NetFoundry Platform vs ThreatLocker Zero Trust Platform comparison

NetFoundry Platform vs. ThreatLocker Zero Trust Platform

Download the complete report

Helped 915,287 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Mindshare comparison

As of October 2026, in the ZTNA as a Service category, the mindshare of iboss is 3.5%, up from 2.4% compared to the previous year. The mindshare of NetFoundry Platform is 2.0%, up from 0.7% compared to the previous year. The mindshare of ThreatLocker Zero Trust Platform is 1.3%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

ZTNA as a Service Mindshare Distribution
Product	Mindshare (%)
ThreatLocker Zero Trust Platform	1.3%
iboss	3.5%
NetFoundry Platform	2.0%
Other	93.2%

ZTNA as a Service

Featured Reviews

Ashok Ananthula

Senior Consultant Proxy Engineering at a financial services firm with 10,001+ employees

Cloud gateway has strengthened remote web security and now needs better Mac and ISP support

The problem our organization had is that iboss failed for the Mac devices. It is not able to give a successful agent for the Mac agents. That is where in 2025, we had to migrate to the Palo Alto-based platform. If your use case is for just Windows laptops,you can consider this platform as an option One issue is the data center resiliency part. In India especially, they are not tied up with the Tier 1 ISPs like Tata or Airtel; they were having Tier 2 ISPs and encountered many issues reaching few major sites that my organization depends on, and they were having problems that they could not fix quickly. They also lack a mechanism to route that traffic within their data center; rather, they ask customers to make a pac file change to route it to Singapore explicitly. It would be better if they route from their backend , i mean even if I send it to India DC, they should be able to route it internally to make that work; however, they fail to do that and ask the customer to route it in the pac file. Another suggestion is that in China, they do not have the proper setup; they used to have numerous problems with slowness and lack of premium circuits in China as well. That leads to multiple sites working slowly with latency-related issues. So the main issue is the ISP-related problems that need to be solved.

Read full review

Sureshot

Cybersecurity Consultant at a tech vendor with 10,001+ employees

Easy to set up, stable, and helpful for integrating the systems that require a fast and reliable connection

They can provide hardware for specific use cases because some of the NetFoundry solutions don't have the hardware. Currently, they're more into software, but some of the clients want a single brand instead of having multiple vendors. So, if they can offer hardware as well, it would be good. If they have a firewall capability, that would be good. Currently, because they don't have a firewall, we are required to put another layer of control on top of their solution. A built-in firewall would be quite good. Their technical support can be improved. There should be a better handover of a case from one support person to another.

Read full review

Santo Joy

Head Of Cyber Security at a outsourcing company with 201-500 employees

Security controls have been strengthened with granular application, ringfencing, and access policies

The features of ThreatLocker Zero Trust Endpoint Protection Platform that I like the most are the Ringfencing, elevation control, storage control, and application whitelisting functionality. For examples of how these features benefit my company, we were looking for a solution across various vendors to actually implement application whitelisting controls. ThreatLocker's agent, which is very lightweight and does not use much CPU or RAM, helped us achieve that solution. Ringfencing was an add-on that ticked off a lot of Australian framework security controls, which is the reason we chose it. My impression of the allowlisting feature in terms of managing which software, scripts, and libraries run on my devices is that ThreatLocker's community page has a lot of information around this, which is very helpful. Not only that, the Cyber Hero support that ThreatLocker provides gives us insights and best practices, helping us achieve that solution and guiding us to the right platform. The impact of Ringfencing on controlling the behavior of approved applications has been a big winner for us because it is something that many other platforms do not provide as a functionality. Having that allowed us to identify what applications talk to each other, which is something that many other platforms do not do. The network control feature impacts my ability to manage network traffic across my endpoints and servers. We have not used this widely across all our partners, but wherever required, we use it. It has been an easy solution for those customers to get that control implemented. The elevation feature's role in facilitating just-in-time administrative access for approved applications shows that elevation control helps in many use cases involving remote control platforms, door usage, and security system platforms that require local admins. There are many solutions that provide this functionality, but the licensing cost seems to be expensive, and it also adds another solution into the mix. Rather than doing that, we try to use ThreatLocker Zero Trust Endpoint Protection Platform to achieve that control. Regarding the storage control feature, I have used it. The primary function is USB blocking, which is very widely adopted, and also just locking down and allowing certain users to access certain file locations helps us there. When it comes to enforcing policy-driven access over various storage devices, it depends on the business risk adapted by the companies that we support, but generally the use case is USB and external storage devices where companies know that is a risk, but they do not have appropriate solutions. There are EDR platforms that claim to do this, but ThreatLocker Zero Trust Endpoint Protection Platform does it at an advanced level. My assessment of the efficiency of the real-time threat intelligence and category controls employed by Web Control in blocking malicious and non-compliant sites leads me to think that Web Control is another functionality within ThreatLocker Zero Trust Endpoint Protection Platform that is an add-on on top of the current set. That is another solution that we use based on what is required for the company, but again, that is not widely adapted yet for our partners.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I would rate the technical support of iboss a solid 10 without a shadow of a doubt."

