---
title: "Remote MikroTik & OpenWrt Management | Wantastic"
description: "Reach remote networks behind CGNAT with Winbox, browser tools, private connectivity and fleet control in one workspace."
url: "https://wantastic.app"
---

# Wantastic

## Fix remote network problems from one private workspace.

Reach routers behind CGNAT, open Winbox, SSH and private web tools in the browser, then manage the whole fleet without stitching together VPNs, jump boxes and shared credentials.

> Remote device management for MikroTik, OpenWrt, Linux, Windows, and Android fleets with WireGuard-based access for RouterOS Winbox workflows, WebSSH, WebProxy, WUSP workflows, and management overlay.

## Product

- Website: https://wantastic.app
- Console: https://console.wantastic.app
- Start free: https://console.wantastic.app/#register
- Log in: https://console.wantastic.app/#login
- Core topics: MikroTik remote management, RouterOS Winbox access, OpenWrt/Linux/Windows/Android device operations, WantasticCore, wantasticd, WireGuard mesh, WebSSH, WebProxy, WUSP

## Start here

- [Getting started](https://wantastic.app/docs/getting-started): Create a workspace, connect the first device and prove that the remote path works.
- [Device onboarding](https://wantastic.app/docs/device-onboarding): Choose the correct client, create a unique identity and validate the first handshake.
- [Remote MikroTik setup](https://wantastic.app/docs/remote-mikrotik): Connect RouterOS 7 behind CGNAT and prove remote management without exposing Winbox.
- [Winbox and RoMON](https://wantastic.app/docs/winbox-romon): Create per-workflow Winbox access and reach downstream RouterOS devices.
- [WebSSH sessions](https://wantastic.app/docs/webssh): Open a browser terminal over the private overlay and recover from transient transport loss.
- [WebProxy for private UIs](https://wantastic.app/docs/webproxy): Open HTTP and HTTPS management pages without public port forwards.

## Latest from the blog

- [How Do Manufacturers Provision Devices with wantasticd genkey?](https://wantastic.app/blog/manufacturer-provisioning-wantasticd-genkey): Generate one stable device identity in the factory, print a safe customer claim QR, and let first boot complete enrollment without exposing the private key.
- [How Do I Self-Host WantasticCore with Docker?](https://wantastic.app/blog/self-host-wantasticcore-docker): Run the portal, WireGuard core, Postgres, Redis, nginx, certificates, and firewall in one container, then connect your first device.
- [How Do I Install wantasticd on Linux, OpenWrt, macOS, or Windows?](https://wantastic.app/blog/install-wantasticd-linux-openwrt-windows-macos): Choose interactive, token, or manual enrollment, install the agent as a native service, and verify the device in the Wantastic console.
- [How Do I Manage OpenWrt and IoT Fleets with WUSP and WISP Manager?](https://wantastic.app/blog/manage-openwrt-iot-wusp-wisp): Enroll a wantasticd endpoint, confirm its WUSP model, inspect fleet health, and apply supported device changes over the authenticated overlay.
- [How Do I Set Up Remote Winbox Without Opening Port 8291?](https://wantastic.app/blog/remote-winbox-without-port-8291): Connect RouterOS with native WireGuard, create a managed Winbox account, and give technicians access without exposing TCP 8291 to the internet.

## More

- Documentation: https://wantastic.app/docs
- Blog: https://wantastic.app/blog
- Remote MikroTik: https://wantastic.app/remote-mikrotik
- Roadmap: https://wantastic.app/roadmap
- FAQ: https://wantastic.app/faq
- llms.txt: https://wantastic.app/llms.txt
- Agent skills: https://wantastic.app/.well-known/agent-skills/index.json