Secure-by-default firewall appliance
An Ubuntu-based next-generation firewall appliance with stateful deep packet inspection, VLAN segmentation, VPN, and centralized multi-site management - open at the core.
Ubuntu-Based Firewall Appliance
Complete Firewall Coverage
Stateful firewall, deep packet inspection, VLAN segmentation, routing, and VPN - all in one appliance. Stop stacking a separate box for every layer of network security.
See all featuresTransparent Per-Appliance Pricing
One price per appliance. VPN, clustering, and centralized cloud management included - no per-user licensing or bolt-on security modules.
See pricing modelFast, Guided Deployment
Unbox, run the setup wizard, and hand off the network in a single site visit. Configure interfaces, VLANs, and firewall policy without a specialist certification.
How it worksWhen Attackers Come Knocking, Firecradle Stands Guard.
Most firewalls just filter packets by port and address. Firecradle inspects every connection - enforcing stateful rules and deep packet inspection while a signature-based detection engine watches for port scans, DDoS floods, and known malware in real time. Your traffic stays clean. Your policies stay yours. You're always the first to know when something isn't right.
Everything You Need, Out of the Box
Every core security and networking feature ships in the base appliance - DPI, VPN, threat prevention, and multi-site management included.
Stateful Firewall & Deep Packet Inspection
Every connection is tracked and every packet inspected at Layer 3-7 - enforce granular rules without slowing down legitimate traffic.
Stateful Inspection and Routing
Stateful inspection and routing, with link aggregation and VLAN segmentation for networks from a single office to multiple sites. Not yet benchmarked.
VPN & Secure Remote Access
IPsec, WireGuard, and OpenVPN tunnels for site-to-site and remote-access connectivity, encrypted end to end.
Full Network Visibility
Connection tracking, flow monitoring, and diagnostics dashboards give you real-time insight into every session crossing the firewall.
Signature-Based Threat Prevention
Rule and signature-driven detection flags port scans, DDoS floods, and known malware and exploit patterns - proven detection logic, not a black box.
Centralized Multi-Site Management
Manage every appliance from one cloud dashboard - push policies, monitor health, and manage multiple MSP client tenants from a single pane of glass.
Firewall engine with deep packet inspection
Link aggregation and VLAN segmentation
Appliances under one optional dashboard
In development, hands-on early access
Threat Detection Built Into Every Packet
Not just packet filtering. A layered defense that inspects, segments, and blocks - using rule and signature-based detection, so threats are stopped before they reach your network.
Signature-Based Malware & Exploit Detection
IncludedEvery connection is checked against known malware and exploit signatures by the intrusion prevention engine, with no cloud round-trip required.
VLAN Segmentation & Isolation
IncludedSplit your network into isolated VLANs so a compromised device or a single client site can't reach the rest of your infrastructure.
Connection Tracking & Anomaly Detection
IncludedStateful connection tracking flags port scans, connection floods, and other anomalous traffic patterns the moment they start - you're always the first to know.
DDoS & Port Scan Prevention
IncludedRule-based detection identifies scanning and flood patterns and blocks the offending traffic automatically, before it reaches the rest of your network.
Complete Network Security
Firecradle brings the openness of an Ubuntu-based appliance together with centralized, multi-site management and per-appliance licensing.
Advanced DPI & IPS
Deep packet inspection with an intrusion prevention system for complete threat detection and blocking
Threat Prevention & Protection
Rule and signature-based protection against known malware, exploits, port scans, and DDoS patterns
Centralized Management
Manage multiple firewalls from a single intuitive dashboard with policies, logging, and reporting
Link Aggregation
Link aggregation lets several physical links carry traffic for the stateful inspection engine. Performance has not been benchmarked yet.
VPN & Remote Access
Integrated IPsec, WireGuard, and OpenVPN for secure site-to-site and remote-access connectivity
Compliance & Logging
Detailed audit logs and comprehensive reporting for regulatory compliance requirements
Multi-Location Management Made Simple
Firecradle's advanced multi-tenant architecture empowers MSPs to manage firewalls across multiple client locations from a unified, hierarchical dashboard.
Hierarchical Client Management
Organize clients into logical groups and manage them at scale. Control firewalls across multiple customer organizations from one console with role-based access control
Unified Visibility & Analytics
Get aggregated insights across all customer firewalls. Real-time dashboards, threat analytics, and performance metrics give you complete infrastructure visibility
Automated Provisioning
Onboard new customer locations with automated policy templates, configuration cloning, and bulk updates to reduce manual setup
Tenant Isolation & Security
Complete data isolation between tenants with secure multi-tenancy. Each customer's data and configurations remain completely segregated and protected
Flexible Policy Management
Create reusable policy templates and deploy across multiple locations. Override and customize per-client while maintaining compliance standards
Centralized Alerting & Monitoring
Receive consolidated alerts across all customer environments. Intelligent filtering helps you focus on critical threats affecting multiple locations
Part of the Cradle family and the Takelan platform
Firecradle is the firewall from Takelan. It works on its own. You can also connect it to the Takelan platform with one switch. The connection is optional, and an air-gapped appliance runs with no Takelan access at all.
Takelan SSO sign-in
Admins can sign in with Takelan SSO, brokered through your cloud account. The appliance stores no SSO secret, and local accounts always keep working.
Learn more on takelan.comFeature flags from the cloud
Rollout switches set once in your cloud account can reach every firewall. If the cloud is unreachable, each setting falls back to a safe local default.
Learn more on takelan.comFleet console and alerts
An outbound-only agent reports to your cloud console. Alert rules written once can apply to every firewall.
Learn more on takelan.comDirectory login for remote access
Remote-access (ZTNA) users can sign in with LDAP or SSO identities that map to your directory.
Learn more on takelan.comCloud management is an optional outbound connection opened by the firewall. How secure connectivity works
Platform services are optional and switch-gated. Free within platform limits*; usage beyond limits may be charged.
*See takelan.com for current platform limits.
Security & Compliance Enterprise-Grade Protection
Controls you can inspect and audit. Detection is rule and signature based.
Signed updates
Over-the-air updates are refused unless the signature verifies against the release signing key.
Change history
Every configuration change is recorded: who changed what, when, and from where.
Two-factor and role-based access
TOTP two-factor for admin login, VPN, and captive portal, plus users, groups, and roles.
Compliance snapshots
PCI, HIPAA, and CIS-lite checklists with HTML export. These help you prepare; they are not a certification.
Compliance in progress
Takelan is working on SOC 1 and SOC 2 now. No report has been issued yet, and we will say so here when one is.
Enterprise Firewall. Open at the Core.
One appliance. Every core security layer. Built for MSPs and IT teams who want enterprise-grade protection with per-appliance licensing.