"Its initial setup was straightforward."

"From a use-case scenario, what I like the most is the plug-in. I like the fact that we can do the filtering of these devices offsite independent of the network they are connected to, and we do not have to have traffic coming back inside our network."

"Content filtering is the most useful feature of iboss."

"We chose iboss for both zero trust and proxy (SWG) because their SWG was superior."

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."

"Valuable features: Within the filter: Controls (Web categories, applications, and Allow/Block list) and Network (local Subnets). Within the reporter: Logs (Event Log) and Reports."

"iboss is definitely very good in terms of service."

More iboss pros

"The most valuable feature of the solution is that it is in the cloud."

"The price is very reasonable compared to others and the cloud service is free."

"The Network as a Service that they offer is most valuable."

"It is quite stable; we don't have a problem, and in terms of reliability, we haven't encountered or heard of any issues from our customers."

"The pre-built policies and the fact that I get notified when a user requests an application are significant."

"ThreatLocker Zero Trust Endpoint Protection Platform benefits my company by allowing us to be preventative instead of being retroactive or reactive."

"ThreatLocker Allowlisting has all of these features integrated into one console, making it effective."

"ThreatLocker Zero Trust Platform has positively impacted our organization by making our processes so fast, our operations super efficient, and more reliable now."

"The customer service and technical support of ThreatLocker Zero Trust Endpoint Protection Platform are phenomenal, top-notch and top drawer, always willing to help and showing exactly where we need to look to ensure we can have the tools we need for the next time, reducing the need to call into support."

"I would rate it a ten out of ten."

"The customer service is excellent, ten out of ten."

"Unified Audit is excellent for identifying our denies and using those to dynamically create rules, as opposed to manually observing the logs and creating them. It saves so much time."

More ThreatLocker Zero Trust Platform pros

Cons

"The reporting feature needs improvement. It doesn't give you the expected results. It is quite difficult to get the specific reports needed, and it is not as intuitive as the rest of the platform."

"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."

"The reporting feature needs improvement."

"iboss can be improved because the integration could be better; you need to import all the sites that you access today, and there are a few problems whenever you import thousands of websites, making the integration process messy for the users."

"For zero trust implementation, we encountered complexity issues, especially with a large infrastructure company ExxonMobil."

"Iboss is growing so fast that it is often hard for them to keep up with the challenges."

"I'd like to see them accelerate development on the security side, particularly around data loss prevention."

"If they could implement an extra security layer preventing access to iboss from the open internet, it would be great."

More iboss cons

"The solution could provide internet access control."

"If they have a firewall capability, that would be good. Currently, because they don't have a firewall, we are required to put another layer of control on top of their solution. A built-in firewall would be quite good."

"Efficiency-wise, it was a bit harder in the beginning because we were new to the product and it was a lot of overhead to manage it."

"I have no complaints, but a little bit more Mac support would be great."

"ThreatLocker Zero Trust Endpoint Protection Platform has reduced some of the operational costs in my company in terms of time spent on tickets, but nothing major."

"If ThreatLocker can design or build something for mobile devices, that would be brilliant."

"The biggest thing I would like to see improved in ThreatLocker Zero Trust Endpoint Protection Platform is reporting."

"Scalability is challenging, not due to the platform. Scaling ThreatLocker Zero Trust Endpoint Protection Platform usage requires dedicated resources for maintenance."

