# GoodAccess — Business VPN & Zero Trust Access

GoodAccess by GoodAccess s.r.o. holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-06. Provenance: EU-Made; sovereignty: not determined.

- Vendor: GoodAccess s.r.o. (https://www.goodaccess.com)
- Category: [Business VPN & Zero Trust Access](https://whats-best.ai/software/business-vpn.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/business-vpn/goodaccess
- Alternatives: https://whats-best.ai/software/business-vpn/goodaccess/alternatives ([markdown](https://whats-best.ai/software/business-vpn/goodaccess/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-06 · oldest source captured 2026-11-05

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: GoodAccess s.r.o.
- Headquarters: Not stated on the vendor’s pages as of 5 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 5 Nov 2026
- Free plan: Yes, per the vendor’s own page [S10]

## The panel's verdict

GoodAccess is a business VPN and zero trust network access platform from GoodAccess s.r.o., a Czech company. It scores highest on identity and policy: single sign-on with nine identity providers, SCIM provisioning, enforced MFA, and a device posture check that disconnects devices when policy changes. Access and connectivity and visibility and audit follow: dedicated gateways with static IPs in 35+ locations, per-application Access Cards, and logs with published fields streaming to named SIEMs over syslog with TLS at one-minute intervals. Sovereignty scores lowest at 2-4: the contracting entity is proven, but we found no public information on where account data and logs are stored or processed, on subprocessors, or on a published data processing agreement — a spread in penalty, not facts. Architecture and assurance sits at 5: SOC 2 and ISO 27001 are stated, and we found no public information on published audit reports. Deployment and administration scores 5-6; pricing transparency scores 6-7, and the captured pages give different figures for the Premium per-user price, $11 and $14.

**Speaks for it:**
- Access Cards assign permissions per application on a least-privilege basis, with single sign-on for nine named identity providers, SCIM provisioning and enforced MFA with biometrics.
- Dedicated cloud gateways with unique static IPs in 35+ locations serve client apps for Windows, Mac, Android, iOS, Linux and Chrome OS.
- Device posture checks cover thirteen restriction types from disk encryption to running processes and disconnect non-compliant devices when policy changes.
- Access, admin, threat blocker and posture logs with published fields stream to named SIEMs including Microsoft Sentinel and Splunk over syslog with TLS at one-minute intervals.
- Pricing is largely public: Essential at $7 per user per month with a minimum of 5 users, dedicated gateways at $49 per month, additional connectors at $29 per month, a free Starter plan, a 14-day trial of all premium features with no credit card required, and 20% saved with annual billing.

**Held against it:**
- Sovereignty scores span 2 to 4, and we found no public information on where account data, identities and connection logs are stored or processed, who the subprocessors are, or a published data processing agreement.
- Architecture and assurance scores sit at 5: SOC 2 and ISO 27001 are stated, and we found no public information on published audit reports, a bug bounty, or a public status page with incident history.
- Deployment and administration scores span 5 to 6, and we found no public information on Terraform or configuration as code, granular admin roles, a multi-tenant console for service providers, or a self-hosted edition; the platform is described as 100% SaaS-delivered.
- The captured pages give different figures for the Premium per-user price ($11 and $14), the Enterprise tier is On Request with a minimum of 50 users, and we found no public information on VAT treatment or minimum term.
- Log retention is stated as 90 days on the paid plans with custom retention on Enterprise, and we found no public information on tamper-evidence or retention of a year or more.

**Best for:**
- You need to retire a firewall VPN with per-application access and a static IP your suppliers can whitelist.
- You run a team of five or more users and want a 100% SaaS service with MSI client deployment through MDM.
- You need continuous device posture enforcement on freelancers' own laptops, from disk encryption to running processes.
- You need access logs with published fields streamed to Microsoft Sentinel or Splunk, with 90-day retention.

**Avoid if:**
- Your procurement requires a published data processing agreement, named subprocessors and stated data residency before signing; sovereignty scored 2 to 4.
- You need published audit reports or a public status page with incident history for a regulated review; architecture and assurance scored 5.
- You need log retention of a year or more out of the box; stated retention is 90 days on the paid plans, with a custom option on Enterprise.
- You need configuration as code or a self-hosted edition; the platform is described as 100% SaaS-delivered.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The IT Lead | The DevOps Engineer | The MSP Technician | The Operations Manager | The Information Security Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Access model & connectivity | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Identity, access policy & device posture | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 4/5 | 3.5/5 |
| Logs, audit trail & incident response | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 3.5/5 | 3.5/5 |
| Deployment, API & administration | 2.5/5 | 2.5/5 | 3/5 | 2.5/5 | 3/5 | 3/5 |
| Architecture, reliability & security assurance | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| European sovereignty | 1.5/5 | 1.5/5 | 1.5/5 | 1/5 | 1/5 | 2/5 |
| Pricing transparency | 3/5 | 3.5/5 | 3/5 | 3.5/5 | 3/5 | 3.5/5 |
| **Weighted verdict** | **3/5** | **3/5** | **3/5** | **3/5** | **3/5** | **3/5** |

