# portnox

Source: https://startwithidentity.com/vendors/mfa/portnox/
Last updated: 2026-06-19
License: content by Start with Identity. Cite the source URL.

---

## Overview

Portnox delivers cloud-native network access control (NAC) combined with passwordless authentication and device posture checks, sitting at the intersection of network and identity security. Founded in 2007 with operations in Austin and Israel, it is unusual in this directory because its center of gravity is the network: who and what gets onto the network, verified by certificate and posture, rather than application login alone.

## What it is good at

Cloud-delivered NAC is the strength, along with certificate-based access and device posture enforcement. For distributed organizations that have struggled with appliance-based NAC, the SaaS model removes hardware and scales across sites. Pairing [phishing-resistant](https://startwithidentity.com/glossary/phishing-resistant-mfa/), certificate-based access with posture checks means network and identity controls work together rather than in separate silos.

## Where it falls short

It is network-centric, so it complements rather than replaces application identity platforms. It is not a pure application [SSO](https://startwithidentity.com/vendors/mfa/) product, and it has no real CIAM features. Teams looking for developer auth APIs or consumer login flows are in the wrong category here.

## Pricing

Subscription with published tiers, which is more transparent than most of this segment. Confirm scope with the [TCO calculator](https://startwithidentity.com/tools/tco-calculator/).

## Best for, and who should look elsewhere

Choose it for teams unifying network access control with passwordless and device posture, especially distributed organizations wanting cloud-delivered NAC. Teams needing application SSO should look at a platform such as [Duo](https://startwithidentity.com/vendors/mfa/duo/); those needing certificate orchestration across authenticators should compare [Axiad](https://startwithidentity.com/vendors/mfa/axiad/). See the full [MFA directory](https://startwithidentity.com/vendors/mfa/).

## Bottom line

A strong choice when network access control and identity need to converge in the cloud, not a substitute for an application IdP.