Cloud4Wi Alternatives: Captive Portal Platforms Compared

The main Cloud4Wi alternatives for enterprise retail and hospitality are Purple, IronWiFi, Cloudi-Fi and Nomadix. Purple suits multi-site estates that want guest, staff and OpenRoaming access on existing hardware. IronWiFi suits RADIUS-first IT teams, Cloudi-Fi suits security-led European buyers and Nomadix suits hotels running on-site gateways. Cloud4Wi still fits luxury retailers invested in its marketing tooling.

Which Cloud4Wi alternative should you choose?

Start with the job your guest WiFi has to do over the next three years, not with feature lists. Most Cloud4Wi reviews begin at contract renewal, a hardware refresh or a new requirement that the current platform does not cover cleanly.

Four alternatives usually reach the enterprise shortlist:

• Purple. A hardware-agnostic cloud overlay covering Guest WiFi, Staff WiFi and Multi-Tenant WiFi on one platform. Purple has been running since 2012 and serves 80,000+ live venues. It handled 440 million logins in 2024 (Purple data).
• IronWiFi. A cloud RADIUS and captive portal service built around authentication. RADIUS (Remote Authentication Dial-In User Service) is the protocol access points use to ask a server whether a device may join.
• Cloudi-Fi. A cloud captive portal platform positioned on security and compliance for guest access. A captive portal is the web page a visitor sees before the network grants internet access.
• Nomadix. A gateway-led approach. An appliance sits in-line at each site and handles authentication, bandwidth policy and, in hotels, billing through the property management system (PMS).

If you need one rule of thumb, use this one. Choose by architecture first, marketing depth second and price third. Architecture decides your hardware bill, your rollout effort and your exit cost. Marketing features change every release.

Where do Cloud4Wi, Purple, IronWiFi, Cloudi-Fi and Nomadix genuinely differ?

The five platforms overlap on the basics. All of them can present a branded captive portal, collect a login and apply a session policy. The real differences sit in four places: architecture, identity, roaming and what happens to the data afterwards.

Platform	Core model	Runs on your existing access points	Primary strength	Best fit	Press the vendor on
Cloud4Wi	Cloud guest WiFi and in-store engagement platform	Yes, on its published list of supported vendors	Retail engagement heritage and fashion and luxury references	Fashion and luxury retail chains	Staff access and identity-based policy
Purple	Cloud overlay with Identity-Based Networks	Yes: Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme, Fortinet	Guest, Staff and Multi-Tenant WiFi on one platform, with ISO 27001 and B Corp certification	Multi-site, multi-vertical estates	Fit with any bespoke journeys you have already built
IronWiFi	Cloud RADIUS and captive portal service	Yes, through standard RADIUS and external captive portal support	802.1X and identity provider integration	IT-led estates putting authentication first	Depth of marketing automation
Cloudi-Fi	Cloud captive portal with a security and compliance focus	Yes, on its supported vendor list	Security-led guest access and compliance	European estates with security-led buyers	Retail engagement features
Nomadix	On-site gateway appliance	Yes, the gateway sits in front of any access points	PMS billing and bandwidth tiers for hotels	Hotels selling tiered or paid internet	Hardware lifecycle at every site

Treat the final column as a list of questions, not verdicts. Every vendor here ships updates, so ask for a live demonstration on your own hardware models.

Architecture: overlay or appliance

Cloud4Wi, Purple, IronWiFi and Cloudi-Fi all work as cloud layers. You point your controller or cloud dashboard at the platform, and the platform handles the portal and authentication. No new box arrives at the store. We cover that model in more depth in Why your next WiFi upgrade doesn't need new hardware.

Nomadix takes the opposite approach. Its gateway is agnostic about the access points behind it, which helps on mixed or ageing estates. The trade-off is a physical appliance to buy, power, patch and eventually replace at every site.

Identity: guest only, or guest and staff

Retail and hospitality estates rarely run guest access alone. Store tablets, handheld scanners, back-office laptops and contractor devices all need access, and each needs different rights.

