Foxpass vs NACIO
Foxpass
splashtop.com
NACIO
nac-io.comSide by side
| Figure | Foxpass | NACIO |
|---|---|---|
| Price from | $0.50/mo | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | — | Yes |
| macOS | Yes | Yes |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 0 |
| Spec score · Network Access Control Software | 8.1 (#6) | 7.1 (#17) |
| Identity integrations | Foxpass supports directory sync or authentication integrations with Microsoft Entra ID, Google Workspace, Okta, OneLogin, legacy Active Directory, and custom LDAP directories. | Listed identity sources include Active Directory, Azure AD/Entra ID, Okta, Google Workspace, SAML 2.0, LDAP/LDAPS, RADIUS proxy, and NACIO’s local user database. |
| Intended users | Foxpass describes its standalone PKI as suitable for organizations with existing RADIUS servers, MDM certificate enrollment, VPN or VDI certificate authentication, or a need to replace on-premises ADCS. | The site describes use for enterprise campuses, BYOD, hospitality and venues, OT/IoT, healthcare, and managed service providers. |
| Support | Cloud-hosted customers can use in-app console chat, and Foxpass offers setup documentation and a system status page. | Early access includes dedicated onboarding support and a direct line to the engineering team. |
Plans
Foxpass
- Foxpass Cloud PKI (Standalone)$0.50 a month
- Advanced LicensePriced on request
- Standard LicensePriced on request
In their own words
Foxpass
Foxpass Cloud RADIUS and Cloud PKI provide identity- and certificate-based authentication for Wi-Fi and VPN connections without hardware or local servers. Every plan includes Cloud LDAP, a hosted directory service for VPNs, legacy apps, and system logins. The Standard license adds EAP-TTLS authentication, group-based access control, role-based administration, and a web console and API. Advanced adds EAP-TLS, Cloud PKI, automated certificate lifecycle management, and device posture-based access control. Foxpass supports integrations with Microsoft Entra ID, Google Workspace, Okta, OneLogin, legacy Active Directory, and custom LDAP directories. Cloud PKI integrates with MDMs including Intune, Jamf, Kandji, and Addigy. Base plans retain logs for 24 hours, with an add-on extending retention to 90 days. An Engineering License add-on supports Linux, macOS, and SSH workflows, including SSH key rotation and sudo access policy enforcement. Dedicated cloud tenancy and self-hosted deployments are custom options; self-hosting is limited to enterprise customers. The standalone Cloud PKI plan is $0.50 a month, billed annually. A free trial is available, but there is no free plan.
NACIO
NACIO is network access control software for 802.1X RADIUS authentication, device profiling, compliance enforcement, and captive portals. It supports wired, wireless, and VPN access control and is currently in pre-release, with early access available by request. NACIO can be self-hosted on customer infrastructure or used as a cloud-hosted service. Its built-in RADIUS supports EAP-TLS, PEAP-MSCHAPv2, EAP-TTLS, EAP-FAST, and CHAP. Identity sources include Active Directory, Azure AD/Entra ID, Okta, Google Workspace, SAML 2.0, LDAP/LDAPS, RADIUS proxy, and a local user database. Windows and macOS agents check patch level, antivirus, disk encryption, firewall status, and custom rules before access. NACIO also provides an internal certificate authority, endpoint profiling from DHCP, HTTP user-agent data and network behavior, and guest portals with sponsor approval, verification, social login, and time limits. Licensing uses perpetual per-device licenses tied to a major version, with optional upgrades. Pricing is available on request.