Skip to content
SPECIFICTION
Get listed

NACIO

nac-io.com

WindowsmacOSSelf-hosted
Visit nac-io.com
Spec score 7.1 #17 of 23 in Network Access Control Software

What it is

NACIO is network access control software for 802.1X RADIUS authentication, device profiling, compliance enforcement, and captive portals. It supports wired, wireless, and VPN access control and is currently in pre-release, with early access available by request. NACIO can be self-hosted on customer infrastructure or used as a cloud-hosted service. Its built-in RADIUS supports EAP-TLS, PEAP-MSCHAPv2, EAP-TTLS, EAP-FAST, and CHAP. Identity sources include Active Directory, Azure AD/Entra ID, Okta, Google Workspace, SAML 2.0, LDAP/LDAPS, RADIUS proxy, and a local user database. Windows and macOS agents check patch level, antivirus, disk encryption, firewall status, and custom rules before access. NACIO also provides an internal certificate authority, endpoint profiling from DHCP, HTTP user-agent data and network behavior, and guest portals with sponsor approval, verification, social login, and time limits. Licensing uses perpetual per-device licenses tied to a major version, with optional upgrades. Pricing is available on request.

Spec sheet

What it does
NACIO provides network access control, including 802.1X RADIUS, device profiling, compliance enforcement, and captive portals.Read 7 Oct 2026 · nac-io.com
Product
NACIO is network access control software for 802.1x RADIUS, device profiling, compliance enforcement, and captive portals.Read 7 Oct 2026 · nac-io.com
Intended users
The site describes use for enterprise campuses, BYOD, hospitality and venues, OT/IoT, healthcare, and managed service providers.Read 7 Oct 2026 · nac-io.com
Deployment
NACIO can be self-hosted on the customer’s infrastructure or used as a cloud-hosted service.Read 7 Oct 2026 · nac-io.com
Security
The site says remote agents connect over encrypted tunnels and remote probes need no VPN or open firewall ports.Read 7 Oct 2026 · nac-io.com
Support
Early access includes dedicated onboarding support and a direct line to the engineering team.Read 7 Oct 2026 · nac-io.com
Captive portal
Guest portals support sponsor approval, SMS or email verification, social login, and time-limited access.Read 7 Oct 2026 · nac-io.com
Certificates
NACIO includes an internal certificate authority for issuing and managing machine and user certificates, with agent deployment to Windows and macOS.Read 7 Oct 2026 · nac-io.com
Device compliance
The Windows and macOS agent checks patch level, antivirus, disk encryption, firewall status, and custom rules before granting access.Read 7 Oct 2026 · nac-io.com
Device discovery
The product describes active and passive scanning that maps IP ranges, resolves hostnames, fingerprints ports and services, and flags rogue or unmanaged devices.Read 7 Oct 2026 · nac-io.com
Device profiling
NACIO profiles endpoints using DHCP fingerprinting, HTTP user-agent data, and network behavior analysis.Read 7 Oct 2026 · nac-io.com
Endpoint compliance
The Windows and macOS agent can check patch level, antivirus, disk encryption, firewall status, and custom rules before access is granted.Read 7 Oct 2026 · nac-io.com
High availability
NACIO offers active-passive high availability with automatic failover and synchronized sessions, leases, and endpoint records.Read 7 Oct 2026 · nac-io.com
Identity integrations
Listed identity sources include Active Directory, Azure AD/Entra ID, Okta, Google Workspace, SAML 2.0, LDAP/LDAPS, RADIUS proxy, and NACIO’s local user database.Read 7 Oct 2026 · nac-io.com
Licensing
The site says NACIO uses perpetual per-device licenses tied to a major version, with optional upgrades to the next major version.Read 7 Oct 2026 · nac-io.com
Network compatibility
NACIO says it works with RADIUS-capable switches, access points, and firewalls, and lists vendors including Cisco, Juniper, Aruba, Ubiquiti, Fortinet, and Palo Alto.Read 7 Oct 2026 · nac-io.com
Network integrations
NACIO says it works with RADIUS-capable switches, access points, and firewalls, and lists vendors including Cisco, Aruba, Juniper, Ubiquiti, Fortinet, and Palo Alto.Read 7 Oct 2026 · nac-io.com
Product status
NACIO is currently in pre-release; the maker invites visitors to request early access and says pricing details will be provided.Read 7 Oct 2026 · nac-io.com
RADIUS
Its built-in RADIUS supports EAP-TLS, PEAP-MSCHAPv2, EAP-TTLS, EAP-FAST, and CHAP for wired 802.1x, wireless, and VPN authentication.Read 7 Oct 2026 · nac-io.com
RADIUS and authentication
Its built-in RADIUS supports EAP-TLS, PEAP-MSCHAPv2, EAP-TTLS, EAP-FAST, and CHAP for wired, wireless, and VPN authentication.Read 7 Oct 2026 · nac-io.com
Release status
NACIO is currently in pre-release, and the site invites visitors to request early access.Read 7 Oct 2026 · nac-io.com
Who it is for
Listed use cases include enterprise campuses, BYOD, hospitality and venues, OT and IoT, healthcare, and managed service providers.Read 7 Oct 2026 · nac-io.com

Strong points and limits

Strong points

  • Controls wired, wireless, and VPN access
  • Supports multiple 802.1X authentication methods
  • Checks endpoint compliance before granting access
  • Includes certificate authority and device profiling
  • Offers active-passive high availability

Limits

  • Currently in pre-release
  • Pricing is available only on request
  • Licenses are tied to a major version
  • Early access requires a request

Who it suits

It suits enterprise campuses, BYOD environments, hospitality and venues, OT/IoT, healthcare organizations, and managed service providers. Hybrid deployment supports self-hosted or cloud-hosted use.

Verdict

NACIO combines authentication, endpoint checks, profiling, certificates, and guest access in one network access control product. Its pre-release status and request-based pricing should be considered before planning deployment.

Where Specifiction places it

Alternatives to NACIOAll alternatives →