One self-hosted platform with independent modules: PAM and clientless remote access (SSH, RDP, VNC, WebBox) for servers and network devices, multi-vendor automation and monitoring, and a dedicated MikroTik toolset. Eliminate exposed WinBox ports, automate configuration diffing, enforce command policies, and give subscribers self-service diagnostics.
Color-coded responsive health tiles displaying ping latency, CPU/RAM utilization, and offline incident alerts across all sites.
Explore NOC Engine →
Encrypted xterm.js sessions over WebSockets with automated credential injection, Asciinema keystroke recording, and kernel ptrace command blocking.
Explore PAM Engine →
WebBox streams WinBox 4 to the browser for MikroTik devices, with no local install and no WinBox port exposed to operators. Clientless RDP and VNC sessions reach any Windows or Linux host from the same Connection Manager, and every session is recorded.
Explore Remote Access →
The Problems drawer separates the device that actually failed from devices that are only unreachable because of it. Radial and tree layouts, path finding, live link traffic and a full-screen NOC mode.
Explore NOC & Maps →
Color-coded ngx-diff engine highlighting configuration modifications, unauthorized rule injections, and 1-click disaster recovery rollback.
Explore Automation →
Automated WireGuard peer generation with mobile QR codes alongside the Rust-compiled btest-rs bandwidth testing engine.
Explore Network Services →
Cut routine support calls: subscribers handle port forwarding, firewall presets, diagnostics, speed tests and tickets themselves.
Explore Subscriber Portal →Runs entirely on your hardware or private VPC. No external telemetry or credential exfiltration.
Dual OTP MFA, envelope-encrypted password vault, and kernel-level command blocking for strict compliance.
Community edition is free forever with unlimited routers, unlimited users, and active community forums.
Browser RDP, VNC and WinBox, a new MikroTik network map with root cause analysis, and a rewritten MikroTik firmware upgrade engine.
Remote WinBox without a local install: the gateway runs WinBox 4 in an isolated sandbox and streams it to the browser. No WinBox port exposed to operators; sessions recorded as video.
Clientless RDP and VNC desktop sessions next to SSH, Telnet and WebFig in the Connection Manager. Works with any Windows or Linux host, with recording, live sharing and session DLP policies.
Root cause analysis separates the device that failed from devices only unreachable because of it. Radial and tree layouts, path finding, live link traffic and NOC full-screen mode.
SHA256 verification against MikroTik's official hashes, free-storage check, RouterBOOT after the OS and restart-safe progress per device. Pro adds a multi-step RouterOS v6 to v7 path (v6 → 7.12.1 → 7.13+).
PAM, automation and monitoring in one platform. Use PAM without any MikroTik devices, or the MikroTik toolset without PAM. The workspace mode switcher (MikroTik / PAM / All) tailors navigation, device tabs and actions to the work you do.
Privileged access management for network devices and servers: SSH, Telnet, RDP, VNC, WebFig and WebBox in the browser, credential vault, command policies, recording and live session sharing. Works with any servers and network devices.
Centralized network management across vendors: Cisco, Juniper, Huawei, Aruba, EdgeOS, Linux and custom SSH/Telnet devices. Backups, configuration diffing, snippets and a task planner.
MikroTik central management: WebBox (WinBox in the browser), firmware upgrades, config Sync & Clone, network map, RADIUS OTP for WinBox/SSH/WebFig logins, and WireGuard provisioning.
Live offline state and uptime, reboot detection with cause from RouterOS logs, alerts suppressed during updates, NOC wallboard, plus alert channels in Pro including Telegram, Slack, Teams and email.
From Zero-Trust access to subscriber self-service, MikroWizard consolidates fragmented network management tools into one hardened platform.
In-browser xterm.js terminal over WebSockets and reverse-proxied WebFig without public IPs. Kernel-level ptrace command policy enforcement and Asciinema keystroke recording.
Automated nightly multi-vendor backups with side-by-side configuration diffing. Drag-and-drop sequence flowchart builder with regex output branching and 1-click disaster rollback.
Live color-coded status tiles designed for 24/7 video walls. Real-time CPU, RAM, interface throughput telemetry, and dynamic Layer-2 topology auto-discovery via LLDP/MNDP/CDP.
Automated WireGuard VPN server and peer provisioning with mobile QR codes and RouterOS v7 scripts. Rust-compiled btest-rs speed testing with Curve25519 EC-SRP5 authentication.
Unified compliance audit trail: RADIUS Authentication, RADIUS Accounting, CLI Executions, Device Events, and System Logs. Custom regex syslog classifiers and multi-channel Apprise notifications.
White-label subscriber portal for WISPs and ISPs. Customers run 1-click ping/DNS/WAN diagnostics, configure safe port forwardings, toggle firewall presets, and file pre-populated support tickets.
Open-source core is free forever. Upgrade to Pro for enterprise PAM, visual diffing, and automated sequences starting at €0.90/device/month with volume discounts.
Deploy the self-hosted open-source version today or schedule a guided technical architecture walk-through with our engineering team.
MikroWizard