Secure staff WiFi and guest WiFi, one platform, no PKI to run
RADIUSaaS is a pure-play cloud RADIUS service built around Microsoft Intune and Entra ID. Purple delivers the same passwordless WPA2/3-Enterprise on cloud RADIUS, with managed certificates so there is no PKI to operate yourself, and adds guest WiFi, captive portal and venue analytics on the access points you already own.
- RADIUS-as-a-Service with EAP-TLS, certificate-based WPA2/3-Enterprise
- Entra ID, Okta and Google Workspace sync, no PKI to run yourself
- Hardware-agnostic: Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, UniFi
- Guest WiFi, captive portal and venue analytics in the same platform
See Purple on your network
Book a 30-minute demo and we will show Purple running cloud RADIUS on your stack.
Join 80,000+ venues. We’ll never share your details.
Why teams move from RADIUSaaS to Purple
RADIUSaaS is a pure-play cloud RADIUS service.
Purple runs cloud RADIUS with EAP-TLS too, and adds guest WiFi, captive portal and venue analytics on the same platform.
RADIUSaaS pairs with SCEPman for managed PKI.
Purple issues and manages certificates tied to RADIUS-as-a-Service, so there is no separate certificate authority to stand up or operate.
RADIUSaaS is built around Microsoft Intune and Entra ID.
Purple syncs with Entra ID, Okta and Google Workspace, so passwordless staff WiFi is not tied to a single identity vendor.
RADIUSaaS authenticates staff devices and stops there.
Purple secures staff devices and runs guest WiFi, footfall and dwell analytics and WiFi marketing for the whole venue.
RADIUSaaS certifies its own dev and ops to ISO 27001.
Purple is ISO 27001, GDPR, CCPA, Cyber Essentials and B Corp certified across the platform your teams and guests use.
Built for IT, security and the whole venue
Purple gives IT and security teams passwordless WPA2/3-Enterprise on cloud RADIUS, and gives the rest of the venue guest WiFi, analytics and marketing, all on one platform.
IT & network teams
Cloud RADIUS with EAP-TLS on the access points you already own, across Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist and UniFi, with no on-prem NPS or ISE to maintain.
Security & compliance teams
Passwordless, certificate-based WPA2/3-Enterprise with managed PKI, backed by ISO 27001, GDPR, CCPA, Cyber Essentials and B Corp certification.
Guest experience teams
A branded captive portal, guest data capture and WiFi marketing that a pure RADIUS service does not carry.
Multi-site or campus IT
Manage secure staff WiFi, guest WiFi and iPSK multi-tenant networks across every site from one dashboard.
Why 80,000 venues choose Purple
See what secure staff and guest WiFi looks like on your network.
Feature-by-feature comparison
| Feature | Purple | RADIUSaaS |
|---|---|---|
| Cloud RADIUS (RADIUS-as-a-Service) | ✓Multi-region hosted RADIUS, full EAP methods, RadSec | ✓Core product: geo-redundant cloud RADIUS with RadSec |
| Passwordless WPA2/3-Enterprise (EAP-TLS) | ✓Certificate-based staff WiFi, no shared passwords | ✓Core: certificate-based EAP-TLS authentication |
| Managed PKI, no CA to run yourself | ✓Certificate issuance managed within RADIUS-as-a-Service | –Relies on the separate SCEPman or Microsoft Cloud PKI |
| Identity provider sync (Entra ID, Okta, Google) | ✓Entra ID, Okta, Google Workspace, JumpCloud, SAML, LDAP | –Entra ID focused; RADIUS accounts managed in-portal |
| Hardware-agnostic overlay | ✓Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, UniFi | ✓Works with any vendor access points |
| Guest WiFi & captive portal | ✓Branded captive portal, guest data capture, Passpoint | ✕Self-service guest accounts only, no captive portal |
| Footfall & venue analytics | ✓Footfall, dwell time and repeat-visit analytics | ✕Authentication logs and admin reporting only |
| iPSK / multi-tenant WiFi | ✓iPSK Private Area Networks for campus, BTR and coworking | ✕Not in product scope |
| Enterprise compliance | ✓ISO 27001, GDPR, CCPA, Cyber Essentials and B Corp certified | –ISO 27001 for glueckkanja dev and ops |
Book a demo and we will map the switch from RADIUSaaS to Purple.
One platform for secure staff and guest WiFi
Purple gives IT and security teams cloud RADIUS and passwordless WPA2/3-Enterprise with EAP-TLS and managed certificates, so there is no PKI to build or run and no on-prem RADIUS to maintain. It syncs with Entra ID, Okta and Google Workspace, runs as an overlay on the access points you already own, and adds guest WiFi, a branded captive portal, footfall analytics and WiFi marketing in the same platform. Backed by ISO 27001, GDPR, CCPA, Cyber Essentials and B Corp certification across 80,000+ venues. Book a demo to see it on your network.
Frequently asked
Can Purple replace RADIUSaaS for staff WiFi?
Yes. Purple delivers cloud RADIUS with EAP-TLS and certificate-based WPA2/3-Enterprise, the same core capability. The migration is usually a weekend: add Purple as a secondary RADIUS target on your access points, move SSIDs across, then decommission the old service. Purple then also covers guest WiFi, captive portal and analytics on the same platform.
Do I need to run my own PKI with Purple?
No. Purple issues and manages certificates tied to RADIUS-as-a-Service, so you get certificate-based WPA2/3-Enterprise without standing up or operating a certificate authority. RADIUSaaS pairs with the separate SCEPman or Microsoft Cloud PKI to deliver the same outcome.
Which identity providers does Purple sync with?
Purple authenticates against Entra ID, Okta, Google Workspace, JumpCloud, SAML and LDAP, so passwordless staff WiFi is not tied to a single identity vendor. RADIUSaaS is built around Entra ID, with RADIUS accounts managed in its own portal.
Where Purple beats RADIUSaaS
See the product hub and the industries where teams pick Purple over RADIUSaaS.