Overview
MITRE ATT&CK threat detection coverage
IronWiFi ITDR maps identity threats to MITRE ATT&CK - coverage and severity across Initial Access, Credential Access, Lateral Movement and more, derived from your RADIUS authentication data.
MITRE ATT&CK threat detection coverage
Identity Threat Detection & Response dashboard
IronWiFi is a fully managed cloud RADIUS and network access control (NAC) platform that secures Wi-Fi for guests and employees - no on-premise servers required. Trusted by 1,000+ organizations in 108 countries, IronWiFi runs across six global regions with a 99.9% uptime SLA and delivers low-latency authentication wherever your sites are located.
Why IronWiFi
Unlike traditional on-prem RADIUS deployments that take days or weeks to configure, most organizations authenticate their first users within 15 minutes. Built-in certificates, policies, and device trust mean you skip the complexity of managing FreeRADIUS or NPS servers entirely. Built-in OpenRoaming and Passpoint support lets visitors connect automatically and securely - a capability few cloud RADIUS platforms offer out of the box.
Key Capabilities
- Captive Portals - Branded guest portals with social login, email capture, or payment gateways
- 802.1X / WPA2-Enterprise - Certificate-based and credential-based authentication for employees and managed devices
- OpenRoaming and Passpoint - Automatic, secure onboarding for visitors without passwords or portal interaction
- SAML / Okta SSO - Federate identity with your existing directory for seamless employee access
- Role-Based Policies - Assign VLANs, bandwidth limits, and session rules by user group or device type
- Accounting and Reporting - Full session logs, usage analytics, and exportable reports for compliance audits
Supported Hardware
Connect access points and controllers from Cisco Meraki, Aruba, Ruckus, UniFi, MikroTik, Fortinet, Cambium, EnGenius, TP-Link Omada, and 40+ additional brands. No proprietary agents or firmware modifications are needed - just point your AP's RADIUS settings to IronWiFi.
Architecture and Reliability
Your access points send standard RADIUS traffic to IronWiFi's nearest cloud endpoint - no agents, tunnels, or firmware changes. Authentication is served from six global regions (US, EU, Asia, Africa, Australia, Middle East) with automatic failover: if a region has an issue, traffic routes to the nearest healthy region, and most access points cache authenticated sessions locally as a safety net. The platform runs on Google Cloud with multi-region redundancy, backed by a 99.9% uptime SLA.
Example Use Case: Multi-Site Hospitality
A hotel chain with hundreds of locations can onboard thousands of guests daily via OpenRoaming: guests arriving from partner networks connect instantly without portal friction, while staff authenticate through 802.1X with SAML/Okta SSO. Centralized reporting gives the IT team visibility across every property from a single dashboard.
Security and Compliance
IronWiFi holds a SOC 2 Type II report issued by Johanson Group LLP. All authentication traffic is encrypted in transit, and the platform is designed for zero-trust network access principles.
Getting Started
- Subscribe to a plan sized to your access points or user count
- Add IronWiFi's RADIUS server address and shared secret to your access point or controller
- Configure your SSID for 802.1X or captive portal mode
- Test authentication - most deployments are live in under 15 minutes
Prerequisites: Your access points must support external RADIUS (standard on enterprise-grade hardware) and outbound connectivity to IronWiFi's cloud endpoints on ports 1812/1813 (UDP).
Evaluation and Next Steps
Larger deployments, identity threat detection (ITDR), and custom terms are available through AWS Marketplace private offers - contact sales@ironwifi.com . Product documentation, onboarding guides, and hardware-specific setup instructions are available at https://www.ironwifi.com/cloud-radius .
Highlights
- Fully managed cloud RADIUS - no on-premise servers. Works with 50+ hardware brands (Cisco Meraki, Aruba, Ruckus, UniFi, MikroTik, and more) across six global regions with a 99.9% uptime SLA. SOC 2 Type II report issued by Johanson Group LLP.
- Built-in OpenRoaming and Passpoint support enables automatic, passwordless visitor onboarding at scale - guests from partner networks connect instantly and securely. Ideal for hospitality, retail, and campus environments.
- Authenticate your first users in under 15 minutes with built-in certificates, policies, and device trust. Federate identity via SAML/Okta SSO, assign role-based VLANs and bandwidth rules, and monitor every session from a single dashboard.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Description | Cost/month |
|---|---|---|
Guest WiFi - up to 10 APs | Cloud RADIUS for up to 10 access points - captive portals, 802.1X/WPA2-Enterprise, OpenRoaming. | $130.00 |
Guest WiFi - up to 25 APs | Cloud RADIUS for up to 25 access points - captive portals, 802.1X/WPA2-Enterprise, OpenRoaming. | $325.00 |
Guest WiFi - up to 50 APs | Cloud RADIUS for up to 50 access points - captive portals, 802.1X/WPA2-Enterprise, OpenRoaming. | $650.00 |
Employee Network - up to 100 users | Cloud RADIUS for up to 100 named users - 802.1X/WPA2-Enterprise, certificates, SAML/Okta SSO. | $650.00 |
Employee Network - up to 500 users | Cloud RADIUS for up to 500 named users - 802.1X/WPA2-Enterprise, certificates, SAML/Okta SSO. | $3,250.00 |
Employee Network - up to 1,000 users | Cloud RADIUS for up to 1,000 named users - 802.1X/WPA2-Enterprise, certificates, SAML/Okta SSO. | $6,500.00 |
Vendor refund policy
To request a refund, contact support@ironwifi.com within 30 days of your initial purchase. Refunds for unused subscription time are reviewed on a case-by-case basis, and approved refunds are processed through AWS Marketplace.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Getting Help
Email support@ironwifi.com for technical assistance with configuration, authentication issues, or account questions. Standard support is included with every subscription plan.
Response Times
- Business-tier subscriptions: 4-hour response target, Monday through Friday (business hours), with priority handling for production-impacting issues.
- Standard-tier subscriptions: best-effort response during business days.
Self-Service Resources
Product documentation, hardware-specific setup guides, and onboarding walkthroughs are available at https://www.ironwifi.com/cloud-radius . If you need hands-on guidance during initial setup, email support with your hardware model and desired authentication method for step-by-step instructions tailored to your environment.
Billing, Refunds, and Subscription Changes
For billing inquiries, subscription changes, or refund requests, contact support@ironwifi.com with your AWS Marketplace subscription details. Private offer customers with custom terms should reference their agreement for specific support provisions.
Escalation
If an issue is not resolved within the stated response window, reply to your existing support thread to escalate.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.