Explore the full capability set across 9 architectural pillars for MikroTik, multi-vendor network devices, and Windows and Linux servers. Use the modules you need: PAM, central management and automation, monitoring, or the MikroTik toolset. Self-hosted on Docker for complete data sovereignty.
Privileged access management for network devices and servers: in-browser xterm.js terminal gateway, reverse-proxied WebFig without open ports, kernel ptrace system-call command blocking, live collaboration rooms, Asciinema keystroke forensics, and remote Winbox 2FA via a built-in RADIUS server. New in v2.1 (Pro): clientless RDP and VNC for any Windows or Linux host, WebBox (WinBox in the browser) for MikroTik, RemoteApp publishing, and session DLP policies.
Automated multi-generation backups (.backup & .rsc), side-by-side visual diffing (ngx-diff), 1-click disaster rollback, visual cron task planner, reusable CLI snippets, logic-aware Sequences flowchart builder, and golden master router cloner. MikroTik config Sync & Clone (Pro) applies only the missing or different lines from a master router, on demand, on a schedule or live. Safe MikroTik firmware upgrades with SHA256 verification (Free + Pro), plus a multi-step RouterOS v6 to v7 path in Pro.
Explore Automation Deep Dive →24/7 color-coded operations wallboard, real-time hardware telemetry gauges (CPU, RAM, Rx/Tx traffic), multi-vendor fleet inventory with automated subnet scanner, hierarchical groups, and dynamic L2 topology maps via LLDP/MNDP/CDP. Network Map v2 (Pro) adds root cause analysis, tree layouts, path finding and a NOC full-screen mode.
Explore NOC Deep Dive →
Centralized WireGuard VPN server manager for routers behind NAT, mobile QR code peer provisioning, 1-click RouterOS v7 scripts, and MikroSpeed: a compiled Rust btest-rs bandwidth engine with throughput limited only by your test server, router and link.
Unified centralised, searchable audit trail across 5 tiers (RADIUS Auth, Accounting, CLI Commands, Device Logs, System Events), custom regex syslog pattern classifiers, and Apprise multi-channel alert dispatcher (11 built-in channels plus any Apprise URL).
Explore Auditing Deep Dive →White-label customer self-service portal, automated 1-click network self-triage diagnostics, safe customer NAT port forwarding with conflict checks, firewall security presets (Standard/Gaming/Strict), and integrated ticketing.
Explore Subscriber Portal →Fine-grained role-based access control across 19 RouterOS user policies linked directly to native MikroTik RouterOS user groups. Ensures strict least-privilege compliance for internal teams and contractors.
Inspect RBAC Architecture →Network AI assistant with 13 sandboxed RouterOS diagnostic tools. Complete compliance audit trail capturing all prompt interactions, reasoning chains, and CLI tool executions.
Inspect AI Capabilities →Deep architectural compatibility matrix spanning RouterOS v6 & v7, CCR2004, CCR2116, RB5009, hEX, and Cloud Hosted Router (CHR) across ARM64, MMIPS, TILE, and x86 architectures.
View MikroTik Spotlight →Click any interface screen below to open the full high-resolution interactive inspection lightbox.
One installer script deploys the core and all containers in about 5 minutes on a good connection. Full feature set, 100% data sovereignty, and no external cloud dependencies.
MikroWizard