Community edition is open-source and free forever with unlimited routers. Upgrade to Pro for enterprise Zero-Trust PAM, side-by-side diffing, automated sequences, and white-label subscriber portals.
A line-by-line architectural comparison between the open-source community edition and the enterprise-grade Pro edition.
| Feature & Platform Capability | Community Edition (Free) | Pro Edition (Enterprise) |
|---|---|---|
| 📡 Centralized Fleet & Topology Management | ||
| Managed Device Capacity | Unlimited Routers | Unlimited Routers (Tiered) |
| User Accounts & Multi-Site Groups | Unlimited Users | Unlimited Users + RBAC (19 RouterOS User Policies) |
| Live NOC Wallboard Tiles | Basic Status Grids | 24/7 Color-Coded Health Tiles |
| Dynamic Layer-2 Topology Auto-Discovery | Neighbor List | Interactive Graph via LLDP/MNDP/CDP |
| Multi-Vendor Support (Cisco, Linux, MikroTik) | Yes | Yes |
| Network Map v2 with Root Cause Analysis (MikroTik) New in v2.1.0 | × No (Pro Feature) | ✓ Problems Drawer, Tree Layouts & NOC Mode |
| Workspace Modes (MikroTik / PAM / All) New in v2.1.0 | ✓ Yes | ✓ Yes |
| NATed Multi-Endpoint Devices (Several Hosts Behind One IP) New in v2.1.0 | ✓ Yes | ✓ Yes |
| 🔒 Zero-Trust Privileged Access Management (PAM) | ||
| In-Browser Web Terminal (xterm.js WebSockets) | × No (Pro Feature) | Zero-Client Secure Gateway |
Kernel ptrace System-Call Command Blocking | × No | ✓ Real-Time Policy Interception |
| Asciinema Keystroke & Session Forensics | × No | ✓ Keystroke Playback & Speed Controls |
| Winbox Desktop 2FA via Built-in RADIUS Server | × No | ✓ Dual OTP MFA on Port 1812/1813 |
| Zero-Port Exposure Reverse WebFig Proxy | Direct Port Forward | ✓ Tunnel-Proxied WebFig |
| Envelope-Encrypted Credential Injection | Basic Encryption | ✓ Per-Credential Envelope Encryption |
| Browser RDP & VNC (Any Windows / Linux Host) New in v2.1.0 | × No (Pro Feature) | ✓ HTML5 Sessions, Recorded (Terminal Gateway addon v1.3.0) |
| WebBox: WinBox in the Browser (MikroTik) New in v2.1.0 | × No (Pro Feature) | ✓ Sandboxed WinBox 4, Recorded as MP4 |
| RemoteApp Publishing New in v2.1.0 | × No (Pro Feature) | ✓ Publish Single Apps from RDP Hosts |
| Session DLP Policies New in v2.1.0 | × No (Pro Feature) | ✓ Clipboard, File Transfer, Watermark & Forensic Recording |
| ⚙️ Configuration & Network Automation | ||
| Nightly Scheduled Backups (.rsc & .backup) | Manual / Basic Daily | ✓ Automated Multi-Generation Scheduler |
| Side-by-Side Visual Diffing (ngx-diff) | × No (Raw Files) | ✓ Visual Color-Coded Comparison |
| 1-Click Configuration Disaster Rollback | × Manual CLI | ✓ 1-Click Rollback Action |
| Logic-Aware Sequences Flowchart Builder | × No | ✓ Visual Flowcharts with Regex Branching |
| Golden Master CPE Cloner | × Manual | ✓ 1-Click Bulk Template Provisioning |
| Offline NPK Firmware Repository | ✓ Local NPK Repository | ✓ Local Repository + Latest Cloud Channel |
| Safe Firmware Upgrades: SHA256 Verification, Update Modes & Retries (MikroTik) New in v2.1.0 | ✓ Yes | ✓ Yes |
| Multi-Step RouterOS v6 → v7 Upgrade Path (MikroTik) New in v2.1.0 | × No (Pro Feature) | ✓ Latest v6 → 7.12.1 → 7.13+ |
| Latest Cloud Channel & PtP Safe Ordering (MikroTik) New in v2.1.0 | × No (Pro Feature) | ✓ Stations Before APs, Stable / Long-Term / Testing / Development |
| Live Sync & Clone (MikroTik) New in v2.1.0 | × No (Pro Feature) | ✓ Diff-Based Minimal Patch, Scheduled or Live |
| 🌐 Network Services & Performance | ||
| Native WireGuard VPN Server & Mobile QR Codes | Manual WireGuard | ✓ 1-Click Server & QR Peer Generator |
Rust-Compiled btest-rs Speed Testing Engine | × Default Single-Thread | ✓ Throughput Limited Only by Your Test Server, Router & Link |
| Curve25519 EC-SRP5 Encrypted Handshake | × Standard | ✓ Hardened RouterOS v7 EC-SRP5 Handshake |
| 🛡️ Auditing, Compliance & Alerting | ||
| 5-Tier Unified Compliance Audit Trail | Basic Local Logs | ✓ Full 5-Tier Centralised, Searchable Audit Trail |
| Centralized Regex Syslog Classifier | × Raw Syslog | ✓ Pattern Extraction & High-Alert Categorization |
| Multi-Channel Apprise Alert Dispatcher | Email Only | ✓ 11 Built-in Channels plus Any Apprise URL |
| 👥 Subscriber Self-Service Portal (ISPs & WISPs) | ||
| White-Label Subscriber Portal & Custom Domain | × No | ✓ Fully Brandable ISP Portal |
| 1-Click Ping, DNS & Gateway Diagnostics | × No | ✓ Automated Customer Self-Triage |
| Customer-Safe NAT Port Forwarding & Presets | × No | ✓ Isolated Port Forwarding Rules |
| 🏗️ Sovereignty, Deployment & Support | ||
| 100% Self-Hosted On-Premise Docker Installation | ✓ Yes | ✓ Yes |
| Complete Data Sovereignty (Zero Cloud Exfiltration) | ✓ Yes | ✓ Yes |
| Support Channel & SLA | Community Forums & GitHub | Priority Direct Engineering Support & Custom SLA |
Deploy the free Community edition on your Linux server. Once installed, copy your instance serial number from the Settings panel and paste it into the Registration Portal at checkout.
MikroWizard