FireCtl — Manage your OPNsense firewall from iPhone and iPad
Native iOS app for administrators, MSPs, and home-lab enthusiasts
FireCtl — Manage your OPNsense firewall from iPhone and iPad
Native iOS app for administrators, MSPs, and home-lab enthusiasts. Clean SwiftUI interface, Dark Mode, Widgets, and full iPadOS support.
THE APPROACH
FireCtl is not a web UI wrapped in an app. It is designed around the workflows you actually do on mobile: promoting a lease to a reservation, pushing an IP from Safari into an alias, taking a snapshot before a firmware update, checking WAN failover on the go. Every screen is a tool, not a rebuilt browser tab.
PRICING
Free to download with a 7-day free trial — no payment required to start. After the trial, the Dashboard (system health & online status) stays free forever. Pro unlocks everything else.
Subscriptions auto-renew unless cancelled at least 24 hours before the period ends, managed in your Apple ID settings. Already bought FireCtl before? You keep full Pro access automatically.
Privacy Policy: firectl.com/en/privacy · Terms of Use: firectl.com/en/terms
FEATURES
Dashboard & Widgets: live system status, four home-screen widgets (Multi-WAN failover, system health, VPN, certificate expiry), audit log with full configuration history.
Firewall: manage and filter rules, aliases with Share Extension (add hosts/IPs from any app), live logs with filters, universal search, and auto-refresh.
Network: DHCP leases for ISC, Kea, and dnsmasq in parallel, reservations for all backends, promote a lease to a reservation or FreeRADIUS user in a tap, ARP/NDP tables, VLAN library, active states.
Gateways: live status, latency, RTT, and packet loss per gateway, Multi-WAN failover widget.
Services: Unbound DNS with host/domain overrides, OpenVPN, WireGuard, and Tailscale status, FreeRADIUS, Kea and dnsmasq DHCP configuration.
Diagnostics: Ping and Traceroute with live statistics.
Certificates: full list, expiry filters (30/60/90 days), revoke, CRL, delete.
System: firmware and plugin updates, configuration backups, snapshots, reboot.
PROXMOX VE INTEGRATION
Cluster overview with all nodes (CPU, RAM, storage, uptime). Start, stop, and restart VMs and LXC containers, snapshots, auto-snapshot before OPNsense firmware updates.
PROFILES
Up to 10 OPNsense and Proxmox installations, optional iCloud sync, quick switching, app lock with Face ID / Touch ID.
SECURITY
API keys stored in the iOS Keychain. No telemetry, no analytics, no ads, no cloud relay — direct connection from app to firewall. Self-signed certificates supported. Demo mode included.
SUPPORTED VERSIONS
OPNsense 24.x, 25.x, 26.x · Proxmox VE 8.x, 9.x (in preparation)
LANGUAGES
English, German, French, Spanish, Italian, Portuguese (Portugal and Brazil)
HELP & DOCUMENTATION
firectl.com · firectl.com/docs/permissions
Beta testing thanks: Chris Gelatt (https://www.linkedin.com/in/chrisgelatt/)