Mesh VPNs and private networks
OpenZiti privacy rating
Open-source zero-trust networking platform from NetFoundry that connects apps and devices through an overlay of self-hosted routers and a controller, with tunneler apps and SDKs.
Summary
OpenZiti scores 59 out of 100 (grade D) on the mesh VPNs and private networks criteria. It meets 4 of 7 criteria: open source, no ads or data sales, keys stay on devices and self-hosted coordination server. It does not meet no trackers or telemetry and independent audit. Still needing evidence: no connection logs by default. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.
Score 59 out of 100. How scoring works
Criteria
- Yes
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The website loads Google Tag Manager and Hotjar.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Free open-source software. NetFoundry sells a hosted version, with no ads.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Yes
Keys stay on devices Weight 3 of 3
Is traffic encrypted between devices with private keys created on each device, so the coordination server and relays cannot read it?
Each side creates its own key pair and the controller only swaps public keys. Data is encrypted in the SDK and routers cannot read it.
-
Yes
Self-hosted coordination server Weight 2 of 3
Can the coordination or control server be self-hosted with open-source software?
The controller and routers are open source and can be self-hosted.
-
Unknown
No connection logs by default Weight 2 of 3
Are connection logs and client diagnostic logs kept off the vendor's servers unless a user or admin turns them on?
Needs evidence. Add it