Control access to your cloud-based and on-premises applications and VMs running on Google Cloud
Verify user identity and use context to determine if a user should be granted access
Work from untrusted networks without the use of a VPN
Implement a zero-trust access model
Secure access to apps in less time than it takes to implement a VPN. Let your developers focus on application logic, while IAP takes care of authentication and authorization.
End users point their web browser to an internet-accessible URL to access IAP-secured applications. No VPN client required.
Admins can create and enforce granular access-control policies based on attributes like user identity, device security status, and IP address.
IAP provides a single point of control for managing user access to web applications and cloud resources.
IAP can protect access to applications hosted on Google Cloud, other clouds, and on-premises.
Identity-Aware Proxy includes a number of features that can be used to protect access to Google Cloud hosted resources and applications hosted on Google Cloud at no charge. (Networking and compute charges apply for required load balancing. Information about load balancing pricing can be found in the Compute Engine documentation.)
Learn more about BeyondCorp Enterprise pricing and features.