Sold by: IronWifi
Free Trial
AWS Free Tier
Secure guest and employee Wi-Fi with no on-prem servers - cloud RADIUS live in under 15 minutes. 50+ hardware brands, six global regions, 99.9% uptime SLA, SOC 2 Type II.
Overview
Image
MITRE ATT&CK threat detection coverage
Image
Identity Threat Detection & Response dashboard
IronWiFi is a fully managed cloud RADIUS and network access control (NAC) platform that secures Wi-Fi for guests and employees - no on-premise servers required. Trusted by 1,000+ organizations in 108 countries, IronWiFi runs across six global regions with a 99.9% uptime SLA and delivers low-latency authentication wherever your sites are located.
Why IronWiFi
Unlike traditional on-prem RADIUS deployments that take days or weeks to configure, most organizations authenticate their first users within 15 minutes. Built-in certificates, policies, and device trust mean you skip the complexity of managing FreeRADIUS or NPS servers entirely. Built-in OpenRoaming and Passpoint support lets visitors connect automatically and securely - a capability few cloud RADIUS platforms offer out of the box.
Key Capabilities
- Captive Portals - Branded guest portals with social login, email capture, or payment gateways
- 802.1X / WPA2-Enterprise - Certificate-based and credential-based authentication for employees and managed devices
- OpenRoaming and Passpoint - Automatic, secure onboarding for visitors without passwords or portal interaction
- SAML / Okta SSO - Federate identity with your existing directory for seamless employee access
- Role-Based Policies - Assign VLANs, bandwidth limits, and session rules by user group or device type
- Accounting and Reporting - Full session logs, usage analytics, and exportable reports for compliance audits
Supported Hardware
Connect access points and controllers from Cisco Meraki, Aruba, Ruckus, UniFi, MikroTik, Fortinet, Cambium, EnGenius, TP-Link Omada, and 40+ additional brands. No proprietary agents or firmware modifications are needed - just point your AP's RADIUS settings to IronWiFi.
Architecture and Reliability
Your access points send standard RADIUS traffic to IronWiFi's nearest cloud endpoint - no agents, tunnels, or firmware changes. Authentication is served from six global regions (US, EU, Asia, Africa, Australia, Middle East) with automatic failover: if a region has an issue, traffic routes to the nearest healthy region, and most access points cache authenticated sessions locally as a safety net. The platform runs on Google Cloud with multi-region redundancy, backed by a 99.9% uptime SLA.
Example Use Case: Multi-Site Hospitality
A hotel chain with hundreds of locations can onboard thousands of guests daily via OpenRoaming: guests arriving from partner networks connect instantly without portal friction, while staff authenticate through 802.1X with SAML/Okta SSO. Centralized reporting gives the IT team visibility across every property from a single dashboard.
Security and Compliance
IronWiFi holds a SOC 2 Type II report issued by Johanson Group LLP. All authentication traffic is encrypted in transit, and the platform is designed for zero-trust network access principles.
Getting Started
- Subscribe to a plan sized to your access points or user count
- Add IronWiFi's RADIUS server address and shared secret to your access point or controller
- Configure your SSID for 802.1X or captive portal mode
- Test authentication - most deployments are live in under 15 minutes
Prerequisites: Your access points must support external RADIUS (standard on enterprise-grade hardware) and outbound connectivity to IronWiFi's cloud endpoints on ports 1812/1813 (UDP).
Evaluation and Next Steps
Larger deployments, identity threat detection (ITDR), and custom terms are available through AWS Marketplace private offers - contact sales@ironwifi.com . Product documentation, onboarding guides, and hardware-specific setup instructions are available at https://www.ironwifi.com/cloud-radius .
Highlights
- Fully managed cloud RADIUS - no on-premise servers. Works with 50+ hardware brands (Cisco Meraki, Aruba, Ruckus, UniFi, MikroTik, and more) across six global regions with a 99.9% uptime SLA. SOC 2 Type II report issued by Johanson Group LLP.
- Built-in OpenRoaming and Passpoint support enables automatic, passwordless visitor onboarding at scale - guests from partner networks connect instantly and securely. Ideal for hospitality, retail, and campus environments.
