise browsers replace or wrap standard browsers with built-in security controls: DLP, URL filtering, session recording, and data access policies. They are useful for BYOD environments, contractor access, and protecting sensitive SaaS applications without requiring endpoint agents. They complement ZTNA by adding application-layer controls within the browser session itself.
