Arbiter

What Arbiter is

Arbiter is a cloud-hosted network access control service that determines which devices can connect and what access they receive. It discovers connecting devices and catalogs them by type and vendor without requiring endpoint agents. For authentication, it supports certificate-based EAP-TLS and 802.1X, plus MAC authentication bypass for headless devices. Its on-premises Edge appliance connects to Arbiter over RadSec and can keep authenticating locally during a WAN outage by using cached decisions. A live Microsoft Intune integration reads device compliance and can quarantine non-compliant devices to a remediation VLAN. SIEM event forwarding supports Microsoft Sentinel, Elastic, TLS syslog, Splunk HEC, and generic HTTPS webhooks. Arbiter supports wired and wireless access control in a hybrid deployment. Its Asset Discovery plan profiles and inventories devices but does not enforce access; the access-control tiers include the full feature set and differ by endpoint count. The listed prices are €29 per month for Asset Discovery after a 60-day free trial, €149 per month for Essential, €399 per month for Professional, and €999 per month for Enterprise. Arbiter says customer data is encrypted at rest with AES-256 on EU-hosted infrastructure, and access-layer metadata is recorded without capturing network payloads.