Skip to content
SPECIFICTION
Get listed

OPNsense

opnsense.org

Free plan Open source WebiOSAndroidAPISelf-hosted
Visit opnsense.org
Spec score 9.5 #1 of 81 in Firewall Software

What it is

OPNsense is an open-source firewall and routing platform based on FreeBSD, available for self-hosted, web, and API use. Its stateful firewall supports IPv4 and IPv6 and provides live views of passed and blocked traffic. VPN integrations include IPsec, OpenVPN, Tinc, and WireGuard. CARP supports automatic hardware failover with state synchronization, and inline intrusion prevention uses Suricata with Proofpoint Emerging Threats Open rules. The modular Model View Controller framework supports extensions and API functionality. Authentication options include LDAP, Active Directory, RADIUS, captive portal authentication, and 802.1X through a plugin. Community Edition is free at free under the 2-clause BSD license, and installation is limited to x86-64 architecture. Official setup guides cover AWS images, OVA images, and an Azure Virtual Appliance. Business subscriptions add commercial features and support; listed prices are €149 a year or €399 a year for three years. The project began in 2014 as a fork of pfSense and m0n0wall, with its first official release in January 2015.

Spec sheet

What it does
OPNsense is a FreeBSD-based open-source firewall and routing platform administered through a web interface.Read 15 Oct 2026 · docs.opnsense.org
Free plan
YesRead 21 Sep 2026 · opnsense.org
API
OPNsense exposes HTTP GET and POST API endpoints using module/controller/command paths and JSON payloads.Read 15 Oct 2026 · docs.opnsense.org
Support
Commercial support offers network-design advice, issue solving, and custom development for an annual fee.Read 15 Oct 2026 · docs.opnsense.org
License
OPNsense is available under the Open Source Initiative approved 2-clause BSD license.Read 1 Oct 2026 · opnsense.org
Headquarters
Middelharnis, the NetherlandsRead 28 Sep 2026 · opnsense.org
Founded
2014Read 28 Sep 2026 · opnsense.org
Maker
Deciso B.V. is identified as the founder and sustaining company behind OPNsense.Read 15 Oct 2026 · docs.opnsense.org
API and extensibility
Its modular Model View Controller framework makes the product extensible and provides API functionality.Read 1 Oct 2026 · opnsense.org
API credentials
API access uses per-user key and secret pairs; secrets are downloadable once and must be regenerated if lost.Read 15 Oct 2026 · docs.opnsense.org
Architecture limit
Official installation documentation supports x86-64 processors only.Read 15 Oct 2026 · docs.opnsense.org
Authentication
The product documents one-time-password authentication and supports LDAP, Active Directory, RADIUS, captive portal authentication, and 802.1X through plugins.Read 15 Oct 2026 · opnsense.org
Authentication integrations
The platform supports LDAP and Active Directory, RADIUS, captive portal authentication and 802.1X through a plugin.Read 1 Oct 2026 · opnsense.org
Business support
The Business Support Subscription includes remote email and phone support, implementation help, migration assistance, troubleshooting and hot fixes, with two hours included.Read 1 Oct 2026 · shop.opnsense.com
Changelog
Core and plugin changelogs are exposed through System > Firmware and are also published on the forum, GitHub, and project blog.Read 15 Oct 2026 · docs.opnsense.org
Cloud deployment
AWS Marketplace provides an official EC2 image sold by Deciso Sales B.V.; OVA images are commercial rather than free community downloads.Read 15 Oct 2026 · docs.opnsense.org
Cloud platforms
Official setup guides cover AWS images, OVA images and an Azure Virtual Appliance.Read 1 Oct 2026 · docs.opnsense.org
Company facts
Deciso's LinkedIn page lists headquarters in Middelharnis, 11–50 employees, and a 2000 founding year.Read 15 Oct 2026 · nl.linkedin.com
Documentation depth
Official documentation covers feature guides, API reference, architecture, security, releases, hardware, installation, virtualization, and troubleshooting.Read 15 Oct 2026 · docs.opnsense.org
Extensibility
Its Model View Controller architecture automatically gives API capabilities to components using the full architecture, and plugins extend the base system.Read 15 Oct 2026 · docs.opnsense.org
Firewall capabilities
The platform includes a stateful firewall with IPv4 and IPv6 support and live views of blocked or passed traffic.Read 1 Oct 2026 · opnsense.org
High availability
CARP-based hardware failover synchronizes state between appliances for high availability.Read 15 Oct 2026 · opnsense.org
Install media
Installers are offered as DVD, VGA USB, serial USB, and nano images, with embedded and full image modes.Read 15 Oct 2026 · docs.opnsense.org
Installation architecture
