PacketFence vs SecureW2 Cloud NAC
PacketFence
packetfence.comSecureW2 Cloud NAC
securew2.comSide by side
| Figure | PacketFence | SecureW2 Cloud NAC |
|---|---|---|
| Price from | $416.67/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 7 | 2 |
| Spec score · Network Access Control Software | 8.7 (#1) | 7.7 (#13) |
| Authentication | Authentication includes 802.1X/EAP through FreeRADIUS, LDAP and Active Directory, external RADIUS, OAuth2 social login, SAML 2.0, and PKI certificates. | Cloud RADIUS supports passwordless 802.1X using EAP-TLS for Wi-Fi, wired, and VPN access. |
| Founded | 2005 | The company was founded in 2014. |
| Headquarters | Cambridge, Massachusetts, United States | Amsterdam, Netherlands |
| Identity integrations | Supported identity options include Active Directory, LDAP, external RADIUS, OAuth2 social login and SAML 2.0. | The NAC service integrates with Entra ID, Okta, Google, OneLogin and other cloud identity providers. |
| Rating on Google Play | 2.3 out of 5 from 14 reviews | 2.3 out of 5 from 7,910 reviews |
| What it does | PacketFence is a network access control system for authenticating, profiling, onboarding, isolating and remediating devices on wired, wireless and VPN networks. | SecureW2 Cloud NAC provides agentless, certificate-based 802.1X network access control using cloud identity and device-security signals. |
Plans
PacketFence
- Community EditionFree
- Premium Support$5,000 a year
- Starter$5,000 a year
- Professional$15,000 a year
- Professional Deployment$20,000, paid once
- EnterprisePriced on request
- Training ServicesPrice not published
SecureW2 Cloud NAC
- SecureW2 Cloud NACPriced on request
- SecureW2 Cloud NAC / JoinNow PlatformPriced on request
In their own words
PacketFence
PacketFence is an enterprise network access control platform for organizations managing wired, wireless, and VPN access. It can enforce policy through SNMP or RADIUS, inline Layer 2 or Layer 3 deployment, VLAN assignment, and quarantine isolation. Authentication options include 802.1X/EAP, directory services, external RADIUS, OAuth2 social login, SAML 2.0, and PKI certificates. Guest workflows include self-registration, sponsored access, email or SMS confirmation, and CSV imports. Self-service provisioning can configure 802.1X profiles for iOS, Android, Windows, macOS, and ChromeOS. The platform checks antivirus, operating system patch level, and security-agent presence, and can quarantine devices that fail policy. Administrators get a web interface, command-line tools, REST API, customizable captive portals, and Perl extension points. The self-hosted Community Edition is GPL v2+ with unlimited devices and full source code. Its listed minimum requirements include Debian 12.x or RHEL 8.x, four CPU cores, 16 GB RAM, 200 GB disk, and a network interface. Paid plans include Starter at $5,000 /year for up to 250 registered devices.
SecureW2 Cloud NAC
SecureW2 Cloud NAC is a cloud network access control service that manages access for users and devices through certificate-based 802.1X authentication and identity-provider policies. It supports wired, Wi-Fi, and VPN access, including passwordless 802.1X with EAP-TLS. Administrators can set role-, policy-, and attribute-based rules, with runtime VLAN segmentation. For guests and BYOD, it offers certificate enrollment and WebAuth captive portals, plus self-service or sponsored guest access. MAC-based authentication and filtering provide an option for IoT and legacy devices that cannot use 802.1X. Certificate enrollment, renewal, and revocation can be automated through APIs and protocols including ACME, SCEP, JSON, WSTEP, and EST. SecureW2 says its PKI and RADIUS controls do not require a persistently active endpoint agent. Integrations include Google, Okta, Microsoft Entra ID, CrowdStrike, Cisco, Jamf, and Intune. Pricing is available on request through a form asking for solution type, organization type, and device count.