Choose the Right Foxpass Plan to Secure Every User, Device, and Network
Foxpass provides flexible licensing options for organizations at every stage of their zero-trust journey — from credential-based Wi-Fi authentication to full certificate-based access, MDM-driven device identity, and standalone PKI deployments.
Foxpass License Tiers
Access Control Plans
Standard License
EAP-TTLS (Username/Password) Authentication + Cloud LDAP
The simplest way to secure Wi-Fi and VPN access using identity-based credentials.
Best for:
Organizations seeking password-based Wi-Fi/VPN authentication and cloud directory integration.
Includes:
Foxpass Cloud RADIUS (Wi-Fi & VPN access control)
EAP-TTLS network authentication
RADIUS over TLS (RadSec)
Foxpass Cloud LDAP (user/group directory for VPN, legacy apps, legacy Active Directory authentication replacement)
Group-based access control
Directory sync & password delegation (Entra ID, Google Workspace, Okta, OneLogin)
Role-based administrative controls (RBAC)
Web-based admin console and API
Standard logging & monitoring - 24h audit log retention (RADIUS & LDAP)
High availability with global redundancy
SOC 2 Type II and HIPAA-ready infrastructure
Email-based support
Guided onboarding setup assistance - no extra fee or hidden costs
Advanced License
EAP-TLS (Certificate-Based Authentication) + Cloud PKI
Deploy zero-trust, certificate-based access across all devices, with a fully managed PKI included.
Best for:
Teams adopting certificate-based Wi-Fi/VPN authentication, device identity, or MDM-driven certificate enrollment.
Includes Everything in Standard, plus:
EAP-TLS & certificate-based authentication
Foxpass Cloud PKI (built-in)
Automated certificate lifecycle management
SCEP and MDM integrations (Intune, Jamf, Iru, Addigy)
BYOD certificate installer
Support for 3rd party PKI
Certificate-driven device identity for conditional access
Real-time certificate audit logging
Automated certificate invalidation tied to your identity provider
Enforcement of device trust and zero-trust policies
Standalone Certificate Management
Foxpass Cloud PKI (Standalone)
Fully Managed Cloud PKI
Issue, renew, and revoke X.509 certificates across all devices, platforms, and MDMs — even if you don’t use Foxpass RADIUS.
Best for:
Organizations with existing RADIUS servers
Teams enabling Microsoft Entra CBA
Intune/Jamf/Iru/Addigy certificate enrollment
VPNs or VDI requiring certificate authentication
Replacing on-prem Active Directory Certificate Services (ADCS)
Hybrid or non-Foxpass network architectures
Key capabilities:
Fully managed private CA & certificate lifecycle automation
SCEP and BYOD enrollment paths
Works with any RADIUS/VPN/firewall appliance
Zero-trust device identity & compliance enforcement
High availability with global redundancy
SOC 2 Type II–aligned PKI infrastructure
Base Plan Comparison
Features | Standard | Advanced | Cloud PKI (standalone) |
|---|---|---|---|
Cloud RADIUS | |||
EAP-TTLS (credential authentication) | |||
EAP-TLS (certificate-based authentication) | |||
RADIUS over TLS (RadSec) | |||
Foxpass Cloud PKI | |||
SCEP/MDM certificate enrollment | |||
BYOD Certificate Installer | |||
Cloud LDAP | |||
Directory Sync (Google Workspace, Entra ID, Okta, OneLogin) | |||
Real-Time Directory & Access Updates | |||
Admin Console & API Access | |||
Log Retention | 24 Hours (Extendable to 90 Days) | 24 Hours (Extendable to 90 Days) | 24 Hours (Extendable to 90 Days) |
Security Compliance | SOC 2 Type II, ISO/IEC 27001:2022, HIPAA-Ready | SOC 2 Type II, ISO/IEC 27001:2022, HIPAA-Ready | SOC 2 Type II, ISO/IEC 27001:2022, HIPAA-Ready |
Support Level | Standard Support | Priority Support | Standard Support |
Custom Pricing | Contact Us | Contact Us | Contact Us |
Available Add-Ons
Engineering License Add-On
Built for DevOps, SRE, and IT engineering teams managing Linux, macOS, and SSH workflows.
Includes:
POSIX attribute support (UID, GID, shell, home directory)
SSH key upload, rotation, and enforcement
Sudo access policy enforcement
Command-line and API integration
Ideal for: SSH access control, Linux/macOS login, sudo governance, cloud-native LDAP integration
Extended Logging Add-On
Get 90-day searchable access logs for RADIUS and LDAP activity. Meet compliance needs, simplify audits, and investigate access events across a longer time horizon.
Includes:
90-day log retention
Exportable logs for audits
Enhanced incident traceability
Secure, role-based access to logs
Volume, EDU, and Nonprofit Discounts
Foxpass offers discounted pricing for:
Educational institutions (K–12, Higher Ed, charter networks)
Nonprofit organizations
Volume-based deployments (multi-campus, multi-site, large user counts)
Just let us know who you are. We’re happy to work with your budget.
Private Tenancy & Self-Hosted Options
Need a fully private instance or isolated deployment?
Foxpass supports custom deployment options:
Dedicated cloud tenancy
Self-hosted deployments (enterprise only)
Custom compliance and firewall configuration
Let’s Tailor a Plan to Fit Your Needs
Foxpass pricing scales with your team size, authentication volume, and security requirements. Let us create a custom quote that works for your infrastructure and budget.