The software setup and installation is available for the x86-64 microprocessor architecture only.Read 1 Oct 2026 · docs.opnsense.org
Intrusion prevention
Inline intrusion prevention uses Suricata and Proofpoint Emerging Threats rules, with optional ET PRO subscriptions.Read 15 Oct 2026 · opnsense.org
Licence
OPNsense code is released under the OSI-approved BSD 2-Clause Simplified licence, allowing modification and redistribution subject to its conditions.Read 15 Oct 2026 · docs.opnsense.org
Limit: Android app
An Android reviewer reported that firewall-rule editing lacks options such as source/destination inversion and gateway selection, while another reported a WireGuard status error.Read 15 Oct 2026 · play.google.com
Limit: complexity and documentation
G2 reviewers mention difficult initial setup, many configuration choices, and documentation that was not helpful enough for some users.Read 15 Oct 2026 · g2.com
Limit: iOS app
An iOS reviewer described the app as initially limited and requested DHCP management, broader rule support, and integrations for Zenarmor, CrowdSec, WireGuard, and AdGuard Home.Read 15 Oct 2026 · apps.apple.com
Limit: PeerSpot complaints
PeerSpot summaries cite complex configuration, VPN limitations, proxy dependence for ClamAV, desired virtual-server and reporting improvements, unclear documentation, and support accessibility issues.Read 15 Oct 2026 · peerspot.com
Minimum hardware
The documented minimum is a 1 GHz dual-core CPU, 3 GB RAM, serial or VGA installation, and a 4 GB SD or CF target; disk-writing features are excluded.Read 15 Oct 2026 · docs.opnsense.org
Multi-WAN
Multi-WAN operation supports load balancing and failover.Read 15 Oct 2026 · opnsense.org
Notable news: reseller
On May 7, 2026, IT for WorkStyle announced it had become Deciso's sole authorized OPNsense reseller in Japan.Read 15 Oct 2026 · prtimes.jp
Plugins
Plugins are installable through the interface, but community or commercial support and maintenance vary by plugin.Read 15 Oct 2026 · docs.opnsense.org
Praise: PeerSpot features
PeerSpot users highlight easy configuration, reporting, WireGuard VPN security, VLAN/DMZ isolation, scalability, frequent updates, plugins, and dual-WAN reliability.Read 15 Oct 2026 · peerspot.com
Praise: usability and community
G2 reviewers repeatedly praise the flexible firewall, helpful community, user-friendly interface, content filtering, performance, and regular updates.Read 15 Oct 2026 · g2.com
Product type
OPNsense is an open-source, user-friendly firewall and routing platform based on FreeBSD.Read 1 Oct 2026 · opnsense.org
Project origin
OPNsense began as a fork of pfSense and m0n0wall in 2014, with its first official release in January 2015.Read 1 Oct 2026 · opnsense.org
Rating on Apple App Store
3.7 out of 5 from 10 ratings for the independent OPNManager+ app.Read 15 Oct 2026 · apps.apple.com
Rating on G2
4.8 out of 5 from 5 reviews.Read 15 Oct 2026 · g2.com
Rating on Google Play
3.8 out of 5 from 9 reviews for the independent OPNsense Manager app.Read 15 Oct 2026 · play.google.com
Rating on PeerSpot
8.2 out of 10; the page does not state a review count in the opened content.Read 15 Oct 2026 · peerspot.com
Recommended hardware
The recommended specification is a 1.5 GHz multi-core CPU, 8 GB RAM, and a 120 GB SSD.Read 15 Oct 2026 · docs.opnsense.org
Release news
Community Edition 26.1 added firewall MVC/API coverage, Suricata 8 divert inspection, IPv6 improvements, router-advertisement APIs, and host discovery; it also fixed an LDAP-authentication injection bypass.Read 15 Oct 2026 · docs.opnsense.org
Reporting
Monitoring includes zoomable RRD graphs and NetFlow views of active users, interfaces, ports, and applications.Read 15 Oct 2026 · opnsense.org
Security updates
OPNsense provides weekly security updates and follows a cycle of two major releases annually.Read 1 Oct 2026 · opnsense.org
Security verification
Business Edition materials describe third-party LINCE security verification and a commercial firmware repository with a more conservative upgrade path.Read 15 Oct 2026 · shop.opnsense.com
Stateful firewall
The platform provides stateful IPv4 and IPv6 firewalling with live views of passed and blocked traffic.Read 15 Oct 2026 · opnsense.org
Target users
The Business Edition is intended for companies, enterprises and professionals seeking a selective upgrade path and additional commercial features.Read 1 Oct 2026 · shop.opnsense.com
Traffic management
Firewall tools include NAT, aliases, rule categories, traffic shaping, bandwidth reservations, prioritization, and FQ-CoDel.Read 15 Oct 2026 · docs.opnsense.org
VPN
Built-in VPN support covers IPsec, OpenVPN, and pluggable Tinc and WireGuard implementations.Read 15 Oct 2026 · opnsense.org
VPN support
OPNsense integrates IPsec, OpenVPN, Tinc and WireGuard VPN technologies.Read 1 Oct 2026 · opnsense.org

