FireCtl
Monitor&Manage OPNsense
SAR 39.99
Workflow-first iOS app for OPNsense and Proxmox. Not a webview wrapper — the actions you actually do on mobile, two taps away. Launch sale until end of May: 50% off
FireCtl — Manage your OPNsense firewall from iPhone and iPad
Native iOS app for administrators, MSPs, and home-lab enthusiasts. Clean SwiftUI interface, fast response, full support for Dark Mode, Widgets, and iPadOS.
THE APPROACH
FireCtl is not a web UI wrapped in an app. Rather than rebuilding the OPNsense web interface on a small screen, FireCtl was designed around the workflows you actually do on mobile: promoting a lease to a reservation, pushing an IP from Safari into an alias, taking a snapshot before a firmware update, checking WAN failover on the go. Every screen is a tool, not a rebuilt browser tab.
FEATURES
Dashboard & Widgets
- Live system status at a glance
- Four home-screen widgets: Multi-WAN failover, system health, VPN connections, certificate expiry
- Audit log with complete configuration history
- What's New card on every version upgrade
Firewall
- Aliases with Share Extension (add hosts/IPs from Safari or any other app)
- Manage and filter rules
- Live logs with interface, action, and protocol filters, universal search, and auto-refresh
- Rule label visible inline in each log row
Network
- DHCP leases for ISC, Kea, and dnsmasq — all three backends in parallel
- Reservations management for all backends, promote-to-reservation in one tap
- Promote DHCP lease to FreeRADIUS user in two taps (with optional MAC address adjustment for random-MAC devices)
- ARP/NDP tables with filter
- VLAN library with profile-specific storage
- Active states card showing the connection table
Gateways
- Gateway list with live status (online, offline, down)
- Latency, RTT, and packet loss per gateway
- Multi-WAN failover visible in the dedicated home-screen widget
Services
- Unbound DNS with host and domain overrides
- OpenVPN, WireGuard, and Tailscale status
- FreeRADIUS (when installed)
- Kea and dnsmasq DHCP configuration
Diagnostics
- Ping with live statistics and stop control
- Traceroute with per-hop RTT
Certificates
- Complete list of all certificates
- Filter by expiry: 30, 60, 90 days
- Revoke and CRL management
- Delete directly from the app
System
- Firmware updates including plugin updates
- Configuration backups
- Snapshot management
- Reboot
NEW IN VERSION 1.5: PROXMOX VE INTEGRATION
Proxmox hosts are now part of FireCtl:
- Cluster overview with all nodes (CPU, RAM, storage, LAN rate, uptime)
- Start, stop, restart virtual machines and LXC containers
- Snapshots at VM and container level
- Auto-snapshot before OPNsense firmware updates with user abort option on failure
- Sort by name, CPU, RAM, uptime, or status
Profiles
- Manage up to 10 OPNsense and Proxmox installations
- iCloud sync (optional)
- Quick switching between profiles
- App lock with Face ID / Touch ID
LANGUAGES
English, German, French, Spanish, Italian, Portuguese (Portugal and Brazil)
SECURITY
- API keys stored in iOS Keychain, optionally synced via iCloud
- No telemetry tracking, no analytics, no advertising
- No cloud relay — direct connection from app to firewall
- Self-signed certificates supported with explicit trust confirmation
- Demo mode for trying the app without any real configuration
SUPPORTED VERSIONS
OPNsense: 24.x, 25.x, 26.x
Proxmox VE: 8.x, 9.x (in preparation)
HELP & DOCUMENTATION
firectl.com
firectl.com/docs/permissions
Beta testing thanks: Chris Gelatt (LinkedIn: https://www.linkedin.com/in/chrisgelatt/)
Ratings & Reviews
- This app has not received enough ratings or reviews to display an overview.
Proxmox VE integration: cluster overview with nodes (CPU, RAM, storage, LAN, uptime), VM and LXC management, snapshots, auto-snapshot before OPNsense firmware updates.
Tailscale support. Diagnostics tools: ping and traceroute.
Live logs: universal search, rule label inline, auto-refresh picker.
What's New card on version upgrade.
The developer, Tobias Zehndbauer, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Provider
- Tobias Zehndbauer
- Size
- 9 MB
- Category
- Utilities
- Compatibility
Requires iOS 17.0 or later.
- iPhone
Requires iOS 17.0 or later. - iPad
Requires iPadOS 17.0 or later.
- iPhone
- Languages
English and 5 more
- English, French, German, Italian, Portuguese, Spanish
- Age Rating
4+
- 4+
- Copyright
- © 2026 Tobias Zehndbauer