IEEE 802.1X is the standard for port-based network access control. It lets each person or device authenticate with its own credentials instead of a shared password. Purple's Identity-Based Networks and IronWiFi's cloud RADIUS both put identity at the centre. Purple connects to Microsoft Entra ID, Okta and Google Workspace. When someone leaves, their access goes with them. Purple calls this joiners, movers, leavers (JML) handling.

For the configuration detail on one common stack, see Configuring 802.1X on Juniper Mist with cloud RADIUS.

How do the Passpoint and OpenRoaming stories compare?

Passpoint, also called Hotspot 2.0, builds on IEEE 802.11u. It lets a phone discover and join a network automatically using a credential it already holds, with no captive portal. OpenRoaming is a federation run by the Wireless Broadband Alliance (WBA). It extends that idea across every participating network, so one identity works at many venues.

Purple supports OpenRoaming alongside its captive portal. Returning guests can join automatically, while first-time visitors still see the branded portal.

Ask every vendor on your shortlist three questions:

1. Which role do you play? An OpenRoaming identity provider issues credentials. An access network provider runs the venue network. Some platforms do one, some do both.
2. Does it work on my hardware? Passpoint support depends on the access point model and firmware, not just the platform. Ask for a test on your own kit.
3. What happens to consent? Passpoint skips the captive portal, and the captive portal is where most marketing opt-ins happen. Ask how the platform captures and records consent when a device joins silently.

The third question catches most retail buyers out. Seamless joining is good for the shopper. It also removes the moment you used to ask for permission.

How does marketing automation compare?

Cloud4Wi built its name on retail engagement, and its published case studies centre on fashion and luxury brands. If in-store engagement is your primary use case, Cloud4Wi is a credible benchmark to measure the others against.

Purple's approach starts with first-party data gathered through conscious-choice opt-ins. Visitors decide what they share and why. Purple then integrates with CRM and marketing platforms, so the data flows into the systems your marketing team already runs. WiFi Analytics adds visit, dwell and repeat-visit insight across the estate. The plan tiers step up from connectivity (Connect) to data capture (Capture) to engagement (Engage).

IronWiFi and Nomadix lead with access and authentication rather than campaigns. Cloudi-Fi leads with security and compliance. If marketing depth matters to you, run the same campaign brief past each vendor and compare what they build.

When is Purple the right Cloud4Wi alternative?

Purple is the right call when your estate spans more than one network type or more than one vertical. Four situations come up most often.

You run mixed hardware. Acquisitions leave most chains with two or three access point vendors. Purple runs on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. A single platform covers the lot. Fortinet estates can follow FortiGate captive portal setup with an external portal server.

You need staff access as well as guest access. Purple covers Guest WiFi and Staff WiFi from one place. Add-ons such as SecurePass extend identity-based access. One of the mechanisms is iPSK (identity pre-shared key), which gives each person or device its own key on a shared network name.

Compliance carries weight in procurement. Purple holds ISO 27001, Cyber Essentials and B Corp certification, and is GDPR and CCPA compliant. Platform uptime is 99.999%. Security reviewers can check those certifications without a long questionnaire cycle.

You operate across sectors. Purple's named customers range from Harrods and Tapestry in luxury retail to McDonald's, Sweetgreen and Pizza Express in food service, and Premier Inn and Whitbread in hotels. Estates that mix Retail and Hotels can run both on the same Guest WiFi platform.

When are IronWiFi, Cloudi-Fi or Nomadix the right call?

Each alternative has a clear home ground. Pick it when your situation matches.

IronWiFi

Choose IronWiFi when your IT team owns the decision and the brief is authentication. If you need cloud RADIUS for 802.1X, identity provider sync and a straightforward captive portal, IronWiFi meets that brief. It publishes its pricing tiers on its website, which shortens procurement. Marketing teams wanting campaign automation should test its integrations before signing.

Cloudi-Fi

Choose Cloudi-Fi when your security team leads and guest internet traffic must meet strict policy controls. Its positioning centres on securing guest access and meeting regulatory requirements. That fits European estates where data protection officers and security architects hold the veto.

Nomadix

Choose Nomadix when you run hotels that sell tiered or paid internet and post the charges to the guest folio through the PMS. Gateways already installed and inside their support life are a sunk cost. Replacing them early rarely pays back. The decision changes when those appliances near end of life. At that point, compare a gateway refresh with a cloud overlay on the access points you already own.

