No Installation Required
Give contractors and partners access from a current browser without deploying software to their devices.
Secure Third-Party AccessAgentless Application Access
Let contractors and partners in through a browser, with nothing to install
Customer problem
Third-Party Access Is Difficult to Control
Organisations rely on contractors, vendors, partners, auditors and temporary staff who need access to specific internal applications.
Traditional approaches often require VPN accounts, endpoint agents or publicly exposed applications to provide access to third parties.
This can provide more access than required, create deployment challenges and make third-party offboarding difficult.
- Giving contractors broad VPN or network access
- Installing software on devices the organisation does not control
- Providing access from unmanaged or personal devices
- Exposing internal applications to the public internet
- Managing temporary users and access periods
- Removing access quickly when engagements end
The COSGrid solution
Agentless Zero Trust Access for Internal Web Applications
SwiftZAccess provides browser-based access to authorised internal web applications based on identity and policy. Users authenticate through the organisation's identity provider and access only the applications permitted to them.
With SwiftZAccess, organisations can
- Give third parties application-specific access instead of network access
- Provide access without installing an endpoint agent
- Use existing SAML or OpenID Connect identity providers
- Revoke access immediately when an engagement ends
- Keep internal web applications unpublished to the internet
How It Works
Open the Application
The contractor or partner opens the application address using a current web browser. Nothing needs to be installed on the device.
Verify Identity
The user signs in through the organisation’s SAML or OpenID Connect identity provider, with MFA applied by the provider when configured.
Evaluate Policy
SwiftZAccess checks the user’s identity and applicable access policy, including configured context such as group, operating system, browser, location and time.
Provide Application-Specific Access
If authorised, the user reaches only the approved web application. Each request is checked against live policy until access is revoked.
Key Benefits
Application-Level Access
Provide access to specific internal web applications instead of placing third parties on the corporate network.
Identity-Based Zero Trust
Make access decisions using identity and policy rather than relying on network location.
Immediate Revocation
Revoke access centrally and stop an active session on its next request.
Reduced Internet Exposure
Keep internal web applications unpublished and reachable only through the access layer.
Centralised Access Management
Manage third-party access through identity, application policy and logged access decisions.
Traditional Third-Party Access vs SwiftZAccess
Traditional Third-Party Access
- Network-level VPN access
- May require software installation
- Broad network reach may be available
- Applications may need public exposure
- Access often depends on network location
- Separate processes for onboarding and offboarding
- Difficult to support unmanaged devices
COSGrid SwiftZAccess
- Application-level access
- Nothing installed on the device
- Access limited to authorised web applications
- Internal applications remain unpublished
- Access based on identity and policy
- Centralised access and revocation
- Designed for contractors, partners and BYOD
Use cases
Built for every access scenario
Give contractors access to specific internal applications
Give development contractors access to specific internal web applications without providing access to the wider corporate network. Access can be centrally revoked when the engagement ends.
Provide vendors with controlled application access
Allow vendors to access the web-based administration consoles they need for support without issuing a VPN account or providing broader network connectivity.
Enable secure access for business partners
Provide business partners with controlled access to approved internal portals using their existing corporate identity, while keeping the rest of the network inaccessible.
Support temporary users and personal devices
Give temporary staff and users on personal devices access to selected web applications without device enrollment, endpoint agents or software installation.
Who Is This For
Need secure third-party application access? See "Agentless access for contractors and partners"
- CISOs & Security Architects
- IT & Security Teams
- Application Owners
- Vendor & Procurement Teams
- Organisations Modernising VPN Access
FAQs
Have a question about ZTNA solutions?
How can contractors access internal applications without a VPN?
With SwiftZAccess, contractors open the application's address in a browser and sign in through your identity provider. Each request is checked against policy, and they reach only the approved web application. They are never placed on your network.
Does the contractor need to install anything? No. A current browser is enough. Nothing is installed on their device, so nothing has to be removed when the engagement ends.
What kinds of applications are supported? Internal web applications reached over HTTP or HTTPS, such as portals, admin consoles, ticketing systems and web front-ends of ERP and CRM systems. SSH, RDP and database access are not supported through SwiftZAccess today. For those, use agent-based MicroZAccess on managed devices.
