Enterprise WiFi security and guest WiFi on one platform
Portnox is a cloud-native network access control platform with integrated RADIUS. Purple delivers the same cloud RADIUS and passwordless WPA2/3-Enterprise, synced to Entra ID, Okta or Google Workspace, and adds guest WiFi, captive portal and footfall analytics in the same platform, on the hardware you already run. Secure staff access and guest WiFi from one vendor.
- RADIUS-as-a-Service with passwordless WPA2/3-Enterprise (EAP-TLS)
- Entra ID, Okta and Google Workspace sync, no PKI to operate
- Guest WiFi, captive portal and venue analytics in the same platform
- Runs on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist and Ubiquiti UniFi
See Purple on your network
Book a 30-minute demo and we will show RADIUS-as-a-Service and guest WiFi running on your stack.
Join 80,000+ venues. We’ll never share your details.
Why teams move from Portnox to Purple
Portnox is a network access control platform with integrated RADIUS.
Purple delivers cloud RADIUS and passwordless WPA2/3-Enterprise plus guest WiFi and analytics, so one platform covers secure access and the guest experience.
Portnox offers the CLEAR guest portal with guest counts capped on base tiers.
Purple ships a branded guest WiFi captive portal with first-party data capture and no guest cap.
Portnox reports on security and compliance posture.
Purple adds footfall, dwell and repeat-visit analytics, so marketing and operations see visitor behaviour as well as security.
Portnox is certificate and 802.1X-first for corporate endpoints.
Purple adds multi-tenant iPSK WiFi for resident, student and coworking networks alongside 802.1X.
Portnox integrates with Entra ID, Okta and Google Workspace.
Purple syncs with the same identity providers and runs on the access points you already own, with no PKI to operate.
Built for IT, security and the whole venue
Purple gives IT and security teams secure staff WiFi and gives the venue guest WiFi, analytics and marketing, all on one platform and on the access points you already own.
IT & network teams
RADIUS-as-a-Service and passwordless WPA2/3-Enterprise on the hardware you already run - Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist and Ubiquiti UniFi - with no PKI to operate.
Security & compliance
EAP-TLS certificate-based authentication, identity sync with Entra ID, Okta and Google Workspace, and ISO 27001, GDPR, CCPA and Cyber Essentials certification.
Guest experience & marketing
A branded captive portal, first-party data capture and footfall and dwell analytics in the same platform as staff WiFi.
Multi-site or campus
Every building and site in one dashboard, from a single campus to a national airport group, with 99.999% uptime.
Trusted at enterprise scale
See secure staff and guest WiFi on your network.
Feature-by-feature comparison
| Feature | Purple | Portnox |
|---|---|---|
| RADIUS-as-a-Service | ✓Native, multi-region, full EAP methods, per-AP billing | ✓Included in the NAC subscription |
| Passwordless WPA2/3-Enterprise (EAP-TLS) | ✓Certificate-based staff access, managed certificates included | ✓EAP-TLS with its own cloud certificate authority |
| Identity provider sync (Entra ID, Okta, Google Workspace) | ✓Entra ID, Okta, Google Workspace, JumpCloud, SAML, LDAP | ✓Entra ID, Okta, Google Workspace, JumpCloud, Active Directory |
| Guest WiFi + branded captive portal | ✓Full brandable portal builder, no guest cap, data capture | –CLEAR guest portal; guest counts capped on base tiers |
| Footfall & dwell analytics | ✓Location analytics across venues and multi-site estates | ✕Security and compliance reporting only |
| WiFi marketing (email & SMS) | ✓Purple Engage: WiFi-triggered email and SMS, 70+ CRMs | ✕Not in product scope |
| Multi-tenant / iPSK WiFi | ✓Resident-isolated networks for BTR, student and coworking | ✕Certificate and 802.1X-first, iPSK not advertised |
| Runs on your existing hardware | ✓Vendor-agnostic overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, UniFi | ✓Cloud RADIUS works with any 802.1X-capable access point |
See how Purple fits alongside or in place of Portnox.
One platform for secure staff and guest WiFi
Purple runs cloud RADIUS and passwordless WPA2/3-Enterprise with EAP-TLS, synced to Entra ID, Okta or Google Workspace, with no PKI for your team to operate. On the same platform you get branded guest WiFi, captive portal, multi-tenant iPSK and footfall analytics, all on the Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist or Ubiquiti UniFi hardware you already run, backed by ISO 27001, GDPR and CCPA compliance. Book a demo and we will show it on your network.
Frequently asked
Does Purple replace a NAC?
Purple handles RADIUS-based 802.1X authentication and per-device VLAN assignment, which covers the common WiFi NAC use case. Agentless device profiling, posture assessment against a compliance baseline and wired-switch enforcement are NAC-specific capabilities that Portnox provides; many teams run Purple for guest, staff and multi-tenant WiFi alongside a NAC.
What does Purple add beyond cloud RADIUS?
Branded guest WiFi and a captive portal, footfall and dwell analytics, WiFi marketing, and multi-tenant iPSK networks, all on the same platform as staff access. Portnox focuses on network access control and does not carry these.
Does Purple run on our existing hardware?
Yes. Purple is a hardware-agnostic cloud overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist and Ubiquiti UniFi, so there is no hardware swap and no deep switch integration to stand up secure staff WiFi and guest WiFi together.
How do the two compare on RADIUS specifically?
Both deliver cloud RADIUS with multi-region redundancy, EAP-TLS and Entra ID / Okta / Google Workspace integration. Purple adds captive portal, analytics and guest WiFi; Portnox adds agentless profiling, posture checks and its own certificate authority.
Where Purple beats Portnox
See the product hub and the industries where teams pick Purple over Portnox.
See Purple Passwordless WiFi
Replace shared passwords with EAP-TLS, iPSK, Passpoint, or SAML/SSO. Identity-based credentials on your existing access points.