Keytos Shield EZCA EZRADIUS EZSSH EZCMS EZMonitor

Azure cloud RADIUS network authentication, made easy

Authenticate Wi-Fi, VPN, and network access using Microsoft Entra ID and Microsoft Intune. No NPS servers or VMs to manage, no sync jobs or bolt-ons, and usage is billed straight to your Azure subscription.

Integrates with

Azure Marketplace Entra ID Intune Azure Billing Cloud PKI AD CS Sentinel MACC
  • Native Entra ID integration and Intune compliance checks, no sync jobs, no bolt-ons
  • Deploy from the Azure Marketplace and bill to your subscription and MACC credits
  • Hosted in the cloud as a SaaS service, no VMs or Azure resources to patch or pay for
  • Free 1-month trial, then only pay for who connects, with no long-term contracts
Deploy from Azure Marketplace Pricing Book a demo

1,200+

Global organizations
trust Keytos

45M+

RADIUS authentications
per month by EZRADIUS

12+

RADIUS regions to choose from for low latency

99.95%

Enterprise-tier service availability

4.8/5

G2 Users Love Us badge G2 High Performer, Fall 2026 badge

"No server deployment needed for wireless authentication with Entra credentials. Straightforward setup, and the organization eliminated its on-premises RADIUS server entirely by moving to a fully cloud-based infrastructure."

Renzo Patricio C. · Senior System Administrator

Why Azure-first teams choose EZRADIUS

EZRADIUS deploys like any other Azure resource, so it fits straight into the subscriptions, resource groups, and billing your team already manages

  • Deploys from the Azure Marketplace and bills to your subscription

  • Hosted in the cloud as a SaaS service. No VMs or Azure resources to patch, manage, or pay for

  • Only pay for who connects to your network. No minimums, add-on fees, or long-term contracts

  • Free 1-month trial to try EZRADIUS in your environment

  • Native Entra ID, Intune, and Cloud PKI integration, checked in real time

  • Counts toward your Azure Consumption Commitment (MACC) for eligible EAs

  • Deploy and start authenticating in seconds, not days

Other RADIUS Solutions

  • Deployed and licensed outside Azure with separate vendor invoices

  • No Azure Marketplace listing, so spend can't count toward MACC commitments

  • Minimum purchase requirements which lead to unused licenses and wasted spend

  • No free trial, or a hard, sales-gated evaluation

  • Entra ID and Intune bolted on after the fact via manual configuration and connection strings

  • Manual resource provisioning outside your normal Azure workflows

  • Days or weeks of NPS VM and server setup before the first authentication

Built for Azure. Billed like Azure.

EZRADIUS behaves like the rest of your Azure estate, from how you buy it to how it authenticates your users.

Deploy from the Azure Marketplace

Find EZRADIUS in the Azure Marketplace and deploy it into your own subscription and resource group, just like any other Azure resource. Deployment takes seconds.

Billed to your Azure subscription

Usage lands on the Azure invoice you already pay, and for eligible enterprise agreements it counts toward your Microsoft Azure Consumption Commitment.

Native Entra ID, Intune, and Cloud PKI

Authenticate against Entra ID and enforce Intune device compliance in real time, and keep trusting the certificates AD CS or Microsoft Cloud PKI already issues.

Fully hosted and highly available

No VMs or Azure resources to patch, manage, or pay for. High availability and geo-redundancy are built in for enterprise-grade reliability and uptime.

Deploys like any other Azure resource

EZRADIUS lives inside your Azure subscription and resource group, connecting directly to Entra ID, Intune, Microsoft Cloud PKI, AD CS, and Sentinel, so it looks and bills like the rest of your Azure environment.

EZRADIUS deployed from the Azure Marketplace into an Azure subscription, connected to Entra ID, Intune, Microsoft Cloud PKI, AD CS, and Sentinel

Up and running in 4 steps, straight from Azure

No servers to provision, no separate vendor to onboard. Deploy from the Azure Marketplace and be authenticating in minutes.

