Access (Zero Trust)

Access puts SSO-authenticated policies in front of internal web apps, SSH, RDP, and other self-hosted services. It’s free for up to 50 users, which is a remarkable amount of product for nothing. Paired with Tunnel, it can replace a VPN entirely.

Identity provider support is broad, including multiple IdPs at once. Service tokens make machine-to-machine auth straightforward, and the audit logs are useful when compliance comes up.

The deducted point: policy management gets unwieldy once you have dozens of applications, the terminology shifts between dashboard redesigns keep moving things around, and App Launcher is fine but forgettable. None of that outweighs how much operational risk this product deletes.