NACIO
NACIO is network access control software for 802.1X RADIUS authentication, device profiling, compliance enforcement, and captive portals.
What NACIO is
NACIO is network access control software for 802.1X RADIUS authentication, device profiling, compliance enforcement, and captive portals. It supports wired, wireless, and VPN access control and is currently in pre-release, with early access available by request. Organizations can self-host it on their infrastructure or use a cloud-hosted service. Its built-in RADIUS supports EAP-TLS, PEAP-MSCHAPv2, EAP-TTLS, EAP-FAST, and CHAP. Listed identity sources include Active Directory, Azure AD/Entra ID, Okta, Google Workspace, SAML 2.0, LDAP/LDAPS, RADIUS proxy, and a local user database. The Windows and macOS agent checks patch level, antivirus, disk encryption, firewall status, and custom rules before access is granted. NACIO also profiles endpoints using DHCP fingerprints, HTTP user-agent information, and network behavior. Guest portals can use sponsor approval, verification by SMS or email, social login, and time limits. Licensing is perpetual per device and tied to a major version, with optional upgrades to the next major version. Pricing details are available on request.
Good
- Supports wired, wireless, and VPN access control.
- RADIUS includes several listed authentication methods.
- Endpoint checks cover patching, antivirus, encryption, and firewall status.
- Can be self-hosted or cloud-hosted.
Watch out
- Currently in pre-release.
- Pricing details are provided on request.
- Licenses are tied to a major version.
Who it suits
NACIO lists enterprise campuses, BYOD, hospitality and venues, OT and IoT, healthcare, and managed service providers as use cases. It may suit organizations seeking wired, wireless, or VPN access control with endpoint compliance checks.
Verdict
NACIO combines authentication, endpoint checks, profiling, and guest access controls, with self-hosted and cloud-hosted deployment options. Its pre-release status and request-based pricing are important considerations before pursuing access.
The facts
Each one read from NACIO's own pages, with the date it was checked.
What it does
- Captive portal
- Guest portals support sponsor approval, SMS or email verification, social login, and time-limited access.checked 7 Oct 2026
- Certificates
- NACIO includes an internal certificate authority for issuing and managing machine and user certificates, with agent deployment to Windows and macOS.checked 7 Oct 2026
- Deployment
- NACIO can be self-hosted on the customer’s infrastructure or used as a cloud-hosted service.checked 7 Oct 2026
- Endpoint compliance
- The Windows and macOS agent can check patch level, antivirus, disk encryption, firewall status, and custom rules before access is granted.checked 7 Oct 2026
- High availability
- NACIO offers active-passive high availability with automatic failover and synchronized sessions, leases, and endpoint records.checked 7 Oct 2026
- Identity integrations
- Listed identity sources include Active Directory, Azure AD/Entra ID, Okta, Google Workspace, SAML 2.0, LDAP/LDAPS, RADIUS proxy, and NACIO’s local user database.checked 7 Oct 2026
- Intended users
- The site describes use for enterprise campuses, BYOD, hospitality and venues, OT/IoT, healthcare, and managed service providers.checked 7 Oct 2026
- Licensing
- The site says NACIO uses perpetual per-device licenses tied to a major version, with optional upgrades to the next major version.checked 7 Oct 2026
- Network compatibility
- NACIO says it works with RADIUS-capable switches, access points, and firewalls, and lists vendors including Cisco, Juniper, Aruba, Ubiquiti, Fortinet, and Palo Alto.checked 7 Oct 2026
- Network integrations
- NACIO says it works with RADIUS-capable switches, access points, and firewalls, and lists vendors including Cisco, Aruba, Juniper, Ubiquiti, Fortinet, and Palo Alto.checked 7 Oct 2026
- Product
- NACIO is network access control software for 802.1x RADIUS, device profiling, compliance enforcement, and captive portals.checked 7 Oct 2026
- Product status
- NACIO is currently in pre-release; the maker invites visitors to request early access and says pricing details will be provided.checked 7 Oct 2026
- RADIUS
- Its built-in RADIUS supports EAP-TLS, PEAP-MSCHAPv2, EAP-TTLS, EAP-FAST, and CHAP for wired 802.1x, wireless, and VPN authentication.checked 7 Oct 2026
- RADIUS and authentication
- Its built-in RADIUS supports EAP-TLS, PEAP-MSCHAPv2, EAP-TTLS, EAP-FAST, and CHAP for wired, wireless, and VPN authentication.checked 7 Oct 2026
- Release status
- NACIO is currently in pre-release, and the site invites visitors to request early access.checked 7 Oct 2026
- Security
- The site says remote agents connect over encrypted tunnels and remote probes need no VPN or open firewall ports.checked 7 Oct 2026
- Support
- Early access includes dedicated onboarding support and a direct line to the engineering team.checked 7 Oct 2026
- What it does
- NACIO provides network access control, including 802.1X RADIUS, device profiling, compliance enforcement, and captive portals.checked 7 Oct 2026
- Who it is for
- Listed use cases include enterprise campuses, BYOD, hospitality and venues, OT and IoT, healthcare, and managed service providers.checked 7 Oct 2026
Where it runs
- Device compliance
- The Windows and macOS agent checks patch level, antivirus, disk encryption, firewall status, and custom rules before granting access.checked 7 Oct 2026
- Device discovery
- The product describes active and passive scanning that maps IP ranges, resolves hostnames, fingerprints ports and services, and flags rogue or unmanaged devices.checked 7 Oct 2026
- Device profiling
- NACIO profiles endpoints using DHCP fingerprinting, HTTP user-agent data, and network behavior analysis.checked 7 Oct 2026
Alternatives to NACIO
- 1
PacketFence
Free planOpen sourceAndroidiOSWebAPI8.5From $5,000 a year - 2
NetAttest EPS
AndroidiOSmacOSSelf-hosted7.5From ¥625 a year - 3
SecureW2 Cloud NAC
AndroidiOSWebAPI6.7 - 4
Foxpass
WebAPILinuxmacOS6.6From $0.50 a month - 5
Portnox NAC
AndroidiOSWebAPI6.5 - 6
NACVIEW
Free planAPILinuxmacOSSelf-hosted6.4Free plan