Englishالعربية Soon
Under attack?
NAC · Network access control

Every device that plugs in is a decision. Most networks make it by default.

Network access control identifies a device the moment it connects, checks who owns it and whether it meets policy, and grants, restricts or quarantines it before it can reach anything worth reaching.

Visibility first

You cannot enforce policy on devices you cannot see.

Passive sensing inventories every address-bearing device on the network, wired and wireless, managed and unmanaged, along with what it is, who is using it and how it behaves. No network redesign required.

Guests, contractors and everything else

The devices you do not own are the ones you most need to control.

Contractor laptops, personal phones, printers, cameras and building systems are onboarded through a defined process with role-based access, so convenience does not quietly become an open port.

Capabilities

What the platform gives you

Requirements we hold any access control platform to before recommending it for a production network.

Device discovery and profiling

Every connected device identified by type, manufacturer, model and operating system, with the profile kept current as the device changes.

Contextual access decisions

Access granted on the combination of who, what, where, when and how, rather than on a single credential.

Posture assessment

Patch level, security agent status, disk encryption and configuration checked before access is granted, and rechecked while the session runs.

Quarantine and remediation

Non compliant devices moved to a restricted segment with a self service path back to compliance, so helpdesk load does not spike.

Multi layer enforcement

Enforcement available through standards based port authentication, address level controls, inline gateways and switch integration, so it fits the network you already have.

Guest and contractor onboarding

A captive portal with sponsor approval, time limited access and role based permissions for anyone who is not staff.

Wireless visibility

Authorised, rogue, misconfigured and hidden access points detected, along with which devices connect to which network.

Address and port management

Address usage, conflicts, cloning and switch port occupancy tracked, which is where most network mysteries actually live.

Integration with existing controls

Device and user context shared with firewalls, endpoint tooling and the SIEM, and quarantine actions triggered by their alerts.

How it works

Connect, identify, decide, enforce, and keep checking

The decision has to happen before the device is on the network. Everything after that is damage limitation.

Wired switchesWireless networksRemote accessContractor devicesPersonal devicesPrinters and camerasBuilding systemsOperational technology
01
Sense
A passive sensor observes the segment and inventories every device without changing the network.
02
Identify
The device is profiled and matched to its owner, role and expected posture.
03
Decide
Policy is evaluated against the full context, not just a credential or an address.
04
Enforce
Access is granted, restricted or quarantined, using whichever enforcement method the segment supports.
05
Recheck
Posture is re-evaluated during the session, and access is withdrawn if the device drifts out of policy.
Deployment is designed to be non disruptive. We start in monitor mode so you can see what would have been blocked before anything actually is.
Delivery model

You own it, we build it

Deployed on your premises under your licences. We map the segments, define the policy, run monitor mode, then switch enforcement on segment by segment.

Learn more →

Delivery model

We operate it for you

Policy maintenance, onboarding exceptions and quarantine handling run by our team, with your network team kept in the loop.

Learn more →

Related

Controls that work alongside it

Zero trust architecture

Access control at the network layer is where a zero trust programme becomes real.

NDR

Traffic analysis that shows what a device did once it was allowed on.

Vulnerability management

Posture data on every device that connects, feeding the same exposure picture.

Start in monitor mode.

A pilot on one segment inventories every device and shows you what policy would have blocked, before anything is enforced.