Portnox Cloud review

Portnox Cloud is a cloud-native access-control platform for deciding which users and devices can reach networks, applications, and infrastructure. Portnox says it uses identity, device posture, and risk signals to apply zero-trust policies, with options for passwordless access and automated responses when risk changes.

Its scope spans several jobs that are often bought separately. Network access control discovers and monitors devices, applies access policies, and can quarantine threats. ZTNA provides agentless access to authorized internal and cloud applications, with ongoing identity and device checks. For network equipment, TACACS+ centralizes authentication, authorization, accounting, and session logging. The platform also supports certificate-backed authentication and says it can enforce controls for AI agents and use signals from security tools.

The pricing page presents these as separate offerings—RADIUS, NAC, ZTNA, TACACS+—plus a Universal Zero Trust package that combines them. That makes Portnox a broad access-control suite, not just a NAC product.

Portnox’s clearest strength is breadth: its listed products cover network authentication, device posture, application access, and administration of network equipment. That can reduce the number of separate access-control products an organization has to evaluate, though the pricing page does not establish how much consolidation saves.

• Network coverage: The RADIUS offering lists 802.1X with dynamic VLAN or ACL assignment, RadSec, multi-regional redundancy, and IoT profiling for more than 260,000 device types. NAC adds continuous risk assessment, remediation, agent and agentless posture checks, and IoT device trust and spoof protection.
• Application access: The ZTNA package lists clientless access, continuous device-posture and risk assessment, and least-privilege policies with audit trails. Those controls are relevant when access needs to be checked beyond the initial login.
• Network administration: TACACS+ includes role-based authorization, command restrictions, MFA enforcement, and support for Cisco, Juniper, Dell, and F5 equipment, according to the pricing page.
• Central policy and integrations: The Universal Zero Trust package lists RADIUS, NAC, ZTNA, and TACACS+ together, plus certificate-based passwordless authentication and an API for SIEM, ITSM, and IAM tools.

The product description also lists automated responses such as limiting or revoking access and isolating devices as risk changes.

The main drawback is price opacity. The pricing information checked on November 7, 2026, is marked low confidence and publishes no monthly or annual price for any package. It lists 12-, 24-, and 36-month subscription terms, with additional discounts for terms longer than 12 months, but gives no figures to compare against a current stack. The listed 30-day free trial and lack of a free plan do not solve that budgeting problem.

The package structure also leaves room for scope surprises. RADIUS, NAC, ZTNA, and TACACS+ are separate offerings; only the Universal Zero Trust package explicitly bundles all four. The available pricing details do not publish user or device-seat caps, or clarify which limits apply to each package, so buyers should get those terms in writing.

Some add-on costs are visible, but not all: certificate authority services are listed at $1 per device, with the billing period unstated. Extended device retention costs $0.99 per device per year for each additional 30 days. Extended guest and additional SMS packs are listed without prices. Portnox’s AI identity controls are described in the product overview, but the listed package details do not say which plan includes them.

Portnox Cloud does not publish subscription prices, so there is no reliable way to calculate a tier jump or compare bundles from the published pricing information. It lists five options: Network Authentication (RADIUS), Network Access Control (NAC), Zero Trust Network Access (ZTNA), Network Device Administration (TACACS+), and Universal Zero Trust. The full-platform option includes RADIUS, NAC, ZTNA, and TACACS+, but its price—and the prices of the individual plans—are not published.

The pricing page lists 12-, 24-, and 36-month terms, with additional discounts for terms longer than 12 months. Monthly and annual rates are not listed, so ask for a written quote covering your term, device count, and renewal price. A 30-day free trial is listed; there is no free plan.

Add-ons can change the total: certificate authority services are $1 per device, though the billing period is unstated. Extended device retention costs $0.99 per device per year for each additional 30 days. Extended guest and SMS pack prices are not published.

Plan a migration around the policies and integrations you need to preserve, not just the product names. Portnox covers network authentication, NAC, application access, and TACACS+ administration, so map current access rules, device checks, administrator roles, and integrations before replacing another system. The published material does not document migration tools, configuration import, data export, or an exit process. Ask Portnox for those details and test a limited group before moving enforcement across the organization.

There is some contract risk to check upfront: the pricing page lists 12-, 24-, and 36-month terms, but does not publish cancellation or renewal terms. Get those in writing alongside the quote. The published published material includes no Reddit posts or comments, so we cannot substantiate why users leave Portnox or report common migration complaints. Treat claims about export options, lock-in, or user dissatisfaction as unverified until you check the contract and speak with current customers.