"The portal can be a little overwhelming at times from an administration point of view. It displays a lot of information, and it's all useful. However, sometimes there is too much on the screen to sift through, especially if you're trying to diagnose a client's problem with a piece of software. Maybe something has stopped working since they updated it, and we need to see if ThreatLocker is blocking a component of that software."

"Something we have come up against a couple of times is that we have two clients that are software developers. They create software that doesn't have digital signatures and that's not easy to categorize or whitelist with ThreatLocker. We have to go in and make custom rules to allow them to do their work and to be protected from malicious threats."

More ThreatLocker Zero Trust Platform cons

Pricing and Cost Advice

"It is expensive compared to one of its competitors."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"We had the cost of purchasing a new appliance along with the implementation and licensing costs. However, the following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"I don't have the cost, but in terms of its management viability, it is acceptable for most of our clients. It seems quite fair."

"The price is very reasonable compared to others and the cloud service is free."

"The price of ThreatLocker Allowlisting is reasonable in the market, but it is not fantastic."

"We have not had any real issues with the pricing. As they have added more features, due to the way our contracts are structured with our customers, we have had to hold off on adopting the new features because they do add costs."

"I can't complain. Cheaper would always be nice, but I think it's reasonable compared to other software in the cybersecurity market."

"Although the pricing seems good, there have been inconsistencies in contract negotiations."

"I believe ThreatLocker's pricing model is fair and flexible, allowing account managers to offer customized deals based on our specific needs."

"Its price is fair. They have added some additional things to it beyond allowlisting. They are up-charging for them, but in terms of the value we get and the way it impacts us, we get a bang for our buck with ThreatLocker than a lot of our other security tools."

"The pricing is pretty fair, considering other solutions. Licensing-wise, it did not take long."

"I do not deal with pricing, but I assume it is cost-effective for us. We choose a solution based on functionality and affordability."

More ThreatLocker Zero Trust Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which ZTNA as a Service solutions are best for your needs.

See recommendations

915,287 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Manufacturing Company

20%

Financial Services Firm

17%

Construction Company

Comms Service Provider

Financial Services Firm

11%

Manufacturing Company

11%

Computer Software Company

10%

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	7
Large Enterprise	11

No data available

By reviewers
Company Size	Count
Small Business	60
Midsize Enterprise	14
Large Enterprise	18

Questions from the Community

What needs improvement with iboss?

I think iboss could be improved by making reporting and dashboard customization more flexible, and simplifying troubl...

What is your primary use case for iboss?

I use iboss as a cloud-based secure web gateway to provide secure internet access, web filtering, and protect remote ...

What is your experience regarding pricing and costs for iboss?

My experience with iboss's pricing structure, setup cost, and licensing model has been positive, straightforward, and...

What is your experience regarding pricing and costs for ThreatLocker Allowlisting?

Ask a question

Earn 20 points

I am not sure about operational or cost expenses because we have not really experienced that.

What needs improvement with ThreatLocker Allowlisting?

When it comes to ThreatLocker Zero Trust Platform's policy making, it is very granular, but the moment you zoom out, ...

What is your primary use case for ThreatLocker Allowlisting?

ThreatLocker Zero Trust Platform's main use case for us was data storage access control.We used ThreatLocker Zero Tru...

