Netgraph Connectivity Platform

The Connectivity Platform for
Identity-Based Network Access

Netgraph Connectivity Platform™ is a cloud-native access control platform that gives you full control over users, devices, and IoT across Wi-Fi and wired networks.

Netgraph admin console on desktop, laptop and phone
Sign In Guest Wi-Fi and captive portal EntryPoint Cloud RADIUS for 802.1X and iPSK EasyPSK Personal Wi-Fi on Cisco networks Endpoint Manager Device control for Cisco ISE
What it solves

Strong access control, made simple.

Traditional NAC solutions are powerful, but often complex, costly, and hard to scale.

The Netgraph platform simplifies how organizations control network access by combining identity, policy, and automation into a single cloud-native service. Whether it's employees, guests, BYOD devices, or IoT, access is handled consistently, securely, and without friction.

Safe. Simple. Smooth.

Platform modules

Built as modular services, delivered as one platform

Deploy individually or together. Same admin, same policy engine, same identity model across every module.

Use cases

Designed for real-world deployments

Same platform, different shapes. The deployment depends on who needs to get on the network.

Customer stories

Same platform. Different stories.

From a Swedish kommun to six alpine destinations, Netgraph runs the networks others can't fit on one platform.

Trust, architecture & operations

Cloud-native by design. Trusted by default.

A distributed SaaS built without appliances or on-prem dependencies, wrapped in encryption, identity-based policy and SLA-backed operations.

99.95%
Target uptime SLA
100%
OpEx model
0
Appliances to rack
01

Architecture

  • Micro-service architecture, multi-region on AWS
  • No on-premise infrastructure required
  • Secure protocols: RADSec, IPSec, TLS, APIs
  • Multi-tenant for partners and enterprises
02

Security & compliance

  • Encrypted communication & storage
  • Identity-based policy enforcement
  • Full audit logs and export capabilities
  • Configurable data retention and GDPR alignment
03

Operations & SLA

  • Multi-region high availability
  • Defined SLA levels (e.g. 99.95% uptime)
  • Partner-driven support model
  • Continuous updates with no downtime
Integrations & ecosystem

Works with the network you already have

The platform integrates seamlessly with leading vendors and identity providers. Extend your existing infrastructure instead of replacing it.

Any network

Plug into the Wi-Fi gear you already own. Standards-based RADIUS works on any vendor.

  • Sign In on any vendor via Cisco Service Gateway
  • RADIUS standards: EAP-TLS, PEAP, MAB
  • Cisco extras: iPSK, EasyPSK, direct on Meraki

Microsoft

Identity-driven access using the directory you already run for the rest of your stack.

  • Microsoft Entra ID (formerly Azure AD)
  • Microsoft Intune (device posture)
  • Group-based policy assignment

Open APIs

Wire Netgraph into the rest of your operations, or extend it with your own automation.

  • REST APIs for every module
  • Webhooks for downstream automation
  • SAML / OAuth federation for SSO
How it works

A simple model behind complex control

Identify → Authenticate → Authorize → Operate

1
Identify

Who and what is connecting

Users and devices are identified via network, credentials, or device attributes.

2
Authenticate

Prove the identity is real

Authentication is handled via RADIUS, captive portal, or federation.

3
Authorize

Apply the right policy

Policies dynamically assign access: VLAN, SGT, ACL, group policies.

4
Operate

Run, log, and self-serve

Lifecycle, logging, and self-service handled centrally.

Self-service & delegation

Hand a building to the people who run it

Self-service runs through every service: hosts approve their guests, teams register their devices, residents manage their key. With EasyPSK it now reaches a whole building. Groups belong to sites, and a Site manager role gives housing staff, a front desk or a fair organiser their own sites in the Self-Service Portal, while IT keeps the rules, the identity and the audit log.

The Sites page of the Admin Console: a city map with one circle per site showing the devices online, a card for the selected site with its online devices and groups and the buttons Edit site, Print Wi-Fi Key Cards and Groups, and the list of sites with their groups and devices
Sites in the Admin Console: every site with its groups and the devices online right now, its Site managers one click away and the Wi-Fi Key Cards ready to print.

IT, in the Admin Console

Connects the network, creates the sites and their policies, and decides per role what a Site manager sees and may do.

Site managers, in the Self-Service Portal

Create a group at move-in, print the key card, block a device, give the group a new key at move-out. Only in their own sites.

Residents, teams and guests

Sign in with their email or single sign-on and find their network, key and devices waiting, or get a group of their own at the first sign-in.

See EasyPSK or read what Site managers do in the Self-Service Portal.

Identity & admin management

Automatic provisioning, team-based delegation

Connect your identity provider over SCIM and administrators provision themselves. Group them into Teams, grant roles once, and give each team exactly the access it needs in every service context.

Teams, SAML and SCIM in five minutes, narrated and captioned.
Your identity provider Microsoft Entra ID · Okta Any SCIM 2.0 provider, with SAML single sign-on for the same accounts
SCIM 2.0 users & groups
Auto-provisioned Administrators & Teams Groups become Admin Teams or Self-Service Teams. Members inherit the team's roles and lose them the moment they leave.
You grant roles per context
Scoped access Roles per context Sign In · EntryPoint · EasyPSK · Endpoint Manager, each service context on its own
Why Netgraph

Modern Zero Trust without the complexity

Strong access control shouldn't require months of project work or a stack of appliances. Netgraph gives you the outcomes without the operational drag.

No on-prem NAC infrastructure

Netgraph is delivered entirely as a cloud service. No appliances to rack, no patching to schedule, no hardware lifecycle to plan around.

Faster deployment, lower overhead

Onboard sites and identities in days, not quarters. Reduce day-2 effort with built-in automation, self-service, and cleanly modeled policies.

Built-in self-service

Empower meeting hosts, residents, students, and IT delegates to handle their own access. IT keeps control without becoming the bottleneck.

Cloud scale, multi-tenant by design

Horizontally scaled and multi-tenant by default, with isolation per tenant and resilience built into every layer of the platform.

Cisco Solution Partner

Buy where you already buy Cisco

Netgraph is available through Cisco Marketplace, with the same purchasing process, same partners, and no new procurement workflow to set up.

Cisco Solution Partner Available on Cisco Marketplace Built for Cisco Networks
Get started today

Safe. Simple. Smooth. See for yourself.

Bring your toughest requirements. We'll show you how Netgraph handles them, on your existing network, with the identities and tools you already use.

Our universe of Collaborators

CiscoConsciaTeliaTelia CygateTele2TelenorAteaAdvania