Reduce the risk of unauthorized access to company systems by enforcing strong authentication, network and application-layer segmentation, and access logging. Enforce a uniform level of security across all your resources: on-premise, cloud, or hybrid. Zero-trust access control with no hardware required.
Create Free AccountSee DemoTry zero-trust access control for free.
No card needed. Full onboarding support.
BENEFITS
Conceal end-users and resources from threat actors by establishing private user-to-system connections via a secure encrypted tunnel from any location.
Main benefit
Enforce strong authentication of both users and their devices on the network and application layer, and terminate them after each session.
Main benefit
Least-privilege assignment of access rights ensures attackers cannot access all systems even if they succeed in penetrating one of them.
Main benefit
Experience GoodAccess via an interactive demo. Get a feel for all its features and find out why GoodAccess is the right choice for your business.
FEATURES
Gateway network
Starter is a free business VPN that creates a secure VPN infrastructure for your virtual organization. Every time a user connects, GoodAccess automatically seeks out the nearest gateway location with the lowest latency and assigns an IP address dynamically. This enables secure private browsing and encrypted remote access to IT resources for your coworkers, even if they connect through public Wi-Fi.
Threat protection
Starter comes equipped with Threat Blocker, an always-on feature that stops phishing, malware, botnets, ransomware ploys and other online security threats before they hit the user and breach your network. Learn more about GoodAccess Threat Blocker.
Goodaccess app
GoodAccess comes with one-click applications for iOS, macOS, Android, Windows and ChromeOS. No configuration is needed. Just invite your colleagues via email to create their account and get the GoodAccess app.
multi factor authentication
Prevent threat intrusion by pre-authenticating users on the application and network level before they interact with business systems. Simplify access provisioning via SCIM integration and reinforce login with multi-factor authentication (MFA) and biometrics.
virtual access
Use virtual access cards to bundle access rights to allowed systems for each company role. Manage access cards centrally, assign or remove privileges for entire groups with just one click.
strong encryption
Shield your systems and end-users by using strong encryption on the level of HTTPS and TCP headers and protect both your online identity and data. Establish connections on a per-session basis to further reduce your silhouette on the public internet.
access logs
Gather granular access logs for post-compromise analysis and compliance with data protection acts (GDPR, HIPAA, SOC 2). The access logs are respectful of privacy, and are not available to anyone except you.
Policy enforcement
Block attempts to access malicious or banned websites and services on the domain level. Keep track of non-compliant devices and policy breaches on the dashboard.
zero-hardware solution
Connect all devices, locations, and systems in one secure zero-trust environment. Ensure a consistent level of security, whether you are accessing LAN, private/public cloud, or SaaS application from an internal network, home, or hotel wi-fi.
testimonials
Test all premium features for 14 days without limitation. No credit card required.
Connect to a gateway near your location, decide what systems to include in your secure environment.
Invite team members and set up 2FA. Assign access cards with privileges to each user role.
Schedule a call with the GoodAccess success manager to get all the details about our product features.
Other features
Prevent unauthorized access to your internal systems with two-factor pre-authentication and biometrics.
Extend full control over inbound connections, manage them centrally with zero hardware required.
zero trust network access guide
GoodAccess pre-authenticates users and their devices when they log into the secure GoodAccess infrastructure. The login supports multi-factor authentication (MFA), with biometrics and tokens, and single sign-on (SSO) using Google, Okta, MS Entra ID credentials, or universal (SAML).
Once a user is authenticated, GoodAccess grants them access privileges to a pool of allowed systems. This access is granted on the network layer, which protects other systems from unauthorized entry.
Access privileges are granted via virtual access cards. You can attach company systems (SaaS apps, clouds, servers, LANs) to an access card corresponding to a particular company role and then assign the card to the users performing that role.
A user may hold several cards. You can add or remove privileges with a click of the mouse and build a layered network ecosystem consisting of multiple access environments that contain a threat early in the event of a compromise.
Read more about zero-trust network access in this article.
Zero trust is a modern approach to cybersecurity that uses identity-based authentication to minimize the risk of threat intrusion.
It emerged as a response to the changes in IT infrastructures and the security requirements placed upon them. In the past, company systems resided inside a LAN protected by a secure boundary. Whoever was connecting from the inside usually had to be physically present, and thus could be implicitly trusted.
However, this model no longer holds, as employees and business systems are spreading past company premises, and companies are relying on multicloud deployments interconnected by the public internet. Now, everyone who wants to connect to internal resources has to prove they truly are who they claim to be – hence zero trust.
Zero trust networking and security solutions are some of the main enablers of company data security nowadays.
Zero trust follows five main principles:
Identity-based user authentication and authorization
Segmentation by least-privilege assignment of access right
Network activity monitoring and logging
Strong traffic and TCP header encryption
Policy enforcement
Since a major part of zero trust is user authentication and privilege assignment, you need somewhere to handle these operations. They can be configured on a key network node, such as a firewall, router, or a load balancer.
In addition, you need to protect your traffic from interception by encryption and secure all your assets and, in an ideal case, endpoints by posture checks and threat protection measures.
However, you can also offload these tasks to a dedicated VPN concentrator, or make use of a virtual server to handle user authentication and authorization, activity logging, and encryption.
Yes, there are even cloud-native zero-trust solutions available. For example, GoodAccess is fully cloud-delivered and provides a uniform level of security throughout the entire IT estate, including cloud assets.
The advantage of a cloud-delivered zero trust solution is that it requires no additional hardware or infrastructure investments whatsoever.