RADIUS Authentication Console

Enterprise WiFi Auth, Simplified

AuthCore is a full-stack FreeRADIUS management system built on PostgreSQL, Node.js, and React. SQL-backed authentication, EAP-TLS certificates, multi-site isolation, live session monitoring, and a themed admin dashboard -- deployed with Docker Compose.

AuthCore Dashboard

4 Themes

Visual Palettes with Dark/Light Mode

EAP-TLS + PEAP

Certificate & Password Auth

Multi-Site

Full User & Session Isolation

Real-Time

SSE Live Dashboard Updates

Built for Network Authentication

A complete RADIUS management platform with the features you actually need, delivered as a Docker deployment.

SQL-Backed RADIUS Auth

FreeRADIUS authenticates against PostgreSQL using radcheck, radreply, and radusergroup tables. Manage users through the web UI instead of flat files.

Multi-Site Isolation

Partition users, NAS devices, groups, and sessions by site. The same username can exist on different sites with fully isolated data, stats, and authentication.

Live Session Tracking

Real-time session monitoring via Server-Sent Events. View active users, connected devices, data usage, connection duration, and NAS shortnames at a glance.

EAP-TLS Certificates

Generate, download, and revoke per-user X.509 certificates for WPA2-Enterprise EAP-TLS authentication. Works alongside PEAP password auth on the same APs.

SSID Access Control

Control which user groups can authenticate to specific SSIDs on the same access point. Create group-to-NAS-group rules for per-SSID access policies (e.g. Staff on Corporate, Guests on Guest).

Sophos Firewall Integration

Forward RADIUS accounting to Sophos XGS firewalls so they can map WiFi usernames to IP addresses. Supports per-NAS and NAS-group target mapping, plus a relay proxy for NAT traversal.

Backup & Restore

Full system backup with configurable automated scheduling and retention. Per-site exports, stored backup management, factory reset, and automatic FreeRADIUS restart after restore.

Admin MFA

TOTP-based two-factor authentication for admin accounts with QR code setup and 8 single-use backup codes. Admin passwords are hashed with bcrypt; sessions use JWT.

Bulk User Import & Export

Import users via CSV with optional auto-password generation (shown post-import with a Copy All button). Export all users with profile data and group memberships as CSV.

Audit Log

Every administrative action is logged with JSONB detail -- who changed what, when, from which IP. Filter and search the full audit trail from the dashboard.

Themed Dashboard

4 visual palettes each with unique CSS effects, accent glows, and dark/light mode toggle.

Simple, Transparent Pricing

AuthCore is a commercial management GUI built on top of open-source FreeRADIUS. Choose the plan that fits your network.

Starter

Small Network

Perfect for a single location with basic RADIUS authentication needs.
$29 / month
  • 1 Site
  • Up to 50 RADIUS users
  • Live session monitoring
  • EAP-PEAP password auth
  • Manual backups
  • 4 dashboard themes
  • EAP-TLS certificates
  • Sophos integration
Get Started
Enterprise

Full Platform

Unlimited sites, users, and full feature access including Sophos firewall integration.
$149 / month
  • Unlimited sites
  • Unlimited RADIUS users
  • Everything in Professional
  • Sophos XGS firewall integration
  • Relay proxy support (NAT)
  • Per-site backup & restore
  • Bulk user import / export
  • Priority support
Contact Sales

All plans include Docker deployment, PostgreSQL backend, and the full FreeRADIUS stack. Annual billing available — save 20%.

Product Tour

A walkthrough of the key dashboard pages and what they look like in action.

AuthCore Dashboard Overview - live stats, session trends, and authentication metrics
Overview

Dashboard at a Glance

Live stat cards for active sessions, unique devices, data transfer, and auth success rates. Includes 14-day session trend charts, top users, auth breakdowns, and peak hours -- all updated in real time via SSE.

AuthCore User Management - create, edit, and manage RADIUS users with profiles and group assignments
Users

User Management

Create, edit, disable, and delete RADIUS users. Each user has a profile (name, email, department), group assignments, session/idle timeout, max concurrent sessions, and optional EAP-TLS certificates. Bulk import via CSV with auto-password generation.

AuthCore Live Sessions - monitor active RADIUS sessions with device aliases and session details
Sessions

Live Session Monitoring

See all active RADIUS sessions with username, device MAC (with friendly aliases), IP address, NAS shortname, duration, and data usage. Click any row for a detailed modal with session history, device breakdown, and data stats.

AuthCore NAS Management - configure access points, NAS groups, and SSID-based access control
NAS / Groups

Access Points & Access Control

Register NAS devices with IP addresses (including CIDR subnets) and shared secrets. Organize them into NAS groups that match your SSIDs. Then create group-to-NAS-group access rules to control which user groups can authenticate to which networks.

AuthCore Documentation - built-in guide covering configuration, features, and troubleshooting
Documentation

Built-in Docs & Guides

Comprehensive in-app documentation covering setup, users, NAS configuration, groups, SSID access control, EAP-TLS certificates, Sophos integration, backups, and troubleshooting. Searchable by topic with quick-nav pills.

AuthCore Administration - manage admin accounts, backups, and system settings
Administration

Admin & Backup Management

Multi-admin support with super admin roles, MFA (TOTP), and per-site access restrictions. Full system and per-site backup/restore, configurable auto-backup schedule, FreeRADIUS config management, and factory reset. 4 visual themes with dark/light mode.

How AuthCore Works

The authentication flow from WiFi client to RADIUS to your dashboard.

1

User Connects to WiFi

A device connects to a WPA2-Enterprise SSID. The access point forwards the credentials to FreeRADIUS via the RADIUS protocol.

2

FreeRADIUS Authenticates

FreeRADIUS checks the username and password (or certificate) against PostgreSQL. SSID access rules and max session limits are enforced.

3

Dashboard Shows Everything

Sessions, auth events, and data usage are logged and visible in real time. Admins manage users, groups, NAS devices, and certificates from the web UI.

Containerized Architecture

Five Docker containers, one docker compose up. Each component has a clear responsibility.

Caddy Reverse Proxy :443 TLS termination
React 18 + Nginx :5173 — admin dashboard
Express / Node.js 20 API :3001 — REST + SSE
PostgreSQL :5432 — users, sessions, config
FreeRADIUS :1812 auth / :1813 accounting

Ready to Manage Your Network Auth?

Log in to the AuthCore dashboard to manage users, monitor sessions, and configure your RADIUS infrastructure.