Access (Zero Trust)

Access puts SSO-authenticated policies in front of anything — internal web apps, SSH, RDP, arbitrary self-hosted services — and it’s free for up to 50 users, which is an astonishing amount of product for zero dollars. Paired with Tunnel, it can eliminate a VPN entirely.

Identity provider integration is broad (multiple IdPs can run simultaneously), service tokens make machine-to-machine auth clean, and the audit logs are genuinely useful for compliance conversations.

The deducted point: policy management gets unwieldy once you have dozens of applications, the terminology shifts between dashboard redesigns keep moving things around, and App Launcher is fine but forgettable. None of that outweighs how much operational risk this product deletes.