01

Find EZRADIUS in Azure

Find EZRADIUS Cloud RADIUS in the Azure Marketplace, just like any other Azure resource.

02

Deploy into your subscription

Choose your Azure subscription, deploy, and your usage is billed straight to your Azure invoice.

03

Connect Entra ID and Intune

Connect your Entra ID and Intune for real-time authentication and device compliance checks, no sync jobs required.

04

Start authenticating

Point your network devices to the EZRADIUS global set of IPs and start authenticating your users and devices.

Watch a tutorial video Learn how it works

EZRADIUS on Microsoft Azure

Transparent pricing

No hardware investment. No long-term contracts. No hidden fees. Just pay for what you use and cancel anytime.

Basic

Most popular ✦

A fully-featured cloud RADIUS server at an affordable price

  • Certificate authentication (EAP-TLS)
  • Entra ID authentication (EAP-TTLS)
  • Legacy authentication (PAP, PEAP, MS-CHAPv2, MAC Bypass)
  • Real-time Entra ID group checks
  • Real-time Intune compliance checks
  • RADIUS + RadSec endpoints
  • Bring your own CA/PKI
  • SIEM audit log export
  • Local RADIUS proxy
  • Entra ID commercial, GCC, & GCC high
  • Multi-region with zonal/geo redundancy
  • 99.9% availability SLA
  • Support within 1 business day

Monthly subscription cost

$0 USD
(pay only for active identities)

Monthly cost per active identity

First 500$1 USD each
Next 500$0.40 USD each
Next 9,000$0.20 USD each
Anything above$0.10 USD each
Get started

Dedicated

All the convenience of hosted RADIUS with your own dedicated infrastructure

  • Everything in Basic, plus:
  • First 200 active identities included
  • Full dynamic IP address RADIUS support
  • Dedicated infrastructure for only your users and devices
  • Choose a single region closest to you
  • 24/7 support within 24 hours

Monthly subscription cost

$400 USD
(includes 200 active identities)

Monthly cost per active identity

First 200Included in subscription
Next 300$1 USD each
Next 500$0.40 USD each
Next 9,000$0.20 USD each
Anything above$0.10 USD each
Book a demo

Enterprise

Custom, multi-region deployments with the highest SLAs and support

  • Everything in Dedicated, plus:
  • First 10,000 active identities included
  • Multi-region with zonal/geo redundancy
  • Custom hosting options
  • Up to 99.95% SLA
  • 24/7 support within 1 hour

Monthly subscription cost

$3,500 USD
(includes 10,000 active identities)

Monthly cost per active identity

First 10,000Included in subscription
Anything above$0.10 USD each
Book a demo
See full pricing details & calculator

Ready to deploy cloud RADIUS straight from Azure?

Start your free 1-month trial today, deploy from the Azure Marketplace into your own subscription and resource group, and connect Entra ID and Intune in minutes.

Deploy from Azure Marketplace Book a demo

Frequently asked questions

Yes. EZRADIUS is listed on the Azure Marketplace as a SaaS offer. Deploy it into your own Azure subscription and resource group just like any other Azure resource, with usage billed straight to your Azure invoice.

Yes. When you deploy through the Azure Marketplace, EZRADIUS usage is billed directly to the Azure subscription and resource group you choose, alongside the rest of your Azure spend.

Yes. New customers get a free 1-month trial before any charges apply, so you can validate EZRADIUS in your own environment before committing.

Deployment from the Azure Marketplace takes seconds. Choose your subscription and resource group, deploy, and your cloud RADIUS instance is ready to configure.

Yes. EZRADIUS authenticates directly against Entra ID and can enforce Intune device compliance at the moment of authentication, without sync jobs or bolt-on connectors.

Yes. For eligible enterprise agreement customers, EZRADIUS purchased through the Azure Marketplace can be billed through Azure and count toward MACC.

No. EZRADIUS is fully hosted. Once deployed from the Azure Marketplace, there are no VMs, servers, or patches for your team to manage.