Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

AWS Systems Manager Session ManagerCloudflare AccessHashiCorp Boundary3 of 3 products

You can compare up to 3 products. Remove one to add another.

Side-by-side comparison of AWS Systems Manager Session Manager, Cloudflare Access, HashiCorp Boundary
Product	AWS Systems Manager Session Manager by AWS View product	Cloudflare Access by Cloudflare View product	HashiCorp Boundary by HashiCorp View product
Overview
What it is	AWS Systems Manager Session Manager: TLS 1.2 end-to-end encryption. Built for secure bastionless server administration. Compare Cloud Security alternatives.	Cloudflare Access by Cloudflare: multi-IdP support. Ideal for VPN replacement. Deployment: cloud. See how it compares with top Zero Trust alternatives.	Looking for Zero Trust software? HashiCorp Boundary by HashiCorp provides session recording and service discovery for Secure Access. Compare features and alternatives.
Product type	Managed Interactive Node Access Capability	Zero Trust Network Access (ZTNA) Platform	Zero Trust Identity-Based Infrastructure Access Gateway
Best for	Cross-industry, Enterprise, Technology, Financial Services, Healthcare, Public Sector	Financial Services, Healthcare, Technology, Enterprise, Retail, Cross-industry	DevOps, Cloud Engineering, FinTech, Enterprise IT, SaaS
Pricing
Pricing model	Contact Vendor	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes	Free trial: yes
Deployment
Deployment options	CloudHybridOn-Premise	SaaSCloud	CloudOn-Premise
Deployment details	Cloud; Hybrid; On-premises; AWS Cloud-native managed capability via outbound SSM agent	Cloud Edge / SASE Architecture; Cloud SaaS; Global Anycast Edge	Software; Cloud (HCP); Linux; Docker; Open-source software; HCP cloud managed; Self-hosted Linux
Data residency	Session metadata and logs stored in selected AWS Region	Global Anycast edge (330+ cities across 120+ countries)	Self-Hosted / HCP Cloud (US, EU, Global)
Key features
What it offers	Inbound-port-free shell access Browser and CLI interactive access IAM-based authentication and authorization TLS 1.2 end-to-end encryption Full session keystroke logging to S3 and CloudWatch Private port forwarding and tunneling Secure bastionless server administration Centralized access auditing	Identity-based access control Clientless browser SSH/VNC Mutual TLS authentication Device posture checking Outbound Cloudflare Tunnels multi-IdP support VPN replacement Secure contractor access	Zero trust infrastructure access Identity-based proxying Vault dynamic credential injection Session recording Service discovery SSH Security Zero Trust Secure Access
Platform & access
API access	API access: yes	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: yes	Mobile app: yes	Mobile app: no
Supported platforms	Amazon EC2 instanceson-premises serversVMware VMsIoT devices running SSM Agent	Web ApplicationsSSH TerminalsRDP ServersSaaS Applications	LinuxKubernetesDockerAWSAzureGCPDatabasesSSH+1 more
Compliance	SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High	SOC 2 Type IIISO/IEC 27001PCI-DSSHIPAAFedRAMP Moderate	SOC 2 Type IIISO 27001GDPRHIPAA
Integrations & coverage
Integrations	AWS IAMAWS CloudTrailAmazon CloudWatch LogsAmazon S3AWS KMSAWS Systems ManagerAWS Organizations	OktaMicrosoft Entra IDGoogle WorkspaceCrowdStrikeGitHubGitLab	HashiCorp VaultTerraformConsulOktaEntra IDAWSKubernetes
Industries	Cross-industryEnterpriseTechnologyFinancial ServicesHealthcarePublic Sector	Financial ServicesHealthcareTechnologyEnterpriseRetailCross-industry	DevOpsCloud EngineeringFinTechEnterprise ITSaaS
Regions	Global (all AWS Regions)	Global (330+ edge locations)	GlobalUSEU
Vendor
Company	AWS	Cloudflare	HashiCorp
Headquarters	Seattle, Washington, USA	San Francisco, California, USA	San Francisco, California, USA
Company size	100,000+	5,000+	250,000+ (parent: IBM)
Founded	2006	2010	2012

AWS Systems Manager Session Manager

by AWS

View product

Cloudflare Access

by Cloudflare

View product

HashiCorp Boundary

by HashiCorp

View product

Overview

What it is

AWS Systems Manager Session Manager

AWS Systems Manager Session Manager: TLS 1.2 end-to-end encryption. Built for secure bastionless server administration. Compare Cloud Security alternatives.

Cloudflare Access

Cloudflare Access by Cloudflare: multi-IdP support. Ideal for VPN replacement. Deployment: cloud. See how it compares with top Zero Trust alternatives.

HashiCorp Boundary

Looking for Zero Trust software? HashiCorp Boundary by HashiCorp provides session recording and service discovery for Secure Access. Compare features and alternatives.

