Cloudflare Access alternatives

1 mapped open-source alternative. Fit is not feature parity.

Open-source alternatives

NetBird Community Edition
B BSD 3-Clause "New" or "Revised" License A permissive license similar to the <a href="/licenses/bsd-2-clause/">BSD 2-Clause License</a>, but with a 3rd clause that prohibits others from using the name of the copyright holder or its contributors to promote derived products without written consent. May Commercial useModificationDistributionPrivate use Must License and copyright notice No LiabilityWarranty Summary from GitHub's choosealicense.com GNU Affero General Public License v3.0 Permissions of this strongest copyleft license are conditioned on making available complete source code of licensed works and modifications, which include larger works using a licensed work, under the same license. Copyright and license notices must be preserved. Contributors provide an express grant of patent rights. When a modified version is used to provide a service over a network, the complete source code of the modified version must be made available. May Commercial useModificationDistributionPatent usePrivate use Must License and copyright noticeState changesDisclose sourceNetwork use is distributionSame license No LiabilityWarranty Summary from GitHub's choosealicense.com

Scope is remote private-network access through NetBird clients and access policies. Rebuild enrolment and resource rules and operate infrastructure. Cloudflare clientless application access, browser terminals and broader SASE services need separate evaluation; no full platform replacement claim.

Cloudflare Access today

Entry priceUSD 7 / seat / month

Pricing modelper-seat, billed annual

OwnerCloudflare, Inc.

Pay-as-you-go $7/user/month paid annually. Product page also offers a free plan for teams under 50 users; paid product remains distinct from open-source connector software. Source

Plans reviewed
Free Plan	Free
Pay-as-you-go	USD 84 / user / yr
Contract Plan	Quote only

What you would need to replace

Contextual policies combine identity groups, device posture, location and session controls for application access.
Clientless web access and browser-based SSH/VNC serve contractors and infrastructure sessions.
Service-token and mTLS authentication cover automated services and certificate-authenticated clients.

Global network footprint and integration with Cloudflare security/network services create scale and cross-product advantages; evaluation remains workload-specific.

Editorial assessments from the linked sources, not measured outcomes.

Category: VPN and private network access

What changed, what it costs, who it fits. One email a week, unsubscribe in one click.

Open-source alternatives

NetBird Community Edition

One SaaS, its open-source alternatives, once a week