Secure staff WiFi and guest WiFi, one platform, no PKI to run
RUCKUS Cloudpath is a certificate-based onboarding and PKI platform, widely used in higher education. Purple delivers the same passwordless WPA2/3-Enterprise on cloud RADIUS, with managed certificates so there is no PKI to stand up and operate, and adds guest WiFi, captive portal and venue analytics on the access points you already own.
- Cloud RADIUS with EAP-TLS, certificate-based WPA2/3-Enterprise
- Managed certificates, no PKI or certificate authority to run yourself
- Hardware-agnostic: Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, UniFi
- Guest WiFi, captive portal and venue analytics in the same platform
See Purple on your network
Book a 30-minute demo and we will show Purple running cloud RADIUS on your stack.
Join 80,000+ venues. We’ll never share your details.
Why teams move from Cloudpath to Purple
Cloudpath asks you to build and run a certificate authority.
Purple issues and manages certificates for you, so you get passwordless WPA2/3-Enterprise without operating a PKI.
Cloudpath is a certificate onboarding and policy system.
Purple runs cloud RADIUS and EAP-TLS too, and adds guest WiFi, captive portal and venue analytics on the same platform.
Cloudpath is most tightly aligned with RUCKUS hardware.
Purple runs as a vendor-neutral overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist and UniFi alike.
Cloudpath secures onboarding and stops there.
Purple secures staff onboarding and runs guest WiFi, footfall and dwell analytics and WiFi marketing for the whole venue.
Cloudpath publishes no product-specific compliance certifications.
Purple is ISO 27001, GDPR, CCPA, Cyber Essentials and B Corp certified across the platform your teams and guests use.
Built for IT, security and the whole venue
Purple gives IT and security teams passwordless WPA2/3-Enterprise on cloud RADIUS, and gives the rest of the venue guest WiFi, analytics and marketing, all on one platform.
IT & network teams
Cloud RADIUS with EAP-TLS on the access points you already own, across Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist and UniFi, with no on-prem RADIUS to maintain.
Security & compliance teams
Passwordless, certificate-based WPA2/3-Enterprise with managed PKI, backed by ISO 27001, GDPR, CCPA, Cyber Essentials and B Corp certification.
Guest experience teams
A branded captive portal, guest data capture, footfall analytics and WiFi marketing that a certificate onboarding tool does not carry.
Multi-site or campus IT
Secure staff WiFi, guest WiFi and iPSK multi-tenant networks across every building and campus from one dashboard.
Why 80,000 venues choose Purple
See what secure staff and guest WiFi looks like on your network.
Feature-by-feature comparison
| Feature | Purple | Cloudpath |
|---|---|---|
| Cloud RADIUS (RADIUS-as-a-Service) | ✓Hosted cloud RADIUS that replaces on-prem RADIUS, NPS or ISE | ✓Built-in RADIUS as part of the enrolment system |
| Passwordless WPA2/3-Enterprise (EAP-TLS) | ✓Certificate-based onboarding and iPSK, no shared passwords | ✓Core: unique per-device certificate onboarding |
| No PKI to build or operate | ✓Certificates issued and managed within RADIUS-as-a-Service | ✕Full certificate authority and policy to configure and run |
| Identity provider sync (Entra ID, Okta, Google) | ✓Entra ID, Okta, Google Workspace, JumpCloud, SAML, LDAP | ✓SAML/SSO with Entra ID, Okta and Google |
| Hardware-agnostic overlay | ✓Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, UniFi | ✓Works with any vendor, most aligned with RUCKUS |
| Guest WiFi & captive portal | ✓Branded captive portal, Passpoint/OpenRoaming, guest data capture | –Secure guest onboarding, no captive-portal marketing |
| Footfall & venue analytics | ✓Footfall, dwell time and repeat-visit analytics | ✕No footfall or marketing analytics |
| iPSK / dynamic PSK | ✓iPSK Private Area Networks across any AP vendor | ✓DPSK, strongest on RUCKUS hardware |
| Enterprise compliance | ✓ISO 27001, GDPR, CCPA, Cyber Essentials and B Corp certified | –No product-specific certifications published |
Book a demo and we will map the switch from Cloudpath to Purple.
One platform for secure staff and guest WiFi
Purple gives IT and security teams cloud RADIUS and passwordless WPA2/3-Enterprise with EAP-TLS and managed certificates, so there is no certificate authority to build or run. It syncs with Entra ID, Okta and Google Workspace, runs as a vendor-neutral overlay on the access points you already own, and adds guest WiFi, a branded captive portal, footfall analytics and WiFi marketing in the same platform. Backed by ISO 27001, GDPR, CCPA, Cyber Essentials and B Corp certification across 80,000+ venues. Book a demo to see it on your network.
Frequently asked
Do I need to run my own PKI with Purple?
No. Purple issues and manages certificates through a branded onboarding flow and validates against your existing identity provider, so you get certificate-based WPA2/3-Enterprise without standing up or operating a certificate authority. Cloudpath, by contrast, is a PKI you configure and run.
Can Purple replace Cloudpath for staff WiFi?
Yes. Purple covers cloud RADIUS, EAP-TLS and certificate onboarding, the same core need, with less to configure and operate. It then also delivers guest WiFi, captive portal, footfall analytics and marketing on the same platform.
Does Purple work with non-RUCKUS hardware?
Yes. Purple runs as a vendor-neutral cloud overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist and Ubiquiti UniFi, so there is no hardware swap and no single-vendor alignment.
Where Purple beats Cloudpath
See the product hub and the industries where teams pick Purple over Cloudpath.