Why choose a secure-by-default firewall appliance
Firecradle isn't just another firewall - it's an Ubuntu-based NGFW appliance that gives you enterprise firewall, VPN, and threat-detection capability without per-feature licensing or vendor lock-in. Built for MSPs who need one platform that covers everything: firewall, connectivity, and threat visibility.
Most firewalls are built against MSPs.
Three problems every MSP knows. Three ways Firecradle solves them.
Firecradle runs on Ubuntu - documented and configured the way your network actually needs.
Pricing is in development; request a quote. VPN, VLANs and threat detection are part of the appliance.
Firecradle keeps the openness and adds a guided UX that doesn't assume deep routing knowledge.
Ransomware. Rogue Devices. Link Failures.
DDoS. WAN Outages. Node Failures.
Firecradle is designed to address each of these threat categories with a rule-based firewall, VPN, link bonding and HA.
Rule-based threat detection flags command-and-control beaconing and known-bad indicators, and can block the connection at the perimeter. Detection is rule and signature based.
Dual-WAN link bonding keeps traffic flowing when one connection drops. Failover is designed to happen automatically, without re-cabling.
VLAN segmentation and connection tracking can isolate unknown devices on their own VLAN, limiting what a compromised endpoint can reach.
Stateful inspection and connection-rate limiting help limit flood traffic at the edge. Not yet tested under load.
Policy-based routing can reroute traffic across a secondary path or VPN tunnel when a site-to-site link goes down.
Active-passive clustering keeps a standby node synchronized. If the primary appliance goes down, the standby is designed to take over session state.
"If it's clustered, it should be tested."
Automated failover drills are planned so high availability is verified before an outage. Firecradle is in development (alpha); no uptime guarantee is offered.
Track Configuration. Stay Visible. Know What's at Risk.
Four design goals for the appliance. Firecradle is in development (alpha).
Configuration changes are designed to be diffed against the last known-good state and logged, so changes leave a trail.
The optional cloud dashboard is designed to show appliances, rule sets and VPN tunnel status across client sites.
Traffic is inspected against your rule set, so you can see what is blocked, what is flagged and what is passing through.
Automated failover testing is planned. Firecradle is in development (alpha) and makes no uptime or availability commitment.
6 Reasons MSPs Choose Firecradle
Not a longer feature list - the right features, priced transparently, with threat detection built in.
All-In-One Platform
One appliance covers firewall, VPN, VLANs, routing, and traffic shaping. Unified rule engine. Unified management. One appliance instead of several.
Simple Pricing Model
The intent is no licensing per feature and no add-ons for VPN seats. Pricing is still in development; request a quote.
Simplicity-First Design
A guided wizard takes each client site from unboxing to a default-deny policy, to simplify configuration and handoff.
Threat Detection - Built In
Included FreeMost firewalls sell intrusion detection as an add-on subscription. Firecradle is designed to ship rule and signature-based threat detection as part of the appliance.
Native Clustering & HA
High availability isn't bolted on - it's built into every appliance. Automated failover testing is planned.
Included Cloud Management
Monitor all appliances from one dashboard. Manage rule sets centrally. No third-party tool costs. Manage multiple appliances from one place.
Compliance-Ready Out of the Box
Every feature needed for regulated industries is included - no compliance add-on required.
Who Benefits Most
Firecradle is purpose-built for MSPs and the clients they serve.