Product type

AWS Systems Manager Session Manager

Managed Interactive Node Access Capability

Cloudflare Access

Zero Trust Network Access (ZTNA) Platform

HashiCorp Boundary

Zero Trust Identity-Based Infrastructure Access Gateway

Best for

AWS Systems Manager Session Manager

Cross-industry, Enterprise, Technology, Financial Services, Healthcare, Public Sector

Cloudflare Access

Financial Services, Healthcare, Technology, Enterprise, Retail, Cross-industry

HashiCorp Boundary

DevOps, Cloud Engineering, FinTech, Enterprise IT, SaaS

Pricing

Pricing model

AWS Systems Manager Session Manager

Contact Vendor

Cloudflare Access

Contact Vendor

HashiCorp Boundary

Contact Vendor

Free trial

AWS Systems Manager Session Manager

Cloudflare Access

HashiCorp Boundary

Deployment

Deployment options

AWS Systems Manager Session Manager

CloudHybridOn-Premise

Cloudflare Access

SaaSCloud

HashiCorp Boundary

CloudOn-Premise

Deployment details

AWS Systems Manager Session Manager

Cloud; Hybrid; On-premises; AWS Cloud-native managed capability via outbound SSM agent

Cloudflare Access

Cloud Edge / SASE Architecture; Cloud SaaS; Global Anycast Edge

HashiCorp Boundary

Software; Cloud (HCP); Linux; Docker; Open-source software; HCP cloud managed; Self-hosted Linux

Data residency

AWS Systems Manager Session Manager

Session metadata and logs stored in selected AWS Region

Cloudflare Access

Global Anycast edge (330+ cities across 120+ countries)

HashiCorp Boundary

Self-Hosted / HCP Cloud (US, EU, Global)

Key features

What it offers

AWS Systems Manager Session Manager

Inbound-port-free shell access
Browser and CLI interactive access
IAM-based authentication and authorization
TLS 1.2 end-to-end encryption
Full session keystroke logging to S3 and CloudWatch
Private port forwarding and tunneling
Secure bastionless server administration
Centralized access auditing

Cloudflare Access

Identity-based access control
Clientless browser SSH/VNC
Mutual TLS authentication
Device posture checking
Outbound Cloudflare Tunnels
multi-IdP support
VPN replacement
Secure contractor access

HashiCorp Boundary

Zero trust infrastructure access
Identity-based proxying
Vault dynamic credential injection
Session recording
Service discovery
SSH Security
Zero Trust
Secure Access

Platform & access

API access

AWS Systems Manager Session Manager

Cloudflare Access

HashiCorp Boundary

Single sign-on (SSO)

AWS Systems Manager Session Manager

Cloudflare Access

HashiCorp Boundary

Role-based access (RBAC)

AWS Systems Manager Session Manager

Cloudflare Access

HashiCorp Boundary

Multi-tenant

AWS Systems Manager Session Manager

Cloudflare Access

HashiCorp Boundary

Mobile app

AWS Systems Manager Session Manager

Cloudflare Access

HashiCorp Boundary

Supported platforms

AWS Systems Manager Session Manager

Amazon EC2 instanceson-premises serversVMware VMsIoT devices running SSM Agent

Cloudflare Access

Web ApplicationsSSH TerminalsRDP ServersSaaS Applications

HashiCorp Boundary

LinuxKubernetesDockerAWSAzureGCPDatabasesSSH+1 more

Compliance

AWS Systems Manager Session Manager

SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High

Cloudflare Access

SOC 2 Type IIISO/IEC 27001PCI-DSSHIPAAFedRAMP Moderate

HashiCorp Boundary

SOC 2 Type IIISO 27001GDPRHIPAA

Integrations & coverage

Integrations

AWS Systems Manager Session Manager

AWS IAMAWS CloudTrailAmazon CloudWatch LogsAmazon S3AWS KMSAWS Systems ManagerAWS Organizations

Cloudflare Access

OktaMicrosoft Entra IDGoogle WorkspaceCrowdStrikeGitHubGitLab

HashiCorp Boundary

HashiCorp VaultTerraformConsulOktaEntra IDAWSKubernetes

Industries

AWS Systems Manager Session Manager

Cross-industryEnterpriseTechnologyFinancial ServicesHealthcarePublic Sector

Cloudflare Access

Financial ServicesHealthcareTechnologyEnterpriseRetailCross-industry

HashiCorp Boundary

DevOpsCloud EngineeringFinTechEnterprise ITSaaS

Regions

AWS Systems Manager Session Manager

Global (all AWS Regions)

Cloudflare Access

Global (330+ edge locations)

HashiCorp Boundary

GlobalUSEU

Vendor

Company

AWS Systems Manager Session Manager

AWS

Cloudflare Access

Cloudflare

HashiCorp Boundary

HashiCorp

Headquarters

AWS Systems Manager Session Manager

Seattle, Washington, USA

Cloudflare Access

San Francisco, California, USA

HashiCorp Boundary

San Francisco, California, USA

Company size

AWS Systems Manager Session Manager

100,000+

Cloudflare Access

5,000+

HashiCorp Boundary

250,000+ (parent: IBM)

Founded

AWS Systems Manager Session Manager

2006

Cloudflare Access

2010

HashiCorp Boundary

2012