Every MikroTik router. One cloud dashboard.
Deploy WireGuard VPNs, WAN failover, security policies and NextDNS filtering across all your sites in minutes — and monitor everything in real time. No scripts, no router-by-router work.
How it works
From signup to a managed network in three steps.
No installs, no hardware swaps. Your MikroTik routers keep running — you just get one place to run them all.
Sign up in seconds. 7 days with every feature unlocked, no credit card.
Copy the command generated in your dashboard and paste it once in the RouterOS terminal.
Turn on VPN, failover, security policies and filtering for one router or all of them.
Platform
Stop managing routers one by one.
Connectivity, security, failover and NOC monitoring for your whole MikroTik fleet, in one interactive dashboard.
Connect
Site-to-site VPN mesh and WireGuard remote access for your teams.
Protect
Security policies with 16 protections and NextDNS content filtering for every site.
Observe
Real-time telemetry, latency, packet loss, Grafana dashboards and alerts.
Automate
WAN failover for up to 4 links, PCC load balancing, daily backups and 1-click updates.
Observe
See every link, latency and outage — before your users do.
Replace scattered tools with one live view of device health, WAN quality and VPN status across all your sites.
- Device health and link availability
- Latency and packet loss per WAN
- VPN tunnel telemetry
- Instant e-mail and webhook alerts
Failover & load balance
Keep every site online when a link fails.
Monitor up to 4 WAN links per router. When one degrades, traffic moves automatically — and comes back when it recovers.
- Up to 4 internet providers per router
- Automatic switching on link degradation
- Smart PCC load balancing
- Configured from the cloud, no manual mangle rules
VPN
Site-to-site and remote access VPN, without scripts.
Choose a concentrator and protocol, add your local networks, and every branch joins the tunnel. Give remote teams WireGuard access in a few clicks.
- WireGuard, OpenVPN, SSTP and L2TP/IPsec
- VPN dashboard with status and uptime of every tunnel
- WireGuard client-to-site for remote users
- Share access by temporary link or e-mail
Security policies
One security policy. Every router protected.
Build a policy once with firewall hardening, attack prevention and threat intelligence — then apply it to every site and track every blocked threat.
- 16 protections: SYN/ICMP flood, port scan, brute force, DDoS…
- Threat lists: FireHOL, DShield, AlienVault and TOR
- Security dashboard with the most attacked devices
- NextDNS content filtering by category
Features
Everything your MikroTik network needs. Included.
Built for ISPs, MSPs and corporate IT teams. One price per device, every feature.
Automated VPN Mesh
Site-to-site and WireGuard tunnels created instantly, without complex scripts.
WAN Failover (up to 4 links)
Continuous link health checks with automatic traffic switching on degradation.
Security Policies
Firewall hardening, attack prevention and threat-intelligence lists, applied fleet-wide.
NOC Monitoring
Real-time metrics, interface status, latency and device availability.
Content Filter 2.0 (NextDNS)
Corporate web filtering by category and threat blocking powered by NextDNS.
Secure Remote Access
Reach Winbox and SSH behind CGNAT or dynamic IPs without opening public ports.
MaiK AI Assistant
AI specialized in RouterOS for diagnostics, rule audits and automation — launching soon.
Daily Cloud Backup
Automatic, centralized configuration backups for fast disaster recovery.
Zero-Touch Provisioning
Ship routers straight to the customer; they configure themselves once online.
Solutions
Built for the teams that run MikroTik every day.
Manage hundreds of customer routers without a truck roll.
Provision, monitor and fix customer MikroTiks remotely — even behind CGNAT.
- →Zero-touch provisioning for new customers
- →Winbox/SSH access without public IPs
- →1-click RouterOS updates and daily backups
Before
- Site visits to fix configs
- Port forwards to reach routers
- Backups when someone remembers
With SD-WAN
- Fix it remotely in minutes
- Secure access through the cloud
- Automatic daily backups
One dashboard for every client you manage.
Standardize security, VPN and failover across all your customers' networks and track uptime with real data.
- →Users with role-based permissions
- →Reusable security policies for every client
- →Monitoring and alerts for every client
Before
- Different config on every client
- Firewall rules copied by hand
- No proof of uptime
With SD-WAN
- One standard, applied everywhere
- 16 protections in one policy
- Live uptime per client
Branches and remote staff, connected and protected.
Link every office with site-to-site VPN, give remote staff WireGuard access and keep each site online with failover.
- →Site-to-site VPN between all branches
- →WireGuard access for remote employees
- →NextDNS web filtering by category
Before
- VPNs configured with scripts
- A single link per branch
- Outages found by users
With SD-WAN
- Tunnels set up in a few clicks
- Automatic failover up to 4 links
- Alerts before users notice
Customers
Companies running their networks on MikroTik SD-WAN.
Enhanced security and centralized management. Site-to-site VPN secured branch communication and removed public firewall ports.
Simplified management and real-time NOC monitoring across multiple locations, with continuous uptime and fast alerts.
Stable connectivity and high-performance Wi-Fi for thousands of attendees over four days, centrally managed.
MaiK AI is on the way.
An AI assistant built for MikroTik engineers, for RouterOS diagnostics, firewall rule audits and scripts — coming soon to the platform.
Pricing
Simple pricing. Every feature included.
Pay per MikroTik device. No tiers, no setup fees, no hidden costs.
Start with a 7-day free trial on all features. Subscribe only if it fits your network.
Create your free accountNo credit card required · Visa and MasterCard accepted
Included on every device
- Centralized cloud dashboard
- Site-to-site & WireGuard VPN
- WAN failover & load balancing (up to 4 links)
- Security policies with 16 protections
- NextDNS web content filtering
- Real-time monitoring & alerts
- Winbox/SSH remote access via CGNAT
- Daily cloud backups
- MaiK AI assistant (coming soon)
Frequently asked questions
What is MikroTik SD-WAN?
A cloud management platform for MikroTik routers. It centralizes monitoring, automated VPNs, link failover, security policies, web content filtering and RouterOS automation in one dashboard.
How do I connect my routers?
Create your free account, copy the command generated in your dashboard and run it once in the RouterOS terminal. The router appears in the cloud dashboard, ready to manage.
Which MikroTik models and RouterOS versions are supported?
MikroTik SD-WAN is certified Made for MikroTik and supports RouterOS v6 and v7 on MikroTik routers.
Do my routers need a public IP?
No. Routers behind CGNAT or dynamic IPs can be managed and reached via Winbox/SSH through the cloud, without opening public ports.
Who is MikroTik SD-WAN for?
ISPs, IT support companies, Managed Service Providers (MSPs) and corporate IT teams.
How does billing work?
$5 USD per device every 30 days (R$25 for Brazilian companies, billed in BRL). We accept Visa and MasterCard. The 7-day trial is 100% free and needs no credit card.
Is my data secure?
Data is encrypted in transit and at rest, administrative accounts use multi-factor authentication and access follows role-based permissions. See our Security Considerations page for details.
Your MikroTik network, under control in the next 10 minutes.
Create your account, connect your first router and turn on failover, VPN and security from the cloud.
