Foxpass

Foxpass, Inc. operates as a provider of privileged access management solutions, offering a cloud-based platform for identity and access control. The company was founded in 2015 by Aren Sandersen and is headquartered in San Francisco, California. Sandersen, a Stanford alumnus with over 17 years of experience in software engineering and IT at companies like Pinterest, Microsoft, and Bebo, established Foxpass to address the outdated and complex security toolsets he encountered throughout his career. The initial idea stemmed from a specific problem he identified while serving as the Head of Technical Operations and IT at Pinterest.

The company's core business revolves around providing cloud-hosted LDAP (Lightweight Directory Access Protocol) and RADIUS (Remote Authentication Dial-In User Service) systems. This service is designed for IT, DevOps, and security teams at organizations of all sizes, aiming to enhance server and network security by enforcing the principle of least privilege—ensuring employees can only access the resources essential for their roles. Foxpass generates revenue through a subscription-based model, with pricing typically based on the number of users per month. The business was acquired by the remote access software company Splashtop on March 23, 2023, and now operates as a subsidiary, with the Foxpass brand and products remaining intact. Following the acquisition, Splashtop has invested in expanding Foxpass's product roadmap and market reach, particularly in international markets and the education sector.

The platform's key service is providing secure, passwordless access to Wi-Fi, VPNs, and network infrastructure. It achieves this through certificate-based authentication (EAP-TLS) and identity-driven policies (EAP-TTLS), which helps organizations enforce Zero Trust security principles. Foxpass integrates directly with major identity providers such as Google Workspace, Microsoft 365, and Okta, allowing clients to sync their existing employee directories for seamless single sign-on (SSO) capabilities. Specific features include SSH key management, role-based access control (RBAC), management of Linux, Windows, and Mac OS logins, and detailed logging of RADIUS and LDAP requests for compliance and security audits. The system also supports bring-your-own-device (BYOD) environments by providing installers that extend secure, certificate-based connections to unmanaged personal devices.

Keywords: privileged access management, cloud LDAP, cloud RADIUS, network security, identity and access management, Zero Trust security, certificate-based authentication, SSH key management, single sign-on, DevOps security, IT infrastructure, access control, EAP-TLS, Wi-Fi security, VPN security, user authentication, role-based access control, Splashtop, Aren Sandersen, network access control