Cloud PKI and 802.1X network authentication designed for Microsoft Entra ID
Nothing on premise but the network equipment you already own. Passbeam runs a private certificate authority for each network you look after, issues each device or user their own certificate through Intune, and authenticates every connection — Wi-Fi, wired or VPN — against live Entra ID account status.
Secure by default: a network point in a meeting room hands out guest access and nothing else, until a certificate identifies the device or user and moves them onto the VLAN you chose. No shared Wi-Fi passwords to rotate. Disable a user or a device in Entra ID and its certificate stops working — it is refused the next time it authenticates.
What it does
All features →Certificates, through Intune
A private authority per client. Devices enrol over SCEP and renew without anybody touching them.
Wireless and wired 802.1X
RADSec where the hardware speaks it, plain RADIUS where it does not. Both at one site is fine.
Printers, cameras, door controls
Hardware that cannot be enrolled still gets a certificate of its own, and its own VLAN.
- New
Live sessions and accounting
Who is on right now, which switch port or address they hold, and how long they have been there.
- New
VPN gateway authentication
A firewall doing IKEv2 checks the same certificate that gets the laptop onto the office Wi-Fi.
- New
Disconnect a device
End a live session from the portal. The connector does the reaching, so nothing is exposed inbound.
The price is on this page
No “speak to sales”, no quote, no minimum. You can work out what Passbeam would cost you before you give us an email address.
Free forever
Freeup to 10 devices or people
We will never charge for your first 10 devices or people. Not a trial, not an introductory rate, and no card to enter. If 10 is enough for you it is free for as long as you use it — which covers most home labs and a fair few small offices.
Start freeBeyond 10
£1.75per device or person, per month
Counted on what actually holds a certificate, so a device you retire stops costing you the month it stops connecting. That is the price — there is nothing added to it.
Included at every size, including free
- Cloud RADIUS and RADSec servers to authenticate against — two endpoints, in two locations
- A private certificate authority per client
- Entra ID offboarding — access dies with the account
- Device enrolment through Intune or another MDM, and the profiles to do it
- Wi-Fi, wired ports and VPN gateways, on any make that speaks RADIUS or RADSec
- Certificates by hand for printers, cameras and other appliances
- The full authentication log, and the audit trail
- As many clients, sites and colleagues as you like
There is no feature behind a bigger plan. The free tier is the whole product with a smaller number attached to it.
Set up your first network in under 30 minutes
Create your Passbeam account, add a client — a customer, your company, or your own house — and follow the guided checklist through Entra, PKI, Intune and RADSec. Three steps rather than four if it is a network of printers and cameras.