### The judges

- **The IT Lead** (v1.0): Head of a three-person IT team at a 140-person mechanical engineering firm with two plants and a sales office in Vienna. The VPN still runs on the firewall, and every update of it is a weekend. Wants a client that installs through Intune and connects on its own, sign-in with Microsoft Entra so a leaver loses access the same day, the ERP and the file server reachable without opening the whole network, a fixed IP for the supplier portal, and a price per user that survives the next budget round.
- **The DevOps Engineer** (v1.0): Platform engineer at a sixty-person software company with servers at Hetzner, a Kubernetes cluster on AWS and a bastion host everyone shares a key for. Wants a mesh that reaches every server and cluster without inbound ports, access policies kept in Git and applied with Terraform, SSH access tied to the identity provider, connectors that run as containers, and a published architecture that says what the vendor's relays can see.
- **The MSP Technician** (v1.0): Senior technician at an IT service provider in Hamburg that looks after thirty clients, from tax advisers to a dental chain. Each client has its own remote access, set up by whoever was on site that year. Wants one console with a tenant per client, gateways and users added in minutes, access logs a client can be shown after an incident, billing per tenant, and prices per user that can be quoted without calling the vendor first.
- **The Operations Manager** (v1.0): Runs operations at a fifty-person consultancy where a third of the work is done by freelancers on their own laptops and the rest of the team travels to client sites. Has no IT department, only an external provider billed by the hour. Wants each freelancer to reach one project system and nothing else, access that ends with the contract, a setup a non-specialist can follow, and no call to the helpdesk from a hotel lobby.
- **The Information Security Officer** (v1.0): Information security officer at a regional energy supplier that falls under NIS2 and was asked by its auditor who could reach the control systems last year. Wants access granted per resource, not per network, device checks before a connection, every access and admin change in a log that reaches the SIEM, an independent audit of the product, and the identities and logs kept in Europe by a vendor whose subprocessors are listed.
- **The Skeptic** (v1.0): Has seen "zero trust" on a VPN that still drops every user into the whole office network, "no logs" from a vendor that keeps every connection for a year, and a remote access tool that locked out the whole company when its own control plane went down. Asks who can see the traffic and the metadata, what keeps working when the vendor is offline, whether the audit was published or only announced — and whether the network could be moved to a self-hosted server.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Certifications: SOC2 · ISO 27001 · GDPR · HIPAA [S3]
- Company posture: yes · yes · yes · yes [S12]
- Frameworks supported: NIS2 · GDPR · HIPAA · SOC2 · ISO 27001 [S12]
- ISO 27001 case study: Case study: covers up to 70% of technical security requirements of ISO 27001 (Creative Dock) [S6]
- ISO 27001 case study: Vendor claims GoodAccess covered up to 70% of technical ISO 27001 technical security requirements in a case study [S14]
- Regulations supported: GDPR · HIPAA · PCI-DSS · SOC2 · NIS2 [S16]
- Standards supported: SOC 2 · NIS 2 · ISO 27001 · HIPAA [S5]
- Supported frameworks: NIS2 · GDPR · HIPAA · SOC2 · ISO 27001 [S1]
- Vulnerability disclosure: GoodAccess positions itself as complementing other security solutions, not replacing them [S22]

**Hosting**
- Gateway locations: 35 [S17]
- Platform apps: Windows · Mac · Android · iOS · Linux · Chrome OS [S7]

**Integrations**
- API activity monitoring: yes [S20]
- API auth header: Bearer token in Authorization header [S20]
- API integration: yes [S15]
- API postman docs: yes [S20]
- API test endpoint: https://integration.goodaccess.com/api/v1/test-connection · yes [S20]
- API token management: API tokens generated in Control Panel under Settings > API Integration with scopes, expiration, allowed IP addresses and activity monitoring [S20]
- API token scopes: yes · yes · yes [S20]
- Cloud platforms: AWS · Microsoft Azure · Google Cloud · OVHcloud [S1]
- Gateway count: 35+ [S1]
- Identity providers: Microsoft Entra ID · Okta · Google Workspace · JumpCloud [S1]
- Microsoft entra id SSO SCIM: SSO_SAML_and_SCIM · yes [S15]
- Page: yes [S2]
- Resources available: Product tour · Blog · Support portal · Customers · Integrations · Whitepapers · SLA [S10]
- Security operations: Microsoft Sentinel · Splunk · CrowdStrike · Elastic · Palo Alto Cortex [S1]
- Siem integration: yes [S15]
- SSO providers: yes · yes · yes · Google · Okta · MS Entra ID · SAML [S4]
- Supported apps: Windows · Mac · Android · iOS · Linux · Chrome OS [S6]

