I've been digging into Perimeter 81's pricing model for a team. While their platform is feature-rich, the jump from their "Essentials" to the "Premium" plan is significant, and it locks several core features behind the higher tier. I need a solid SASE/ZTNA solution, but I'm exploring the landscape beyond the usual suspects (Twingate, Tailscale).
I'm looking for alternatives that offer a similar blend of:
* Client-based secure network access (not just clientless)
* A cloud-based management console
* Reasonable identity provider integration (Okta, Azure AD)
* The ability to define granular network/web policies
From my research, a few names keep coming up, but I'm wary of marketing claims. Has anyone done a real-world cost/feature comparison with these?
* **NetFoundry/Ziti:** The open-source "OpenZiti" model is intriguing. You can self-host the controllers, but their cloud offering seems to be the main path. Their pricing isn't as transparent as I'd like.
* **Cloudflare Zero Trust:** Their "Zero Trust" platform (formerly Teams) is often mentioned. The per-user pricing seems straightforward, but I'm unsure how it handles traditional network-level access (like replacing a VPN for on-prem resources) versus just web app access.
* **Netskope Private Access:** Part of a larger SSE platform, so it might be overkill. Likely enters "call for quote" territory quickly.
* **Cato SASE:** Another full-platform contender. Probably competes more directly with Perimeter 81's premium tier, but I have no sense of their entry-level cost.
My main question is: **For those who've evaluated or switched, which alternatives provided the best balance of cost and functionality for a team under 100 users?** I'm particularly interested in:
- Actual per-user/month costs at scale (50, 100 users).
- Any hidden costs for data/bandwidth or required add-ons.
- The administrative overhead compared to Perimeter 81.
I'm building a comparison spreadsheet and would appreciate any data points or gotchas you've encountered.