One platform where others
need a stack of point products.
Physical diodes, legacy VPNs, and multi-vendor stacks each solve one slice of the problem - and leave gaps between them. truePass is a single software-defined Zero Trust platform built on patented Reverse Access™, replacing that patchwork with one architecture, one policy model, and one audit trail. Here's how it compares.
truePass Gravity vs. physical data diodes.
Physical diodes enforce one-way flow at the hardware level. They solve yesterday's problem - moving data in one direction across an air gap - but modern OT needs interactive, identity-aware connectivity. truePass Gravity delivers a software-defined virtual diode that preserves isolation while adding everything a diode can't do.
| Capability | Physical data diode | truePass Gravity |
|---|---|---|
| Isolation principle | One-way at the wire (laser/optical) | OT-initiated outbound only — software-defined |
| Interactive TCP (RDP/SSH/Web/API) | Not supported - replication only | Full interactive sessions under policy |
| Identity & access control | None - sees direction, not users | Per-request: AD / MFA / RBAC |
| File transfer & content control | One-way transfer only | Secure proxy + CDR sanitization |
| Audit & investigation | Logs scattered across components | Unified audit trail, single pane of glass |
| Deployment | Hardware install, weeks–months | Software, deploys in days |
| Zero Trust compliant | No - cannot verify identity | Yes — identity, policy, audit |
The takeaway: A physical diode isn't Zero Trust compliant - it controls direction but never identity. Gravity keeps the isolation principle and adds interactive access, identity enforcement, and a unified audit trail, with no hardware to install. See the Replace Diodes use case →
truePass Gate vs. legacy VPN.
A VPN puts a user on the network after a single authentication, leaving an inbound port exposed and a flat tunnel to ride. truePass Gate replaces that model with clientless or client-based Zero Trust access to individual applications - nothing exposed, nothing standing.
| Capability | Legacy VPN | truePass Gate |
|---|---|---|
| Network exposure | Inbound VPN port, publicly scannable | No inbound ports - outbound 443 TLS only |
| Access scope | Full network once connected | One application at a time |
| Identity enforcement | Network-level, at the tunnel | Per-request, with MFA every session |
| Lateral movement | Flat tunnel - easy to pivot | No lateral path from a session |
| Client footprint | Agent required on every device | Clientless or client-based - your choice |
| App visibility to attackers | Services discoverable behind tunnel | Apps invisible until identity proven |
| Audit trail | Partial, tunnel-level | Per-user, per-session, SIEM-ready |
The takeaway: A VPN grants network access; Zero Trust grants application access. Gate removes the exposed port, the flat tunnel, and the standing access a VPN depends on. See the Replace VPN use case →
truePass platform vs. multi-vendor stacks.
The common alternative is assembling point products - a diode here, a VPN there, a separate PAM, a separate segmentation tool, a separate file-security gateway. Each has its own console, its own policy model, and its own logs. truePass delivers the same capabilities as one platform, activated as modules.
| Dimension | Multi-vendor stack | truePass platform |
|---|---|---|
| Vendors to manage | Many - contracts, renewals, support | One — add capability via modules |
| Policy model | Different per product | One unified Zero Trust policy |
| Audit & visibility | Scattered logs, manual correlation | Single audit trail across modules |
| Integration gaps | Seams between tools = attack surface | No seams - one architecture |
| Underlying technology | Mixed, varying maturity | All on patented Reverse Access™ |
| Deployment & change | Coordinate across vendors | Activate modules, no re-architecture |
| Total cost of ownership | Stacked licensing & ops overhead | Consolidated - clearer ROI |
The takeaway: Every seam between products is a place for policy to drift and attackers to hide. One platform on one patented architecture removes the seams - and the overhead of managing a dozen vendors. Explore the truePass platform →
One architecture. No inbound ports. No seams.
Whatever you're replacing, the same three principles set truePass apart.
Patented Reverse Access™
Outbound-only connectivity means no inbound ports and no exposed services - an architecture patented in 22 countries that competitors can't replicate.
Identity at every request
Not direction, not a subnet, not a one-time tunnel login - every session and action is verified against identity, device, and context, with a unified audit trail.
One platform, not a stack
Gravity, Gate, Grid, and Guard share one policy model and one console. Add capability by activating modules - never by adding vendors.
One platform.
Not a stack of point products.
A 30-minute conversation with our architects. We'll map what you're replacing - diodes, VPNs or a multi-vendor stack - to the right combination of truePass modules, and propose a tailored Proof of Concept.