**Legal**
- Aup last updated: 2023-02-22 [S11]
- Copyright: 2026 · GoodAccess [S10]
- Documents available: Acceptable Usage Policy · Privacy Policy · Terms and Conditions · SLA · Affiliate Program Terms of Service [S11]
- Dsa contact: yes [S11]
- Dsa contact: DSA Single Point of Contact link in footer [S12]
- Dsa contact: yes [S22]
- Dsa contact: yes [S2]
- Operating entity: GoodAccess s.r.o. · Czech · 03513386 [S11]
- Policies: Acceptable Usage Policy · Term & Conditions · Privacy Policy · DSA Single Point of Contact [S10]
- Terms URL: https://www.goodaccess.com/legal [S11]

**Pricing**
- Annual discount: 20 [S9]
- API integration plans: yes · Premium [S20]
- Enterprise plan: On Request · 24/7 · 50 [S3]
- Enterprise price: on_request · 50 [S9]
- Essential plan: 5 · 7 · 49 [S3]
- Free account no card: no [S12]
- Free tier: free account includes configuration guides and onboarding support from presales team · yes [S10]
- Free trial: 14 [S3]
- Free trial: yes [S8]
- Free trial: 14 · no [S7]
- Free trial: 14 · all premium features · no [S6]
- Free trial: 14 · no [S17]
- Free trial: yes [S2]
- Msi deployment plan requirement: Essential plan and higher [S19]
- No card free trial: no · yes [S22]
- No card required: no [S3]
- No card required: yes · yes [S2]
- Premium features: Clouds & Branch connectors · Custom domain names · Site-to-site connectivity · Forced Always-on [S3]
- Premium plan: 5 · 11 · 49 [S3]
- Premium price: 5 · 14 · 49 [S9]
- Premium secure shield: Device posture check · Zero Trust Access Control · Single sign-on (SSO) · SCIM · Custom domain blocking · System-level access logs [S3]
- Premium support: chat · email · yes [S3]
- Siem plan availability: yes · Premium [S18]
- SSO SCIM plan requirement: Premium [S15]
- Trial: no · 14 [S5]
- Trial: 14 · no [S9]
- Trial: all premium features · 14 · no [S14]
- Trial 14 days: 14 · yes · no [S4]