- Authenticate your first users in under 15 minutes with built-in certificates, policies, and device trust. Federate identity via SAML/Okta SSO, assign role-based VLANs and bandwidth rules, and monitor every session from a single dashboard.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Guest WiFi - up to 10 APs | Cloud RADIUS for up to 10 access points - captive portals, 802.1X/WPA2-Enterprise, OpenRoaming. | $130.00 |
Guest WiFi - up to 25 APs | Cloud RADIUS for up to 25 access points - captive portals, 802.1X/WPA2-Enterprise, OpenRoaming. | $325.00 |
Guest WiFi - up to 50 APs | Cloud RADIUS for up to 50 access points - captive portals, 802.1X/WPA2-Enterprise, OpenRoaming. | $650.00 |
Employee Network - up to 100 users | Cloud RADIUS for up to 100 named users - 802.1X/WPA2-Enterprise, certificates, SAML/Okta SSO. | $650.00 |
Employee Network - up to 500 users | Cloud RADIUS for up to 500 named users - 802.1X/WPA2-Enterprise, certificates, SAML/Okta SSO. | $3,250.00 |
Employee Network - up to 1,000 users | Cloud RADIUS for up to 1,000 named users - 802.1X/WPA2-Enterprise, certificates, SAML/Okta SSO. | $6,500.00 |
Dimensions summary
This listing splits into two pricing tracks. The Guest WiFi track bills by the number of access points you cover, offered in three sizes: up to 10, 25, or 50 access points. The Employee Network track bills by named users, offered in three sizes: up to 100, 500, or 1,000 users. You pick the track that matches how you scale, and some buyers pay both. Each option is a contract commitment. As your access point count or user count grows, you move to the larger tier that fits your deployment.
Top-of-mind questions for buyers
An access point is any unique BSSID that broadcasts on your network and authenticates against IronWiFi during the month. Mesh repeaters that share a BSSID count once. This determines whether you need the up to 10, 25, or 50 access point tier.
A named user is one person, counted regardless of device. Each user can connect up to 10 devices with no per-device fee. Guest authentications do not count as users. Guest activity rolls up under the per-access-point Guest WiFi track instead.
The two tracks bill independently and both appear on the same contract. Guest WiFi cost follows your access point count. Employee Network cost follows your named user count. Some buyers pay one track, some pay both. Each meter scales on its own metric.
ironwifi.com
Helpful?
Vendor refund policy
To request a refund, contact support@ironwifi.com within 30 days of your initial purchase. Refunds for unused subscription time are reviewed on a case-by-case basis, and approved refunds are processed through AWS Marketplace.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Getting Help
Email support@ironwifi.com for technical assistance with configuration, authentication issues, or account questions. Standard support is included with every subscription plan.
Response Times
- Business-tier subscriptions: 4-hour response target, Monday through Friday (business hours), with priority handling for production-impacting issues.
- Standard-tier subscriptions: best-effort response during business days.
Self-Service Resources
Product documentation, hardware-specific setup guides, and onboarding walkthroughs are available at https://www.ironwifi.com/cloud-radius . If you need hands-on guidance during initial setup, email support with your hardware model and desired authentication method for step-by-step instructions tailored to your environment.
Billing, Refunds, and Subscription Changes
For billing inquiries, subscription changes, or refund requests, contact support@ironwifi.com with your AWS Marketplace subscription details. Private offer customers with custom terms should reference their agreement for specific support provisions.
Escalation
If an issue is not resolved within the stated response window, reply to your existing support thread to escalate.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Turn-key managed WiFi for coworking spaces, priced per location. Branded captive portal, member check-in feeds to Nexudus, OfficeRnD, Cobot & DeskWorks, Passpoint/OpenRoaming roaming, and unlimited members. Each location licenses up to 15 access points - bring your own hardware, nothing is sold or shipped.
Detect identity threats in WiFi and RADIUS traffic - 9 engines, 50+ threat types, 30+ MITRE ATT&CK techniques. Agent-free, works with your existing RADIUS. SOC 2 Type II.
Cloud-managed guest WiFi with a branded captive portal, priced per access point. Splash pages, self-registration, sponsored and social/email/SMS guest login, Passpoint/OpenRoaming seamless reconnect, and roaming analytics - works with any access points you already run.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.