Prisma Access by Palo Alto Networks vs iboss

Comparisons

Compared 10% of the time

Netskope vs iboss

Compared 9% of the time

Fortinet FortiGate vs iboss

Compared 8% of the time

Cisco Umbrella vs iboss

Compared 6% of the time

FortiSASE vs iboss

Compared 6% of the time

More iboss Competitors

Zscaler Zero Trust Exchange Platform vs NetFoundry Platform

Compared 16% of the time

VMware VeloCloud SD-WAN vs NetFoundry Platform

Compared 14% of the time

Zscaler B2B vs NetFoundry Platform

Compared 7% of the time

Google Cloud Identity-Aware Proxy vs NetFoundry Platform

Compared 5% of the time

Cloudflare One vs NetFoundry Platform

Compared 4% of the time

More NetFoundry Platform Competitors

Microsoft Defender for Endpoint vs ThreatLocker Zero Trust Platform

Compared 4% of the time

SentinelOne Singularity Endpoint vs ThreatLocker Zero Trust Platform

Compared 3% of the time

Airlock Digital Application Control vs ThreatLocker Zero Trust Platform

Compared 3% of the time

Intercept X Endpoint vs ThreatLocker Zero Trust Platform

Compared 3% of the time

CrowdStrike Falcon vs ThreatLocker Zero Trust Platform

Compared 3% of the time

More ThreatLocker Zero Trust Platform Competitors

Product Reports

iboss

Download iboss product report

ZTNA as a Service

Download NetFoundry Platform product report

ThreatLocker Zero Trust Platform

Download ThreatLocker Zero Trust Platform product report

Also Known As

iBoss Cloud Platform

NetFoundry Edge Router

Protect, Allowlisting, Network Control, Ringfencing

Interactive Demo

Demo not available

iboss

NetFoundry

Demo not available

ThreatLocker

Overview

iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.

Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.

The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.

What are the most important features of Iboss?

- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.

- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.

- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.

- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.

- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.

What benefits should users consider in reviews?

- Complete visibility over AI, data, and applications from one platform instead of separate point tools.

- Encrypted traffic is inspected by default so data decisions use content and context together.

- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.

- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.

- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.

Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.

iboss

NetFoundry is the leader in Zero Trust Workload Connectivity, trusted to securely connect enterprise’s most critical workloads, within and across any environment.

As the only identity-first fabric for every AI, API, site, container, and machine interaction, NetFoundry customers deploy their workloads with greater speed, security and scalability.

Its Identity-First Reachability™ eliminates the reachable attack surface that attackers exploit and defenders struggle to secure, by removing open inbound ports, VPNs and firewall rule changes. By design, it enables security to adapt to the environment, not force the environment to adapt to security, so teams can secure one workload at a time without the high cost of firewall management or redesigning the network.

Customers use NetFoundry to:

Govern AI agent, model and tool access to cut risks, costs, and time to deploy.
Stop lateral movement through microsegmentation
Protect difficult to patch assets and crown jewel systems with a compensating control
Securely connect any system (IT/OT/IoT) or API wherever it operates

Founded by the inventors and maintainers of OpenZiti, the world’s most widely used open source Zero Trust platform, NetFoundry secures billions of sessions for critical infrastructure on three continents and supports Fortune 10 companies across regulated industries including healthcare, financial services, and energy.

NetFoundry

Gain proactive, industry leading Zero Trust cybersecurity capabilities with ThreatLocker. By employing a deny-by-default approach, you will greatly enhance your security and operational efficiency. Solutions from ThreatLocker are focused on precise application control and
streamlined access management without administrative rights.

ThreatLocker Application Control solutions include Zero Trust Alllowlisting, Zero Trust Ringfencing and Privilege Access Management, significantly reducing any unauthorized software activities in your environment. Granular controls improve your overall security, while ringfencing enhances application behavior monitoring. Elevation requests will allow users to gain administrative access without IT intervention. The platform's ease of policy management and real-time threat visibility contribute to reduced help desk tickets and operational costs, ensuring protection against ransomware and
unauthorized applications.

What are the key features of ThreatLocker Zero Trust Platform?

Zero Trust Allowlisting: Allows detailed allowlisting for specific application use.
Privilege Access Management: Streamlines administrative access requests without IT involvement.
Ringfencing: Monitors application behavior to prevent unauthorized actions.
USB access and Data storage Control: Ensures comprehensive endpoint security across networks.

What benefits and ROI should users expect?

Enhanced Security: Reduces your daily risks through deny-by-default policies and ransomware protection.
Operational Efficiency: Your overall number of help desk tickets and operational costs will be cut down.
Compliance Assurance: You maintain compliance by preventing unauthorized software actions.

Organizations often deploy ThreatLocker to ensure endpoint security in industries requiring stringent application control and administrative access management. Its functionalities are critical for managing Shadow IT, creating policies, and overseeing software installation approvals. Common usage spans sectors demanding robust security and compliance, such as finance and healthcare, where maintaining high
security and efficiency is crucial.

ThreatLocker

Sample Customers

Trusted by global enterprises and government agencies.

Ominimo, Rhapsody, TZ, LVT, CERM, Digibee

Information Not Available

NetFoundry Platform vs. ThreatLocker Zero Trust Platform