Product

Switchyard

Switchyard puts every user and device on the right network segment, automatically. People sign in with the Active Directory password they already have — no certificate rollout, no agents on devices — and your switches and access points place them on the VLAN their AD group says they belong on. You see a live log of every join and every rejection, with the reason. We stand it up inside your network and run it.

AI-generated image

How it works

  1. Deploy

    We build the appliance inside your network and join it to your Active Directory.

  2. Point your network at it

    Your switches and access points send 802.1X authentication to Switchyard over standard RADIUS.

  3. Right VLAN, every time

    Users sign in with their AD password, land on the VLAN their group maps to, and every decision is logged.

Network access control is usually a project — certificates, agents, appliances, consultants. Switchyard is the part most sites actually need: who gets onto your network, which VLAN they land on, and a log of what happened. People sign in with the Active Directory password they already have, and your switches and access points do the rest.

How it's built. Switchyard is a hardened appliance we deploy inside your network and join to your Active Directory. Your switches and access points send 802.1X authentication to it over standard RADIUS — attributes every major vendor supports — and it answers with the VLAN each user's AD group maps to. It replaces Windows NPS, with no agent to install and no client certificates to roll out.

Run by us, visible to you. Switchyard is running in production at client sites today. You get a web console with your policies, your network devices and a live log of every accept and reject with the reason, kept for 90 days — and we deploy it, watch it and support it.

Pair it with AD Management. Together with AD Management, the whole loop is dynamic: a casual, a contractor or a new starter is created in the right AD groups from a template, and Switchyard puts them on the right network from their first sign-in — and off it the day their account is disabled. Group membership becomes your security map: change someone's role and their place on the network follows automatically, along with access to whatever those groups protect.

Key Features

AD password sign-in — no client certificates, no PKI project
Dynamic VLAN assignment from AD group membership — ordered rules, first match wins
Works with any 802.1X switch or AP that speaks standard RADIUS
Live access log — every accept, reject and why, kept 90 days
Web console for policies, devices and logs — no config files
Replaces Windows NPS — deployed and managed by us

Connecting remote workers to your network? That's our Secure Remote Access product — Switchyard controls who gets onto your LAN and Wi-Fi, and where they land.

Interested in Switchyard?

Pricing

From $1,999 setup + $149/month

Standup — appliance build, AD join, VLAN policy design, tested cutover from $1,999
Managed service per site (includes up to 10 network devices) $149/month
Each additional 10 network devices $49/month

Prices ex-GST.

Contact us for a demo or to discuss how Switchyard fits your needs.

1300 798 718 Send a Message

Talk to us about Switchyard

There's no self-serve sign-up — we deploy it inside your network, design the VLAN policy with you, and prove the cutover before we're done.

1300 798 718