From unboxing to filtering traffic in under an hour.

Basic for a single WAN and under 15 users, Intermediate for a branch office with a dedicated + backup link, Advanced for an HQ acting as your Site Mesh VPN coordinator. See the full spec comparison or check current pricing.

Every tier links directly to real, sourceable hardware listings (Qotom, Topton, CWWK) — no proprietary silicon, no waiting on a vendor allocation. Prefer to buy through us directly, or need a bundled quote with multiple units? Get a quote.

Write the NTPSense installer ISO to a USB drive, boot the appliance from it, and answer a short zero-touch setup wizard (WAN detection, initial zone assignment). The Rust daemon (ntpsense-configd) and Web UI are already scaffolded and running by the time setup finishes.

Connect to the MGMT interface (fixed at 10.252.252.100/24 by default), open the Web UI over HTTPS, and log in with the default admin credentials shown on first boot. You'll be required to set a new password and accept the End User License Agreement before the dashboard unlocks.

Assign WAN/LAN/DMZ roles to your remaining ports, set up DHCP per zone, and you're filtering traffic. Add Site Mesh VPN, Squid proxy, or WireGuard when you're ready — every plugin installs from the Web UI's Package Manager, no shell access required.