Factual Architecture Breakdown

How MikroWizard Compares to
Traditional Network Management

Explore how MikroWizard bridges the critical gap between raw router utilities (Winbox/SSH), generic monitoring tools (LibreNMS, Zabbix), and costly legacy PAM suites.

Capability & Operational LayerMikroWizard (Pro / Free)Winbox / SSH DirectGeneric NMS (LibreNMS/Zabbix)Legacy PAM (CyberArk)
Centralized Web Console✓ Unified Web UI (Angular 18)× Desktop App / Individual CLI✓ Web Dashboard✓ Web Portal
Zero-Port Exposure (WireGuard Mesh) ✓ Built-In WireGuard Server × Requires Port 8291 / SSH Publicly Open× Requires Open SNMP / Agent PortsRequires Complex Jump Boxes
In-Browser Zero-Client Terminal ✓ xterm.js WebSockets Gateway × Local Putty / Terminal Emulator× NoneRDP Jump Host Session
Kernel ptrace Command Blocking ✓ Real-Time Interception × None (Commands Execute Immediately)× NonePost-Execution Regex Logging
Keystroke & Session Recording ✓ Lightweight Asciinema Player × None× None✓ Video Screen Recording (Heavy)
Winbox Desktop 2FA via RADIUS ✓ RADIUS Mule (MS-CHAPv2 + OTP) × Not Native to RouterOS× None× No Winbox RADIUS Proxy
Visual Side-by-Side Config Diffing ✓ Color-Coded ngx-diff × Manual File Export & CompareBasic Oxidized/RANCID diff× None
1-Click Disaster Recovery Rollback✓ Automated Rollback Pipeline× Manual CLI Paste× None× None
Logic-Aware Sequences Flowcharts ✓ Visual Drag-and-Drop + Regex × Raw RouterOS Scripts× None× None
Rust Line-Rate Bandwidth Testing ✓ Multi-Gigabit btest-rs Single-Threaded RouterOS BTest× None (Only SNMP Counters)× None
White-Label Subscriber Self-Service ✓ Branded Portal + Safe NAT × None× None× None
Deployment & Data Sovereignty✓ 100% Self-Hosted On-Premise Docker✓ Local✓ Self-Hosted× Heavy Cloud / Enterprise Infrastructure
Complete Functional Audit

Free (Community) vs Pro Feature Matrix

An exhaustive breakdown of every operational feature across all 8 architectural domains.

Feature & Platform CapabilityCommunity Edition (Free)Pro Edition (Enterprise)
📡 Centralized Fleet & Topology Management
Managed Device Capacity✓ Unlimited Routers✓ Unlimited Routers (Tiered)
User Accounts & Multi-Site Groups✓ Unlimited Users✓ Unlimited Users + 17-Scope RBAC
Live NOC Wallboard TilesBasic Status Grids ✓ 24/7 Color-Coded Health Tiles
Dynamic Layer-2 Topology Auto-DiscoveryNeighbor List ✓ Interactive Graph via LLDP/MNDP/CDP
Multi-Vendor Support (Cisco, Linux, MikroTik)✓ Yes✓ Yes
🔐 Zero-Trust Remote Access & Security (PAM)
In-Browser SSH/CLI Terminal Gateway× No ✓ xterm.js WebSockets CLI Gateway
Kernel ptrace System-Call Command Blocking× No ✓ Real-Time Policy Interception
Asciinema Keystroke & Session Forensics× No ✓ Keystroke Playback & Speed Controls
Winbox Desktop 2FA via RADIUS Mule× No ✓ Dual OTP MFA on Port 1812/1813
Zero-Port Exposure Reverse WebFig ProxyDirect Port Forward✓ Tunnel-Proxied WebFig
AES-256 Encrypted Credential InjectionBasic Encryption✓ Hardware Security Module Support
⚙️ Configuration & Network Automation
Nightly Scheduled Backups (.rsc & .backup)Manual / Basic Daily✓ Automated Multi-Generation Scheduler
Side-by-Side Visual Diffing (ngx-diff)× No (Raw Files) ✓ Visual Color-Coded Comparison
1-Click Configuration Disaster Rollback× Manual CLI✓ 1-Click Rollback Action
Logic-Aware Sequences Flowchart Builder× No ✓ Visual Flowcharts with Regex Branching
Golden Master CPE Cloner× Manual✓ 1-Click Bulk Template Provisioning
Offline NPK Firmware Repository× External CDN✓ Local Air-Gapped NPK Cache
🌐 Network Services & Performance
Native WireGuard VPN Server & Mobile QR CodesManual WireGuard ✓ 1-Click Server & QR Peer Generator
Rust-Compiled btest-rs Speed Testing Engine× Single-Thread BTest ✓ Line-Rate Multi-Gigabit Testing
Curve25519 EC-SRP5 Encrypted Handshake× Standard✓ Hardened RouterOS v7 Handshake
🛡️ Auditing, Compliance & Alerting
5-Tier Unified Compliance Audit TrailBasic Local Logs✓ Full 5-Tier Immutable Audit Trail
Centralized Regex Syslog Classifier× Raw Syslog ✓ Pattern Extraction & Categorization
Multi-Channel Apprise Alert DispatcherEmail Only✓ Slack, Discord, Telegram, Webhooks, SMS
👥 Subscriber Self-Service Portal (ISPs & WISPs)
White-Label Subscriber Portal & Custom Domain× No ✓ Fully Brandable ISP Portal
1-Click Ping, DNS & Gateway Diagnostics× No✓ Automated Customer Self-Triage
Customer-Safe NAT Port Forwarding & Presets× No✓ Isolated Port Forwarding Rules
🤖 Network AI Copilot & Diagnostics
13 Sandboxed RouterOS AI Tools× No✓ Multi-Provider AI (Claude, GPT, Ollama)
Complete Tool Execution Compliance Trail× No✓ Immutable AI Reasoning Audit Trail
🏢 Enterprise Support & SLA
Community Forums & GitHub Discussions✓ Community Support✓ Priority Community Support
Direct Engineering SLA & Architecture Reviews× No✓ Guaranteed Business SLA & Dedicated Engineer