Features
Everything OpenVPN doesn't ship with
Grouped by what you're actually trying to do, not an undifferentiated list of bullet points.
Access governance
- Role-based access control (per-object, own-vs-any scope)
- Team-based user grouping
- Organization management
- Full admin audit log
- CAPTCHA on login & password reset (Turnstile or reCAPTCHA)
Connection controls
- MAC-address binding
- Geo restrictions (country / city)
- ASN (network) restrictions
- Device / OS restrictions
Network & tunneling
- Per-client SOCKS5 proxy — reachable only inside the VPN tunnel, never exposed publicly
- Per-client TCP/UDP port forwarding, with SSH & panel ports permanently reserved
- Named connection presets at install time (Default, High DPI Resistance, Mobile/Streaming Stable)
Usage enforcement
- Bandwidth quotas
- Soft or hard enforcement
- Diagnostics
- Health monitoring
Visibility
- Reporting & analytics
- Email notifications
- Per-team and per-user breakdowns
End-user experience
- Self-service portal
- Own profile management
- Own usage reports — no ticket needed
- Built-in support ticketing with full lifecycle tracking
- 10 animated login themes, or auto-rotate
Lifecycle
- VPN user lifecycle management
- Link existing standalone profiles
- Clean onboarding & offboarding
- Configurable default group for new accounts
Security & operations
- On-demand host security audit, with a numeric security score
- One-click automated remediation for select findings
- Break-glass super admin recovery, fully audit-logged
- Release availability alerts with self-upgrade tracking
- Full settings backup & restore (portable JSON, secrets excluded)