Arbiter
Ireland
What it is
Arbiter is a cloud-hosted network access control platform for SMEs and the MSPs or MSSPs that support them. It identifies and catalogs connecting devices by type and vendor without endpoint agents, then helps determine what network access each device receives. Access options include certificate-based EAP-TLS and 802.1X, as well as MAC authentication bypass for headless devices. Its on-premises Edge appliance connects to the cloud service over RadSec and can keep authenticating locally during a WAN outage using cached decisions. A live Microsoft Intune integration can read compliance state and quarantine non-compliant devices to a remediation VLAN. SIEM event forwarding supports Microsoft Sentinel, Elastic, TLS syslog, Splunk HEC, and generic HTTPS webhooks. Arbiter supports wired and wireless access control in a hybrid deployment. Asset Discovery profiles and inventories devices but does not enforce access. The listed plans include a 60-day trial and €29 per month for Asset Discovery; full access-control plans start at €149 per month and vary by endpoint count.
For and against
For
- Identifies device type and vendor without endpoint agents.
- Supports certificate-based EAP-TLS and 802.1X access.
- Edge appliance can authenticate locally during WAN outages.
- Integrates with Microsoft Intune and several SIEM destinations.
Against
- Asset Discovery does not enforce network access.
- Full access-control tiers differ by endpoint count.
- The 60-day trial applies before Asset Discovery billing.
The verdict
Arbiter combines device identification with wired and wireless access control, with local authentication continuity through its Edge appliance. Check the plan distinction carefully: Asset Discovery is visibility-only, while full access control starts at €149 per month.
Who it suits
Arbiter suits SMEs and the MSPs or MSSPs that support them. It is relevant to teams seeking wired or wireless access control alongside device discovery and inventory.
Plans and prices
Asset Discovery
device profiling and inventory · no enforcement
Read 7 Oct 2026 · arbiter.ie
Essential
100 endpoints · full access-control product
Read 7 Oct 2026 · arbiter.ie
Professional
500 endpoints · full access-control product
Read 7 Oct 2026 · arbiter.ie
Enterprise
1,500 endpoints · full access-control product
Read 7 Oct 2026 · arbiter.ie
On the record
- Audience
- Arbiter is designed for SMEs and the MSPs or MSSPs that support them.arbiter.ie · read 7 Oct 2026
- Authentication
- It supports certificate-based EAP-TLS and 802.1X access, with MAC authentication bypass for headless devices.arbiter.ie · read 7 Oct 2026
- Compliance posture
- Arbiter says it is aligned with NIS2 and DORA control objectives, is GDPR-native, and has SOC 2 Type II in progress.arbiter.ie · read 7 Oct 2026
- Data minimization
- Arbiter says it records access-layer metadata and does not capture network payloads.arbiter.ie · read 7 Oct 2026
- Device discovery
- It automatically identifies and catalogs connecting devices, classifying them by type and vendor without endpoint agents.arbiter.ie · read 7 Oct 2026
- Edge resilience
- The on-premises Edge appliance tunnels to Arbiter over RadSec and can continue authenticating locally during a WAN outage using cached decisions.arbiter.ie · read 7 Oct 2026
- Limits
- Asset Discovery profiles and inventories devices but does not enforce access; the access-control tiers include the full feature set and differ by endpoint count.arbiter.ie · read 7 Oct 2026
- MDM integration
- The live Microsoft Intune integration reads device compliance state and can quarantine non-compliant devices to a remediation VLAN.arbiter.ie · read 7 Oct 2026
- Product
- Arbiter is cloud-hosted network access control that helps decide which devices can access a network and what they can do after connecting.arbiter.ie · read 7 Oct 2026
- Security and privacy
- The Trust Centre says customer data is encrypted at rest with AES-256 on EU-hosted infrastructure and RADIUS traffic can use RadSec with mutual TLS.arbiter.ie · read 7 Oct 2026
- SIEM integrations
- SIEM event forwarding supports Microsoft Sentinel, Elastic, TLS syslog, Splunk HEC, and generic HTTPS webhooks.arbiter.ie · read 7 Oct 2026
- Support
- The site directs customers to contact [email protected] for help.arbiter.ie · read 7 Oct 2026
