Why Pick RADNAC?

RADNAC was born out of the frustration of a lack of Network Access Control (NAC) solutions that were usable to the majority of users.

A person pointing at a screen displaying data analysis

All the existing options exhibited a mix of the following limitations:

Requires a technical understanding of RADIUS and 802.1X
A long and complicated configuration process
Prohibitively expensive (per user or device pricing models)
Requirement of strong system and network administrator skill sets
Requires a consultant to implement functionality
Unclear or difficult on how to implement best current practice
Data sovereignty where the vendor stores your configuration, credential and PII data
Large amounts of impenetrable documentation

RADNAC is unique in its radical approach to get you started. Other solutions require you learn their platform leading to a sunk cost building non-transferable skills. With RADNAC the only requirement is knowledge of Microsoft Azure and Microsoft Entra ID, services that you are already have or are willing to invest in.

RADNAC installs directly from the Azure Marketplace presenting a wizard with sensible out-of-the-box defaults to have you up and running in ten (10) minutes. The install handles all aspects of provisioning a secure integration with Azure, creating servers and other infrastructure in your chosen geography, and wiring in all the monitoring and alerting.

Where other solutions store your configuration, credentials and usage (PII) data in the vendor's own infrastructure, RADNAC is unique as a SaaS product by running the entire solution in your Bring Your Own Cloud (BYOC) Azure account placing you 100% in control of where your data is located and who is allowed to access it. By using a BYOC model you are able to utilize Azure's built in audit and access controls to meet your compliance requirements.

With over two decades of building and maintaining RADIUS solutions, we knew by offering a native Azure solution all these problems would be avoidable.

Light beams masquerading as data flowing through a network

Security out of the box includes:

Automatically managed firewall with optional Azure DDoS protection plan
RadSec (RADIUS over TLS)
Password and Certificate based authentication
Azure VPN Gateway support to secure legacy non-TLS RADIUS traffic over the Internet
All credentials are encrypted at rest with decryption performed by Azure

All vendors make it difficult to understand why something failed to work as expected, though they provide logs without expert knowledge it often is difficult to gain any insights from them into where the fault may be. RADNAC solves this by integrating with Azure Monitor to provide you the tooling of reporting, dashboards and interactive mapping visuals, to see where slow downs and errors are occurring and help you quickly determine if the problem is with a device, a user account or the network infrastructure its-self.

Lastly, this is all at an affordable price, typically 10x less with also the option for home users to do a 'lite' install to Azure infrastructure costing $4/month.

Compare RADNAC with our competitors

Features
Cost for 5 users (Monthly)	$6 ^(2) (3)	$91	$5 ⁽⁶⁾	$15	$75	$33	$538 (upfront charge $6,420) ⁽⁷⁾	$403 ⁽⁷⁾	Design Dependent
Cost for 50 users (Monthly)	$43 ⁽⁴⁾	$454	$50	$150	$750	$325	$1,523 (upfront charge $12,840)	$1,382	Design Dependent
Cost for 500 users (Monthly)	$478 ⁽⁵⁾	$862	$700	$1,500	$7,500	$3,250	$2,494 (upfront charge $19,260)	$6,774	Design Dependent
Support	Available	Included	Included	Included	Included	Available	Available	Available	Available
User Interface	Native Azure	Vendor	Vendor	Vendor	Vendor	Vendor	Vendor	Vendor	Command Line and Configuration Files
API									Consultant Required
Effort to get Running	Low	Low	Low	Low	Low	Low	Medium	Medium	High
Configuration Interface	Native Azure	Vendor	Vendor	Vendor	Vendor	Vendor	Vendor	Vendor	Command Line and Configuration Files
Data Sovereignty	⁽⁸⁾
Vendor Unable to Access Your Data	⁽⁹⁾
Microsoft Entra ID Users and Groups				⁽¹²⁾	⁽¹²⁾	User Only ⁽¹⁷⁾	⁽¹⁹⁾	Group Only	Consultant Required
802.1X MFA				⁽¹³⁾				⁽¹³⁾	Consultant Required
RADIUS over VPN				Unusable Proxy ⁽¹⁴⁾
Automated Credential Rotation		N/A ⁽¹⁰⁾		⁽¹⁵⁾	⁽¹⁵⁾				Consultant Required
Automated Server Certificates ⁽¹⁾			⁽¹¹⁾		⁽¹⁶⁾	⁽¹⁸⁾	Consultant Required		Consultant Required

Like-for-Like Comparison Notes

If you see any errors or improvements that could be made, do please contact us.

Pricing calculated during November 2025
Pricing includes Cloud hosted instances (with storage) but excludes on premise equipment such as wireless equipment.
Pricing shown is for '`East US`' hosting, other locations will vary in pricing.
Cloud provide pricing is based upon Azure's PAYG (also known as ‘On-Demand’) pricing where use of a savings (typically 30%) or reservation (typically 40%) plan will reduce this. Use the pricing calculator to explore this further.
All pricing sourced from publically avaliable list prices which excludes any negotiated discounts you may be eligible for
All vendors where possible are priced using their monthly commit pricing, an annual commit may reduce this
Where a vendor offers a ‘dedicated’ service tier (as opposed to a contended ’shared’ resource) it is used to match the offering from other vendors
Where vendor pricing for BYOD is listed by device only (sometimes called ‘endpoint’) and not user based, applied is a 2:1 ratio for Device to User conversion (assuming each user has two devices, such as a laptop and a mobile phone)

Comparison Table Footnotes:

(1): Support for the EAP-(T)TLS server certificate (presented to your devices) to be automatically refreshed.
(2): ‘Home’ tier using a Standard_B1ls instance, Empheral OS disk, and IPv6 addresses only; add $3.65 to support public IPv4 addresses.
(3): After October 2028, Azure are retiring Standard_B1ls instances and this will increasing pricing for this configuration to $9.
(4): ‘Team’ tier using two Standard_B2ats_v2 instances, 8GiB for the OS disk and using IPv4 addresses.
(5): ‘Enterprise’ tier using two Standard_D4als_v6 instances, 16GiB for the OS disk and IPv4 addresses.
(6): ‘Basic’ tier using shared infrastructure.
(7): Cost calculated without service redundancy (single server deployment).
(8): Bring Your Own Cloud (BYOC) – you own and control the Azure subscription that RADNAC installs into.
(9): When you choose a ‘co-administrator’ support based plan audited access is provided to coreMem Limited to your data.
(10): Uses application credentials maintained by vendor.
(11): Requires vendor EZCA product.
(12): Uses administrator user credentials creating both reliability and security audit concerns.
(13): Requires additional third party service.
(14): Unreliable for 802.1X/wireless as it supports only a single RADIUS request at a time leading to slowdowns and timeouts when multiple devices connect.
(15): As administrator user credentials are used, occasional manual renewing is required to refresh credentials.
(16): Requires installation of Vendor CA on connecting devices which may be a security concern.
(17): Does not provide Single Sign-On (same password) functionality.
(18): Vendor or Private CA options are avaliable.
(19): Uses a non-expiring credential that may raise security concerns.

Need help to get your users connected securely? Let's talk!

info@radnac.com

+44.3302295955

RADNAC is a coreMem Limited product.

Registered in England, number 10136672.

Terms and Conditions | Privacy Policy