OpenZiti is an open-source zero-trust overlay network. It lets applications and devices connect over an encrypted, identity-based network instead of exposing services to the internet or relying on a traditional VPN. It serves remote access, connections between services and the secure embedding of applications. The software runs on the user's own infrastructure and is published on GitHub under the Apache 2.0 licence. NetFoundry, which created and maintains the project, also offers commercial services built on OpenZiti.
NetFoundry is based in Charlotte, North Carolina, in the United States, and as a US company it is subject to US law and US legal access requests. The company's website states that the code carrying traffic is auditable by anyone, so organisations can inspect the software themselves. Because OpenZiti can run entirely on a customer's own infrastructure, keys, identities and traffic can remain within the organisation's environment. For NetFoundry's managed cloud services, the contracting party and hosting location should be checked separately.