Where does Cloud4Wi still win?

Cloud4Wi remains a strong fit in two situations, and an honest comparison should say so.

Fashion and luxury retail with mature engagement journeys. If your team has spent years building in-store journeys inside Cloud4Wi, those journeys carry value. Rebuilding them costs time, agency budget and campaign continuity. Cloud4Wi's retail references sit squarely in this segment.

Mid-contract with no new requirement. If the platform works, your hardware is supported and nobody needs staff access, Passpoint or multi-tenant capability, switching mid-term rarely makes sense. Run a structured re-tender six to nine months before renewal instead.

Cloud4Wi is weaker as a fit where the brief has moved beyond guest engagement. That means staff identity, residential or multi-tenant access, or a single platform across several verticals. Those are the briefs where the alternatives earn their place on the shortlist.

What does each platform cost to run?

Licence price is the smallest line in most total cost of ownership models. Hardware, site visits and integration effort usually outweigh it over three years.

Cost line	Cloud4Wi	Purple	IronWiFi	Cloudi-Fi	Nomadix
New hardware per site	None on supported access points	None on the eight named vendors	None on standard RADIUS hardware	None on supported access points	One gateway appliance
Licence model	Subscription, quoted per estate	Subscription by plan (Connect, Capture, Engage) plus optional SecurePass, Verify and Shield	Subscription, published tiers	Subscription, quoted per estate	Appliance purchase plus licences and support
Per-site rollout work	Controller or dashboard configuration	Controller or dashboard configuration	RADIUS and portal configuration	Controller or dashboard configuration	Install, cable and configure the gateway
Refresh exposure	Access point lifecycle only	Access point lifecycle only	Access point lifecycle only	Access point lifecycle only	Access point plus gateway lifecycle

Model three years, not one. Include engineer time per site, any agency rebuild of marketing journeys and the cost of running two platforms in parallel during migration. If coverage is part of the question, budget for a survey before you budget for a platform. WiFi Site Surveys: A Practical Planning Guide sets out what one involves.

What does a platform switch look like in practice?

The two scenarios below are illustrative. They use stated assumptions so you can swap in your own numbers.

Scenario 1: a 150-store fashion retailer at Cloud4Wi renewal

Situation. A fashion chain runs 150 stores on Cloud4Wi. Ninety stores use Cisco Meraki and 60 acquired stores use Juniper Mist. The operations director wants store staff on secure, individual access. Marketing wants to keep its opt-in database.

What was done. The team shortlisted Cloud4Wi, Purple and IronWiFi. Each vendor demonstrated on one Meraki store and one Mist store. The team scored them on staff identity, consent capture and the effort of moving consented records. They then ran a 10-store pilot with the leading option before committing the estate.

Measurable outcome. Every option was a cloud overlay, so hardware cost was zero across all 150 stores. The deciding numbers were operational. Assume two hours of remote configuration per store. That gives 300 engineer hours, with no site visits. Compare one site visit per store for a gateway model, which means 150 truck rolls. Staff access moved from shared passwords to individual credentials, so a leaver's access could be revoked centrally instead of rotating a password in 150 stores.

Scenario 2: a 300-room hotel with gateways near end of life

Situation. A 300-room hotel runs a Nomadix gateway for tiered guest internet. Its vendor support ends in 12 months. The access points are a current HPE Aruba estate.

What was done. The IT manager priced two paths. Path A was a like-for-like gateway refresh. Path B was a cloud overlay on the existing Aruba access points, with tiered access policies applied through the platform.

Measurable outcome. Path B removed one appliance from the hardware bill and from the refresh cycle. It also removed one device from the patching schedule. The hotel kept its access points, so guests saw no coverage change. The deciding factor became PMS billing. The team confirmed that the chosen platform supported its tiering and charging model before committing. Hotels that charge nothing for WiFi usually find the gateway hardest to justify.

The same logic applies to food and beverage estates. WiFi in Restaurants: A UK Guide to Coverage and Security covers the coverage and security side for that format.

How do you decide for your estate?

Map your situation to a starting shortlist, then test on your own hardware.

