Got Questions? We've Got Answers

Here's the honest truth: most folks are live in under 30 minutes. Here's what that looks like:

• Sign up for an account (about 2 minutes) - no credit card needed
• Set up your RADIUS settings in our dashboard (10 minutes)
• Point your access points to our RADIUS servers (10-15 minutes)
• Customize your captive portal if you want (totally optional)

No hardware to buy, no software to install. Compare that to the 6+ weeks a typical on-premises RADIUS setup takes. We'll have you going in less time than it takes to watch a movie.

Almost certainly, yes! We're hardware-agnostic, which means we work with any access point or controller that supports RADIUS. That's over 45 manufacturers, including:

• Cisco, Cisco Meraki, Aruba (HPE), Ruckus
• Ubiquiti UniFi, TP-Link Omada, MikroTik
• Fortinet, Cambium, EnGenius
• Juniper Mist, Extreme Networks
• And plenty more...

The simple rule: if your hardware supports RADIUS, it works with IronWiFi. Check out our full compatibility list to be sure.

Absolutely! We offer a 14-day free trial with access to everything - no credit card required, no strings attached.

Take captive portals for a spin, test out RADIUS authentication, connect your identity provider, even try OpenRoaming. You'll get up to 100 users and full support from our team while you're testing.

Start your free trial now

Don't worry, you're not the first to ask! RADIUS stands for Remote Authentication Dial-In User Service (yes, it's a mouthful). It's basically the bouncer at your network's door - it checks everyone's credentials before letting them in. As of 2026, RADIUS remains the industry-standard protocol for network access control.

With IronWiFi, we host the RADIUS servers for you in the cloud. That means you get all the security benefits without having to maintain servers yourself. We support all the authentication methods you'd expect:

• EAP-TLS (the gold standard - uses certificates instead of passwords)
• PEAP-MSCHAPv2 (classic username and password)
• EAP-TTLS (tunneled authentication for extra security)
• MAC Authentication Bypass (for those printers and IoT devices)

WPA-Enterprise (you might also hear it called WPA2-Enterprise or WPA3-Enterprise) is how the pros do WiFi security. Instead of everyone sharing the same password (which we've all seen written on a whiteboard), each person gets their own credentials.

Here's why that matters:

• Everyone has their own unique login or certificate
• You can see exactly who's connected and when
• When someone leaves the company, you just revoke their access - no changing the WiFi password for everyone
• No more shared passwords getting leaked or posted on social media

IronWiFi gives you all the RADIUS infrastructure you need for WPA-Enterprise, without the headache of managing it yourself. Learn more about WPA-Enterprise.

You've definitely used one before, even if you didn't know what it was called. A captive portal is that page that pops up when you connect to WiFi at a coffee shop, hotel, or airport - the one that asks you to log in or accept terms before you can get online.

Businesses use them to:

• Collect guest info (like emails for your mailing list)
• Show terms of service and get legal protection
• Charge for premium access
• Display promotions or welcome messages

Our captive portals let guests sign in with their social accounts (Facebook, Google, LinkedIn, Apple), their email or phone number, voucher codes, or even payment through Stripe and PayPal. See what our captive portals can do.

OpenRoaming is like having a VIP pass to WiFi networks around the world. It's a global federation (run by the Wireless Broadband Alliance) that lets devices automatically and securely connect to participating networks - no login screens, no passwords. In 2026, the OpenRoaming federation continues to expand rapidly with new hotspots and identity providers joining every month.

Here's what makes it cool:

• No captive portals or passwords to deal with
• Your device connects automatically using secure certificates
• Over 3 million hotspots globally and growing (Source: WBA)
• Connect once, roam everywhere - like cellular, but for WiFi

We're a WBA OpenRoaming partner, which means we can be your Identity Provider for the federation. Learn about OpenRoaming.

Passpoint (sometimes called Hotspot 2.0) works similarly to OpenRoaming - your devices automatically find and connect to participating WiFi networks using encrypted credentials. Think of it like how your phone switches between cell towers, but for WiFi.

We can help you set up Passpoint and provision your devices with the profiles they need for automatic, secure connections. Learn about Passpoint.

You bet! We play nicely with all the major identity providers:

• Microsoft Entra ID (Azure AD) - Including Intune device compliance checks
• Okta - Syncs with your Universal Directory
• Google Workspace - Works with Cloud Identity
• Active Directory/LDAP - For those running on-premises directories

What does this mean for you? Your users authenticate against the directory you already have. No duplicate accounts to manage. Real-time lookups. Automatic provisioning. And you can enforce policies based on group membership or whether devices are compliant. See all our integrations.