**Product**
- Access cards: Access Cards assign permissions to particular SaaS apps, services, servers, internal systems [S12]
- Access cards: Access Cards · per-app permission assignment [S22]
- Access cards multiple: yes [S4]
- Access cards SSO providers: GSuite · Okta · Active Directory/LDAP [S3]
- Access logging: logs not available to anyone except customer · GDPR · HIPAA · SOC 2 [S4]
- Access logs: Detailed access logs of network and per-application access [S12]
- Access logs: yes [S22]
- Access logs: Access logs [S2]
- Access logs compliance: yes [S3]
- Access logs compliance frameworks: GDPR · SOC 2 · HIPAA · NIS2 [S7]
- Acronis integration: yes [S18]
- Additional gateway available: yes [S13]
- Admin role: Admin manages and monitors the company SDP via ZTNA controls [S21]
- Apps: Windows · Mac · Android · iOS · Linux · Chrome OS [S1]
- Apps platforms: iOS · macOS · Android · Windows · ChromeOS [S12]
- Apps platforms: iOS · macOS · Android · Windows · ChromeOS [S22]
- Authentication capabilities: MFA · PIN & biometric enforced MFA · SSO · multiple SSO providers · SCIM · IP restriction for control panel [S9]
- Auto updates property: AUTO_UPDATES · true · false · yes [S19]
- Azure user permission requirement: Azure users require explicit access permissions to GoodAccess to log in [S15]
- Branch connectors protocols: IPsec · IKEv2 · OpenVPN · yes [S3]
- Case study creative dock: 70 [S5]
- Case study ISO 27001: Creative Dock case study: covered up to 70% of ISO 27001 technical security requirements [S17]
- Central dashboard: Central dashboard [S2]
- Centralized dashboard: yes [S1]
- Changelog: Product changelog exists for Windows and macOS [S8]
- Client apps: Windows · Mac · Android · iOS · Linux · Chrome OS [S10]
- Client apps platforms: Windows · Mac · Android · iOS · Linux · Chrome OS [S2]
- Client platforms: Windows · Mac · Android · iOS · Linux · Chrome OS [S17]
- Cloud access whitelisting: yes · Cloud access via IP whitelisting [S14]
- Cloud connector addon: 29 [S9]
- Cloud infrastructure: yes [S17]
- Company sections: About us · Careers · Newsroom · Contact us · Partner Programs · yes · start in 3 easy steps [S10]
- Compliance frameworks: NIS2 · GDPR · HIPAA · SOC2 · ISO 27001 [S22]
- Compliance frameworks supported: GDPR, SOC 2, HIPAA, NIS2 [S17]
- Connector protocols: Cloud/Branch Connector connects private networks to Gateway [S21]
- Customer count: 1300 [S22]
- Customers count: 1300 [S12]
- Dashboard: Real-time overview of network, members, blocked threats, device risks [S7]
- Dashboard: Real-time dashboard of network, members, threats, device risks [S6]
- Dashboard: yes · Real-time dashboard [S14]
- Dashboard: Real-time overview of network, members, blocked threats, device risks [S17]
- Dedicated ip reservation: Dedicated IP reserved for customer use only, persists after logout [S14]
- Dedicated vpn gateway: yes · Dedicated VPN gateway [S14]
- Dedicated vpn gateway: Dedicated VPN gateway [S2]
- Default protocol property: DEFAULT_PROTOCOL · openvpn · ikev2 · openvpn [S19]
- Deployment scenarios: automatic updates · manual updates [S19]
- Deployment time: 1 hour · no [S1]
- Description: GoodAccess is a product with Getting Started docs covering what it is, architecture overview, free trial signup, and app download [S8]
- Device posture check: yes [S9]
- Device posture check: Device posture check [S2]
- Device posture check all criteria required: yes [S5]
- Device posture check criteria: lock screen protection · OS type and version · active antivirus software · specified registry key [S5]
- Device posture check default policy: yes · no · yes · yes [S16]
- Device posture check description: Detects non-compliant devices and blocks entry; custom device policy enforced in real-time [S5]
- Device posture check email notification: Team Owner · all Admins · yes [S16]
- Device posture check failure actions: make a log entry · deny access & make a log entry [S16]
- Device posture check failure behavior: yes · yes · yes [S5]
- Device posture check frequency: yes · yes · yes [S5]
- Device posture check integration: yes · yes [S5]
- Device posture check monitoring: yes [S16]
- Device posture check no hardware: no [S5]
- Device posture check plan: Premium [S16]
- Device posture check platforms: Windows · macOS · iOS · iPadOS · Android · Linux [S5]
- Device posture check policy change enforcement: yes [S5]
- Device posture check policy enforcement: yes [S16]
- Device posture check reassessment interval: 5 [S16]
- Device posture check restrictions: Supported OS versions only · Supported Client App versions only · Disk encryption enabled · Lock screen with authentication · Running Antivirus · Updated Antivirus · Firewall enabled · SMBv1 disabled · Part of a domain · Registry key · Fil… [S16]
- Device posture check scope: individual Members · Groups · all Team Members [S16]
- Device posture check supported os: Windows · Linux · macOS · iPadOS · iOS · Android [S16]
- Dns filtering: yes [S3]
- Dns filtering: DNS filtering [S2]
- Dns protection: yes · DNS protection / filtering [S14]
- Domain level policy enforcement: Domain-level blocking of malicious/banned websites and services [S4]
- Download platforms: Windows · Mac · Android · iOS · Linux · Chrome OS [S5]
- Encryption: Strong transit encryption for data and user identity [S12]
- Encryption: encryption in transit · yes [S22]
- Encryption https tcp headers: Strong encryption at HTTPS and TCP header level; per-session connections [S4]
- Feature list: Dedicated VPN gateway · Static IP address · Central dashboard · Zero-trust access control · DNS filtering · Multi-factor authentication · Network access control · Split tunneling · Access logs · IP whitelisting · SSO · Device posture check [S4]

**Support**
- Docs: yes [S1]
- Enterprise phone 24 7: enterprise · 24/7 [S9]
- Onboarding: yes [S3]
- Onboarding: no · yes [S7]
- Onboarding: yes [S17]
- Onboarding trial: configuration guides · onboarding support · presales team · 14 [S22]
- Portal: yes [S2]
- Presales onboarding: yes · yes [S10]
- SLA: yes [S1]
- SLA: SLA page referenced in footer [S2]
- SLA link: yes [S13]
- SLA page: An SLA page is listed in Resources navigation [S12]
- Solution architect free: yes · Solution Architect configuration help [S16]
- Troubleshooting: Documentation includes FAQ and Troubleshooting sections [S8]

119 more facts on the canonical page: https://whats-best.ai/software/business-vpn/goodaccess

## Questions

### Is GoodAccess European?

Yes. whats-best.ai classifies GoodAccess as EU-Made.

