Rampart for OPNsense

Rampart puts your OPNsense firewall in your pocket — and on your Mac. Monitor everything at a glance, manage rules safely, drop into an SSH terminal when the UI isn't enough, and ask an AI assistant about your network in plain language.

MONITOR
• Live dashboard: interfaces, gateways, throughput and DHCP leases
• Firewall logs and IDS/IPS alerts
• DNS activity with per-client breakdowns
• Real-time status the moment something changes

MANAGE — SAFELY
• View, add, enable, disable and delete firewall rules
• Every change runs behind a 60-second savepoint that automatically rolls back if it drops your own connection
• Redundant and duplicate rule detection

TERMINAL
• A secure SSH shell straight to the firewall — for what the API can't do
• A key you generate on-device, host-key pinning, one-tap quick commands
• An AI co-pilot proposes commands; you review and run them yourself

AI ASSISTANT
• Ask "explain my rules" or "is my firewall secure?" in natural language
• Two engines: fully private On-Device AI (Apple Intelligence), or Claude using your own Anthropic API key
• Proposed changes are always shown for your approval — never applied automatically

PRIVATE BY DESIGN
• Your firewall credentials are stored only in the device Keychain and never leave your device
• On-device AI keeps everything local; the Claude option asks for explicit consent before sending any context
• TLS certificate pinning (trust-on-first-use) for self-signed OPNsense boxes

NATIVE EVERYWHERE
• Built for iPhone, iPad and Mac — not a web wrapper
• Light and dark, Dynamic Type, and full accessibility support

Rampart connects to your own OPNsense router over your LAN, VPN or Tailscale, using an API key you create in OPNsense (System → Access → Users).

Rampart is an independent app and is not affiliated with, endorsed by, or sponsored by Deciso B.V. or the OPNsense project. OPNsense is a registered trademark of Deciso B.V.