# OpenZiti privacy rating

Open-source zero-trust networking platform from NetFoundry that connects apps and devices through an overlay of self-hosted routers and a controller, with tunneler apps and SDKs.

## Summary

OpenZiti scores 59 out of 100 (grade D) on the mesh VPNs and private networks criteria. It meets 4 of 7 criteria: open source, no ads or data sales, keys stay on devices and self-hosted coordination server. It does not meet no trackers or telemetry and independent audit. Still needing evidence: no connection logs by default. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://netfoundry.io/docs/openziti/
- Source code: https://github.com/openziti/ziti
- License: Apache-2.0
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Windows, macOS, Linux, Android, iOS
- Home page trackers: Google Tag Manager, Hotjar
- Category: [Mesh VPNs and private networks](https://privacyratings.com/mesh-vpns/)
- Grade: D (59/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | Apache-2.0. | https://github.com/openziti/ziti/blob/main/LICENSE |
| No trackers or telemetry | No | The website loads Google Tag Manager and Hotjar. | https://netfoundry.io/docs/openziti/ |
| No ads or data sales | Yes | Free open-source software. NetFoundry sells a hosted version, with no ads. | https://netfoundry.io/docs/openziti/ |
| Independent audit | No | No independent audit is published. |  |
| Keys stay on devices | Yes | Each side creates its own key pair and the controller only swaps public keys. Data is encrypted in the SDK and routers cannot read it. | https://netfoundry.io/docs/openziti/learn/core-concepts/security/SecurityAndOpenZiti/end-to-end-encryption |
| Self-hosted coordination server | Yes | The controller and routers are open source and can be self-hosted. | https://github.com/openziti/ziti |
| No connection logs by default | Unknown |  |  |

Source: https://privacyratings.com/mesh-vpns/openziti/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/mesh-vpns/openziti.md