EntryOne-Max is the attendance and visitor management platform for Paxton Net2 sites. Card taps at the door become timesheets. Visitor sign-in prints a badge. Kiosks work offline. Deployed in a day.
Replace three separate tools with one you actually own. Card readers, kiosks, badge printers, timesheets, and fire-marshal rolls — all wired together.
Every Paxton card tap becomes a sign-in event. Timesheets build themselves. Late arrivals, extra breaks and overtime surface in the report you already run every Friday.
Visitors sign in on the kiosk, agree to your site rules, and a wearable badge prints. Their host gets a notification. When they leave, they tap out — no reception intervention needed.
Configurable shift patterns, paid-break limits, auto-signout at midnight, single-reader toggle mode for small sites. Reports snap to the working week or a custom range.
Hit the evacuation button on any device. Instantly get the list of who's on-site, per department, with their check-in times. Marshals tick people off as they reach the muster point.
Put a kiosk on each floor or department. QR, NFC and PIN sign-in — enable only what you want. Locked-down Electron shell that survives the reboot and reconnects on its own.
Personal data stays on-site: your database, your VPS, your rules. Row-level security, HTTPS everywhere, self-hosted or hybrid. Audit log on every admin action.
One VPS or on-prem server, one Paxton agent on the LAN, and however many kiosks you need. Our installer script does the boring bits.
Ubuntu one-liner or Windows installer. It stands up PostgreSQL, HTTPS with Let's Encrypt, systemd/service supervision, and creates the first admin — no separate database engineer needed.
Windows service on the machine that already runs Paxton Net2. It authenticates, joins your organisation over WSS, and starts forwarding card taps in real time. TLS-pinned, DPAPI-encrypted secrets.
Any tablet or mini-PC. Boots to the kiosk shell, shows a pairing PIN, admin approves it from the portal. QR / NFC / PIN sign-in — enable only what suits the site.
The dashboard is the single question managers actually ask: who's on-site right this second? Everything else — reports, exports, timesheets — hangs off the same real-time picture, updated every 30 seconds from the readers.
Tiles for signed-in count, currently on break, visitors present, and reader health. Click any tile for the roster.
The Paxton agent forwards every "access granted" event from Net2 into EntryOne-Max. Users flow the other way too — create someone in EntryOne, their card token propagates to Paxton within seconds. Delete them, they're suspended in Paxton immediately.
Single-reader toggle mode means small sites can use one reader as tap-to-enter and tap-to-leave.
Front door · Sarah K. · signed in 08:42
Visitors sign themselves in — name, company, host, purpose. Sign the site rules on the touchscreen. A wearable badge prints in seconds. Their host gets a Slack, email or WhatsApp ping.
When they leave they tap the same kiosk. Their host clock stops. Fire roll updates in real time.
Departmental shifts, by-device shifts, by-day rollups. Break-limit rules pull over-limit minutes into a separate column so pay is right the first time. CSV export straight into Sage, Xero or your payroll bureau's format.
Every report respects the same date range, the same filters, the same brand — one theme end to end.
EntryOne-Max talks to Paxton Net2 v7+ through the official OEM Client REST + SignalR APIs. The agent runs as a Windows service on the same LAN as Net2 — TLS-pinned, DPAPI-encrypted secrets, replay-protected envelopes.
Every access-granted event flows in within seconds via SignalR keep-alive.
Departments, access levels, and card tokens stay in sync in both directions.
Tap in at a new door mid-shift? Old session closes automatically.
Kiosks queue taps locally when the LAN drops and replay on reconnect.
Licence tied to your site, not your headcount. Includes the server, agent, and unlimited kiosks. Prices shown per month, billed annually — includes 12 months of updates and support.
For single-site organisations up to ~50 people.
Multi-department sites, custom shift patterns, notifications.
Multi-site, school timetables, holiday management, SLA.
* "Unlimited kiosks and devices" refers to software licences only — the underlying hardware (tablets, mini-PCs, PC/SC card readers, badge printers, USB accessories) is not included and is billed separately. We can supply recommended hardware or you can source your own; either way it sits outside the per-site licence fee.
Nobody else bundles attendance, visitors and Paxton bridge in one product. Buyers today stitch together a visitor app plus a time-and-attendance tool plus spreadsheets. Here's what that costs.
| Vendor | Category | Attend. | Visitors | Fire roll | Paxton | Y1 cost |
|---|---|---|---|---|---|---|
| Sign In App (Business) | Visitor management | — | ✓ | partial | — | £795 |
| SwipedOn (Business) | Visitor management | — | ✓ | partial | — | £830 |
| Envoy Visitors (Standard) | Visitor management | — | ✓ | ✓ | — | £2,600 |
| Proxyclick / Eptura | Enterprise visitor | — | ✓ | ✓ | partial | £3,200+ |
| Deputy | Time & attendance | ✓ | — | — | — | £6,000 |
| BrightHR (Connect) | HR + attendance | ✓ | — | — | — | £5,820 |
| Mitrefinch TMS | Enterprise T&A | ✓ | — | — | — | £11,000+ |
| Kisi (access add-on) | Access control SaaS | — | — | — | partial | £2,112 |
| EntryOne-Max Professional | All three · Paxton native | ✓ | ✓ | ✓ | ✓ | £3,494 |
Y1 cost = licence + updates for a representative 100-person site with 8 doors. Prices are publicly-stated list prices verified in Q3 2026 on each vendor's website. Hardware (tablets, mini-PCs, PC/SC card readers, badge printers) is excluded on every row for a like-for-like comparison. All trademarks belong to their respective owners. This comparison is independent — we are not affiliated with any vendor listed.
No. EntryOne-Max can run entirely on your LAN — server, kiosks, Paxton agent all local. If you use hosted mode, kiosks queue offline and reconnect.
The agent reconnects with keep-alive and backfills missed events. Kiosks keep accepting sign-ins via QR/NFC/PIN independently — attendance keeps running.
Only if you deploy on a VPS you own. Even in hybrid mode, personal data lives in your PostgreSQL — we never see it. On-prem installs stay entirely inside your LAN.
Yes. Any USB thermal receipt printer works for visitor badges. Any Paxton-registered card works for sign-in. No proprietary hardware.
Typical rollout is under a day. The installer script gets the server + database up in ~15 minutes. Pairing kiosks and the Paxton agent takes another hour or two.
No — we sit alongside it. Net2 keeps controlling doors. EntryOne-Max adds the attendance, visitor, and reporting layer on top.
30-minute walkthrough with a real engineer. We can screen-share against a demo Net2 or connect to your staging.