Concepts and technologies disclosed herein are directed to zero trust network access (“ZTNA”) and virtual private network (“VPN”) client offloading. According to one aspect, a user device can establish a private network session to access a private network resource in a private network. The user device can receive a request to offload the private network session from the user device to a secure router. In response to the request, the user device can offload the private network session to the secure router.