Plans and prices

Business Edition Price not published 1 installation Read 21 Sep 2026 · shop.opnsense.com
Business Edition 3Yr Price not published 1 installation Read 21 Sep 2026 · shop.opnsense.com
Community Edition Free Open-source community firewall · self-hosted x86-64 installation Read 15 Oct 2026 · opnsense.org
OPNsense Business Edition 1yr subscription €149 a year €149,00 / year One installation · commercial firmware repository · GeoIP database · OVA image · OPNcentral · 20% support discount Read 15 Oct 2026 · shop.opnsense.com
OPNsense Business Edition (3Yr) €399, paid once €399,00 for 3 years (sale price), pre-paid without renewal One installation · commercial firmware repository · GeoIP database · OVA image · OPNcentral · 20% support discount Read 15 Oct 2026 · shop.opnsense.com
OPNsense Business Edition 3Yr €399 a year €399,00 for 3 years (sale price) One installation · commercial firmware repository · official OVA image · OPNcentral · GeoIP database Read 1 Oct 2026 · shop.opnsense.com

Every OPNsense plan and price →

Strong points and limits

Strong points

  • Supports IPv4 and IPv6 firewalling.
  • Integrates four VPN technologies.
  • CARP provides failover with state synchronization.
  • Offers weekly security updates.
  • Community Edition is free under a 2-clause BSD license.

Limits

  • Installation is limited to x86-64 architecture.
  • Business Edition pricing is listed in EUR.
  • Business support includes two hours.

Who it suits

Community Edition may suit users seeking a self-hosted firewall and routing platform on x86-64. Business subscriptions are intended for companies, enterprises, and professionals seeking a selective upgrade path and additional commercial features.

Verdict

OPNsense combines firewalling, routing, VPNs, and failover with a free Community Edition and paid business subscriptions. Its architecture restriction and the distinction between community and business offerings are key considerations.

Where Specifiction places it

Alternatives to OPNsenseAll alternatives →