Community edition is open-source and free forever with unlimited routers. Upgrade to Pro for enterprise Zero-Trust PAM, side-by-side diffing, automated sequences, and white-label subscriber portals.
A line-by-line architectural comparison between the open-source community edition and the enterprise-grade Pro edition.
| Feature & Platform Capability | Community Edition (Free) | Pro Edition (Enterprise) |
|---|---|---|
| 📡 Centralized Fleet & Topology Management | ||
| Managed Device Capacity | Unlimited Routers | Unlimited Routers (Tiered) |
| User Accounts & Multi-Site Groups | Unlimited Users | Unlimited Users + 17-Scope RBAC |
| Live NOC Wallboard Tiles | Basic Status Grids | 24/7 Color-Coded Health Tiles |
| Dynamic Layer-2 Topology Auto-Discovery | Neighbor List | Interactive Graph via LLDP/MNDP/CDP |
| Multi-Vendor Support (Cisco, Linux, MikroTik) | Yes | Yes |
| 🔒 Zero-Trust Privileged Access Management (PAM) | ||
| In-Browser Web Terminal (xterm.js WebSockets) | Standard Terminal | Zero-Client Secure Gateway |
Kernel ptrace System-Call Command Blocking | × No | ✓ Real-Time Policy Interception (PAM-0004) |
| Asciinema Keystroke & Session Forensics | × No | ✓ Keystroke Playback & Speed Controls |
| Winbox Desktop 2FA via RADIUS Mule | × No | ✓ Dual OTP MFA on Port 1812/1813 (PAM-0002) |
| Zero-Port Exposure Reverse WebFig Proxy | Direct Port Forward | ✓ Tunnel-Proxied WebFig |
| AES-256 Encrypted Credential Injection | Basic Encryption | ✓ Hardware Security Module Support |
| ⚙️ Configuration & Network Automation | ||
| Nightly Scheduled Backups (.rsc & .backup) | Manual / Basic Daily | ✓ Automated Multi-Generation Scheduler |
| Side-by-Side Visual Diffing (ngx-diff) | × No (Raw Files) | ✓ Visual Color-Coded Comparison |
| 1-Click Configuration Disaster Rollback | × Manual CLI | ✓ 1-Click Rollback Action (AUTO-0003) |
| Logic-Aware Sequences Flowchart Builder | × No | ✓ Visual Flowcharts with Regex Branching |
| Golden Master CPE Cloner | × Manual | ✓ 1-Click Bulk Template Provisioning |
| Offline NPK Firmware Repository | × External CDN | ✓ Local Air-Gapped NPK Cache (AUTO-0009) |
| 🌐 Network Services & Performance | ||
| Native WireGuard VPN Server & Mobile QR Codes | Manual WireGuard | ✓ 1-Click Server & QR Peer Generator |
Rust-Compiled btest-rs Speed Testing Engine | × Default Single-Thread | ✓ Line-Rate Multi-Gigabit Testing |
| Curve25519 EC-SRP5 Encrypted Handshake | × Standard | ✓ Hardened RouterOS v7 EC-SRP5 Handshake |
| 🛡️ Auditing, Compliance & Alerting | ||
| 5-Tier Unified Compliance Audit Trail | Basic Local Logs | ✓ Full 5-Tier Immutable Audit Trail |
| Centralized Regex Syslog Classifier | × Raw Syslog | ✓ Pattern Extraction & High-Alert Categorization |
| Multi-Channel Apprise Alert Dispatcher | Email Only | ✓ Slack, Discord, Telegram, Webhooks, SMS |
| 👥 Subscriber Self-Service Portal (ISPs & WISPs) | ||
| White-Label Subscriber Portal & Custom Domain | × No | ✓ Fully Brandable ISP Portal |
| 1-Click Ping, DNS & Gateway Diagnostics | × No | ✓ Automated Customer Self-Triage |
| Customer-Safe NAT Port Forwarding & Presets | × No | ✓ Isolated Port Forwarding Rules |
| 🏗️ Sovereignty, Deployment & Support | ||
| 100% Self-Hosted On-Premise Docker Installation | ✓ Yes | ✓ Yes |
| Complete Data Sovereignty (Zero Cloud Exfiltration) | ✓ Yes | ✓ Yes |
| Support Channel & SLA | Community Forums & GitHub | Priority Direct Engineering Support & Custom SLA |
Deploy the free Community edition on your Linux server. Once installed, copy your instance serial number from the Settings panel and paste it into the Registration Portal at checkout.