### Where does GoodAccess store data?

Not stated on the vendor’s pages as of 5 Nov 2026.

### Does GoodAccess have a free plan?

Yes. GoodAccess has a free plan, per [the vendor’s page captured 5 Nov 2026](https://whats-best.ai/evidence/19066).

### What are the best alternatives to GoodAccess?

As of 6 Nov 2026, the panel rates [Defguard (3.5/5)](https://whats-best.ai/software/business-vpn/defguard), [Firezone (3.5/5)](https://whats-best.ai/software/business-vpn/firezone) and [Tailscale (3.5/5)](https://whats-best.ai/software/business-vpn/tailscale) highest among the other 12 Business VPN & Zero Trust Access products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Defguard](https://whats-best.ai/software/business-vpn/defguard) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [GoodAccess alternatives](https://whats-best.ai/software/business-vpn/goodaccess/alternatives).

## Head-to-head

- [GoodAccess vs Twingate](https://whats-best.ai/compare/goodaccess-vs-twingate.md)

## What this page leaves out

- 58 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 11 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown.

## Sources

- [S1] Vendor homepage: https://www.goodaccess.com/ (checked 2026-11-05)
- [S2] Features page: https://www.goodaccess.com/features (checked 2026-11-05)
- [S3] Features page (zero trust network access): https://www.goodaccess.com/platform/zero-trust-network-access (checked 2026-11-05)
- [S4] Features page (access control): https://www.goodaccess.com/features/zero-trust-access (checked 2026-11-05)
- [S5] Features page (device posture): https://www.goodaccess.com/features/device-posture-check (checked 2026-11-05)
- [S6] Features page (single sign-on): https://www.goodaccess.com/features/sso (checked 2026-11-05)
- [S7] Features page (access logs): https://www.goodaccess.com/features/access-logs (checked 2026-11-05)
- [S8] Documentation: https://support.goodaccess.com/ (checked 2026-11-05)
- [S9] Pricing page: https://www.goodaccess.com/pricing (checked 2026-11-05)
- [S10] About page: https://www.goodaccess.com/company (checked 2026-11-05)
- [S11] Terms, privacy policy and SLA (names the operating company): https://www.goodaccess.com/legal (checked 2026-11-05)
- [S12] Security / trust page: https://www.goodaccess.com/security-compliance (checked 2026-11-05)
- [S13] Access model & connectivity — found from sitemap: https://www.goodaccess.com/goodaccess-gateway-locations/ (checked 2026-11-05)
- [S14] Access model & connectivity — found from sitemap: https://www.goodaccess.com/features/dedicated-ip/ (checked 2026-11-05)
- [S15] Identity, access policy & device posture — found from sitemap: https://support.goodaccess.com/configuration-guides/features/sso-scim/microsoft-entra-id (checked 2026-11-05)
- [S16] Identity, access policy & device posture — found from sitemap: https://support.goodaccess.com/configuration-guides/features/zero-trust-access-control/device-posture-check (checked 2026-11-05)
- [S17] Logs, audit trail & incident response — found from sitemap: https://www.goodaccess.com/features/access-logs/ (checked 2026-11-05)
- [S18] Logs, audit trail & incident response — found from sitemap: https://support.goodaccess.com/configuration-guides/features/siem-integration (checked 2026-11-05)
- [S19] Deployment, API & administration — found from sitemap: https://support.goodaccess.com/configuration-guides/features/msi-deployment (checked 2026-11-05)
- [S20] Deployment, API & administration — found from sitemap: https://support.goodaccess.com/configuration-guides/features/api-integration (checked 2026-11-05)
- [S21] Architecture, reliability & security assurance — found from sitemap: https://support.goodaccess.com/getting-started/2.-architecture-overview (checked 2026-11-05)
- [S22] Architecture, reliability & security assurance — found from sitemap: https://www.goodaccess.com/security-compliance/ (checked 2026-11-05)

---

Cite as: whats-best.ai, "GoodAccess — Business VPN & Zero Trust Access", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/business-vpn/goodaccess

Corrections: https://whats-best.ai/correct/1593?target=page