FreeRADIUS is great open-source software - but you have to install it, configure it, and maintain it yourself. IronWiFi is all of that, fully managed. Here's the real difference:

• Setup time: FreeRADIUS needs Linux expertise and takes days or weeks to get right. We deploy in 30 minutes.
• Ongoing work: FreeRADIUS means you're patching, updating certs, and monitoring forever. We handle all of that.
• Reliability: Building high availability with FreeRADIUS is a project in itself. We have built-in redundancy across 6 global regions.
• True cost: FreeRADIUS is "free" but your team's time isn't. We start at $5/device/month with everything included.

We guarantee 99.9% uptime on all paid plans - and honestly, we do better than that. Our actual uptime over the past 12 months has been 99.99%+.

We run on AWS with automatic failover across multiple availability zones. And we've got 6 global regions to keep things fast wherever you are: US East, US West, Europe (Frankfurt), Europe (London), Asia-Pacific (Singapore), and Asia-Pacific (Sydney).

Definitely - that's actually what we're built for. Manage all your locations from one dashboard, with:

• One set of policies that applies everywhere (or different policies per site - your call)
• Custom captive portal branding for each location
• Analytics and reporting broken down by site
• Role-based access so regional admins only see what they need

We have enterprise customers running 100+ locations across multiple countries from a single console. Whether you've got 3 offices or 300, we've got you covered.

We believe in straightforward pricing - what you see is what you pay. No hidden fees, no surprises:

• Guest WiFi: From $13/access point/month (min 5 APs) - Captive portal, social login, guest analytics
• Employee WiFi: From $6.50/user/month (min 10 users) - WPA-Enterprise, identity provider integration, RADIUS
• IoT Devices: From $5/device/month (min 13 devices) - Device authentication, certificate management

Every plan comes with a 14-day free trial, no setup fees, and no sneaky per-user charges for basic authentication. See the full pricing breakdown.

Nope, zero. You can sign up, configure your network, and go live without paying a dime upfront.

We don't charge for professional services on standard deployments either. If you're an enterprise customer with a complex migration, we can help with that for an additional fee - but it's completely optional.

We price based on what you need: Guest WiFi is per access point, Employee WiFi is per user, and IoT is per device. Pick only what applies to you.

If you've got a lot of users, we offer custom enterprise pricing that usually works out better than per-user models. Get in touch and we'll put together a quote that makes sense for you.

Security isn't an afterthought for us - it's the whole point. Here's what we've built:

• SOC 2 Type II compliant - We've been audited, and our controls are solid
• TLS 1.3 encryption - Everything's encrypted in transit
• Certificate-based 802.1X - EAP-TLS means no passwords to steal
• WPA3-Enterprise support - The latest and greatest WiFi security
• MDM/Intune integration - We can check if devices are compliant before letting them on

We run on AWS with automatic failover, and here's a stat we're proud of: as of 2026, over 1 billion authentications processed with zero security breaches.

Yes, we're fully GDPR compliant. Here's what that means in practice:

• SOC 2 Type II certification
• Data Processing Agreements (DPAs) available for EU customers
• You pick where your data lives - we won't move it
• Full support for right to erasure and data portability requests

We also support HIPAA for healthcare and PCI-DSS for payment processing. If you need a DPA, just ask.

We run in 6 regions worldwide, and you get to choose where your data is stored:

• US East (Virginia)
• US West (Oregon)
• Europe (Frankfurt, Germany)
• Europe (London, UK)
• Asia-Pacific (Singapore)
• Asia-Pacific (Sydney, Australia)

If you're in the EU and need your data to stay in the EU, no problem - just pick Frankfurt or London and you're set.

We're here when you need us. Here's what each plan includes:

• All plans: Email support - we'll get back to you within 24 hours
• Professional: Priority support with faster response times
• Enterprise: Phone support, your own dedicated account manager, and custom SLAs

And we're not just reading from scripts. Our support team has 100+ combined years of networking experience with certifications like CCIE, CWNA, CISSP, and AWS Solutions Architect. They've seen it all.

Tons! We've put together guides for just about everything:

• Help Center - Step-by-step walkthroughs
• Specific setup guides for 45+ hardware vendors
• Video tutorials for the most common configurations
• Full API documentation if you want to build custom integrations