Your situation	Shortlist first	Why
Luxury retail, mature Cloud4Wi journeys, mid-contract	Stay on Cloud4Wi, re-tender at renewal	Rebuild cost outweighs the gain until renewal
Mixed access point vendors across a multi-site estate	Purple	One cloud overlay across eight named vendors
Staff 802.1X with Microsoft Entra ID or Okta, light marketing	IronWiFi or Purple	Both put cloud RADIUS and identity first
Security team holds the veto on guest traffic	Cloudi-Fi or Purple	Security and compliance lead procurement
Hotel selling tiered internet, gateways in support	Nomadix	Sunk hardware cost and PMS billing in place
Hotel with gateways near end of life	Purple or another cloud overlay	Removes appliance refresh from the budget
Retail and hospitality on one platform	Purple	Guest, Staff and Multi-Tenant WiFi together
Automatic joining for returning visitors	Purple, after a live OpenRoaming test	OpenRoaming alongside the captive portal

Then run a four-step evaluation:

1. Write the brief as outcomes. For example: individual staff credentials, opt-in rate, rollout time per store and three-year cost.
2. Demand demonstrations on your hardware. One store per access point vendor you run. Slides do not count.
3. Test the exit. Ask how you would export consented first-party records if you left. A clean answer signals a confident vendor.
4. Pilot before you commit. Ten sites across your hardware mix will surface most problems before the estate rollout does.

Frequently asked questions

Is Purple a direct Cloud4Wi competitor in enterprise retail?

Yes. Purple competes with Cloud4Wi for enterprise retail guest WiFi, and its named customers include Harrods and Tapestry in luxury retail. The main difference is scope. Cloud4Wi centres on retail engagement. Purple covers Guest WiFi, Staff WiFi and Multi-Tenant WiFi on one platform, runs on eight named hardware vendors and holds ISO 27001 and B Corp certification. Estates mixing retail with hotels or offices usually find that breadth decisive.

Can we move from Cloud4Wi to Purple without replacing our access points?

Yes, if your access points come from Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme or Fortinet. Purple works as a cloud overlay, so migration changes controller or dashboard settings rather than equipment. Most of the effort goes into rebuilding captive portal journeys and moving consented records. Pilot on one site per hardware vendor before committing the whole estate.

Does Purple support Passpoint and OpenRoaming?

Yes, Purple supports OpenRoaming, the Wireless Broadband Alliance federation built on Passpoint (Hotspot 2.0). Returning visitors can join participating networks automatically, while first-time visitors still see your branded captive portal. Passpoint support also depends on your access point models and firmware. Test it live on your own hardware before rolling out, and confirm how consent is recorded for devices that join without a portal.

How do these platforms handle GDPR consent for guest data?

All five platforms collect data at login, but consent design differs. Purple uses conscious-choice opt-ins, so visitors choose what they share and why. Purple is GDPR and CCPA compliant and certified to ISO 27001. For any vendor, ask where data is hosted, how consent records are stored and how you would export them. Passpoint joins skip the portal, so check how consent works there too.

Is a Nomadix gateway or a cloud platform better for hotels?

A cloud platform is usually better for hotels at hardware refresh, while Nomadix suits hotels with gateways still in support. Nomadix places an appliance at each property, which works well for tiered internet billed through the PMS. A cloud overlay removes that appliance from the refresh cycle and runs on your existing access points. Confirm PMS billing support before you switch.

How is Purple priced compared with Cloud4Wi?

Purple prices by plan, with Connect, Capture and Engage stepping from connectivity to data capture to engagement. Optional SecurePass, Verify and Shield add-ons sit on top. Cloud4Wi and Cloudi-Fi quote per estate, and IronWiFi publishes its pricing tiers. Compare three-year cost rather than first-year licence. Include engineer time per site, any marketing journey rebuild and the period you run two platforms in parallel.

Will we lose our marketing database if we leave Cloud4Wi?

No, provided you export consented records before your contract ends. Ask Cloud4Wi for the export format and the consent fields it includes. Then confirm your new platform can import them with consent status intact. Contacts without valid consent should not move. Plan the export at least three months before renewal, so marketing campaigns continue without a gap during migration.