Invisily Zero Trust Network Access

Digital transformation has dissolved the traditional corporate network perimeter as organizations become hyperconnected across multiple cloud services and increasingly rely on mobile and remote work. In this environment, always-on secure connectivity is essential for business continuity, yet legacy controls such as firewalls and VPNs struggle to deliver adequate security, compliance, scalability, and productivity. Zero Trust has therefore accelerated as a strategic model that removes implicit trust, enforces least privilege, and reduces attack surface—an evolution further sped up by the pandemic and reinforced by regulatory mandates in places like the United States.

Zero Trust Network Access (ZTNA) operationalizes this approach by creating an identity- and context-based overlay on top of untrusted networks, hiding applications from unauthorized users and enforcing dynamic, fine-grained policies tied to authenticated identities, trusted devices, and specific applications. Compared to VPNs, ZTNA offers a more frictionless user experience and broader architectural flexibility, supporting multi-cloud connectivity, application migration, and agentless access, while giving administrators clearer control/data plane separation and centralized security visibility.

The paper evaluates Invisily, a new ZTNA platform from Ebryx, built on in-house Software-Defined Perimeter technology that “cloaks” infrastructure and allows access only through mutually authenticated point-to-point tunnels. Invisily differentiates through strong device posture management, hardware-attribute-based device identification, a proprietary Single Packet Authorization variant, dynamic inventory-driven policy decisions, and risk scoring that can revoke sessions in real time. It also supports multiple deployment models (including air-gapped) and offers optional Trusted Compute Base-based gateways/bridges plus an embeddable SDK. However, product maturity is constrained by UI and onboarding limitations (notably CSV-only onboarding, limited multi-tenancy, and one user per device), and its microsegmentation feature is positioned mainly for basic SME use cases.

• Digital transformation has made operating in nearly every industry difficult without modern connectivity and security approaches.
• Traditional tools such as firewalls and VPNs no longer ensure adequate security, compliance, scalability, or productivity in many environments.
• Zero Trust adoption accelerated significantly during the pandemic.
• Regulations in the United States mandate Zero Trust architectures for government agencies.
• KuppingerCole’s Leadership Compass on ZTNA covers 30 different ZTNA solutions.
• Ebryx is headquartered in Greater Boston, USA, and was founded in 2008.
• By 2015, Ebryx was established as a managed security services provider with experience in malware research and security product engineering.
• Invisily can be deployed on-premises or offered as SaaS and includes managed security services.
• Invisily supports scheduled access policies that can restrict access by date or time.
• The platform’s only supported device onboarding method is CSV file upload.

• “Always-on, reliable, and secure network connectivity is a critical factor of business continuity.”
• “As the very notion of the corporate network perimeter has all but disappeared, traditional security tools like firewalls and virtual private networks (VPN) can no longer ensure an adequate level of security, compliance, scalability, or productivity, forcing businesses to look for more modern alternatives.”
• “Zero Trust (ZT) has gained massive traction in recent years as a strategic approach that eliminates any implicit trust between users and resources, strictly enforces the principle of the least privilege, and minimizes the overall attack surface.”
• “By creating a logical identity- and context-based overlay over existing untrusted networks and preventing discovery and access of applications for unauthorized users, Zero Trust Network Access (ZTNA) solutions enforce dynamic, fine-grained access policies bound to specific authenticated identities, trusted endpoint devices, and specific applications and other resources.”
• “This approach not only ensures continuous visibility, governance, and compliance for accessing sensitive data, but also prevents lateral movement of malware and malicious actors, substantially reducing the risk of data breaches and ransomware attacks.”
• “Compared to VPN solutions, ZTNA architectures offer a much more frictionless and productive user experience for users…”
• “Software-defined perimeter is a security architecture that uses a software networking overlay over existing, potentially hostile networks to create a virtual perimeter around each application or other network resource.”
• “This way, all resources stay essentially invisible to the outside world and can only be accessed via a secure point-to-point tunnel on a ‘need to know’ basis…”
• “Interestingly, instead of defining declarative policies for device posture, administrators can simply nominate any existing device as a reference, and any deviation from its configuration in another endpoint will be considered a policy violation, triggering an appropriate response measure.”
• “While Invisily literally ticks all the boxes in almost every imaginable list of requirements for a sophisticated ZTNA platform, the product has not yet reached full maturity, which is clearly visible in multiple small but annoying UI shortcomings.”