Introducing

NetFoundry MCP Connect

The simple, secure connectivity you already love, extended to AI.

Stop exposing your MCPs and enterprise resources to AI agents.

Instead you get outbound connections from zero trust connectors – like you do today with ServiceNow MID, Entra Connect, SAP Cloud Connector and NetFoundry Connectors for other services. Supports 3rd party and internal AI agents, without them making any changes.

Start Now With the Free Forever Tier How it Works

Securing 1B+ sessions a month across global infrastructure.

Delivering Proven Mission Critical Value.
Our Customers Agree.

Business Outcomes

Connect to your customers and your customer-hosted software without VPNs, public endpoints, firewall ACLs or IP dependencies. Includes IoT, server-to-server, AI and SRA.

Learn more about Customer Connect

Make your perimeter firewalls, VPNs and API servers unreachable from attackers. Even bastions, firewall UIs and APIs, and legacy apps become unreachable.

Learn more about securing your business

Secure connectivity and identity-based microsegmentation for third-party access, legacy applications, multicloud, edge and IoT.

Learn more about extending Zero Trust

Customer Proof

Our customers don’t even need to open a single inbound firewall port for us to remotely manage our software deployed on their networks. InfoSec reviews that historically took weeks became single-meeting events.
John WilsonCEO, TZ Limited
NetFoundry provides the secure network foundation Rhapsody needs to support private, policy-based access across distributed healthcare environments, including applications, APIs, workloads, and emerging AI-enabled workflows.
Kevin DayCTO, Rhapsody
We moved beyond the perimeter with NetFoundry. It delivers a strictly least-privileged access model that is incredibly easy to deploy, turning what used to be a tangle of firewall rules into a streamlined, visual command center.
Viktor SzabóDeputy CTO, Ominimo

Every AI Deployment Pays Taxes.
NetFoundry Removes Each One.

Legacy Architecture Taxes You Pay Today

Connectivity Tax

Every new service, model, API or data path triggers another round of firewall rule updates, network changes, and delays.

Security Tax

Every service you add opens ports and expands your attack surface.

What Changes With NetFoundry

No Firewall or Network Changes

Every connection is authenticated and authorized by unique workload identity, so you add services without touching a firewall rule.

A Smaller Attack Surface

Your workloads are invisible until authorized by a cryptographic identity, shrinking the surface you have to defend.

Every tax you remove accelerates your AI business value.

How it works

Every AI Connection Starts With Identity

1AuthenticateThe AI user, the agent, and the machine each prove cryptographic identity
2AuthorizePolicy decides which MCP servers and tools that identity can reach
3ConnectAn end-to-end encrypted, outbound-only session opens to the approved resource
4Everyone ElseNo open ports, nothing to scan, nothing to reach

Use the human and machine identities you already have, or use ours.

Demo: Secure Agentic AI Demo: Integrating with SPIRE

NetFoundry reverses the traditional order: your AI stays invisible until it's authorized

One Platform, Every Connection

Secure Every Workload Connection the Same Way

The identity and policy model that secures your agents works across every connection in your environment, on the network you already have.

Zero Trust AI Access Governance

Know What Your AI Can Access. Prove it. Control It.

Explore AI Security →
  • LLM Gateway. One OpenAI-compatible endpoint to every model, with identity-based policy control over access and spend.
  • MCP Gateway. Identity-based access to every MCP server, so agents reach only the tools their policy allows.
 Microsegmentation

Stop Lateral Movement in an Afternoon, Workload by Workload

Explore Microsegmentation → Vulnerability Cloaking

Make Vulnerabilities Unreachable, Patch on Your Schedule

Explore Vulnerability Cloaking → Solution Providers

Zero Trust Connectivity With Faster Setup & Less Effort

Explore Solution Providers → Site-to-Site Connectivity

Easily Connect Everything, Expose Nothing

Explore Site-to-Site Connectivity → OT & IoT Security

Securely Connect & Segment OT Without Uptime Risk

Explore OT & IoT Security → API Security

Make APIs Invisible Until Access Is Authorized

Explore API Security →
In production

Trusted Where Failure Isn’t an Option

The organizations that can least afford downtime also can’t afford delay — and NetFoundry gives them both: production-grade security and connectivity that clears review instead of stalling in it.

3,000companies use NetFoundry
2 of 5largest US companies connect with NetFoundry
8 of 10largest US banks connect with NetFoundry
1B+sessions/month across global infrastructure
#1most widely deployed open source Zero Trust networking platform
Built in the Open

The Platform Runs on OpenZiti, and We Built It

NetFoundry created and maintains OpenZiti, the most widely deployed open source Zero Trust networking platform. The code carrying your traffic is auditable by anyone — no hidden behavior, no lock-in, no vendor you cannot verify. Run it yourself, or run it as a managed service with a global fabric and 24×7 Enterprise support behind it.

Explore NetFoundry OpenZiti →

Every Connection Governed.Nothing Visible to Rogue Agents or Attackers.

Deploy on the network you already have, with no redesign and no firewall tickets.

Deploy Your Free Starter Package Today Watch a Demo